Recruitment applicants

Information about processing personal data for job applicants

Fulfilling the obligations according to the art. 13 sec. 1 and 2 or art. 14 sec. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter be referred to as “GDPR” the data controller informs that:

1. PricewaterhouseCoopers Bulgaria EOOD, EIK 831364383, or PwC Legal Bulgaria Partnership, EIK 180758232, or PricewaterhouseCoopers Audit OOD, EIK 121499387, with its seat and registered address in 9-11 Maria Louisa Blvd., Sofia 1301, Bulgaria, („PwC”, “we”) will be the controller of your personal data.

2. If you have any questions or complaints regarding your personal data being processed by PwC, and/or the rights you possess, please contact Data Protection Officer:

via e-mail: bg_privacy@pwc.com;

via phone: +359 2 9355 200

3. PwC processes your personal data for the following purposes and on the following legal bases:

A legal basis	A purpose of the processing
Art. 6 sec. 1 let. b) of the GDPR – taking steps at the request of the data subject prior to entering into a contract Art. 6 sec. 1 let. c) of the GDPR – legal obligation with “under the Law on Labour Migration and Labour Mobility (in case of recruitment of foreign citizens) Art. 6 sec. 1 let. of the GDPR – consent applies if candidate points out another data than in Labor Code (e.g. photo in resume) Art. 9 sec. 2 let. a) of the GDPR – consent applies if special categories of personal data (sensitive data) are contained in application Art. 10 of the GDPR - processing is authorised by Union or Member State law applies if a job position requires collecting personal data relating to criminal convictions and offences or related security measures	Performing a recruitment process for the job offered; Procedure of obtaining the work permit (in case of recruitment of foreign citizens).
Art. 6 sec. 1 let. a) of the GDPR - consent	Participating in further recruitment processes conducted by PwC; Sending notifications about job offers in PwC and job related events organized or with the participation of PwC such as career fair.
Art. 6 sec. 1 let. f) of the GDPR - legitimate interest pursued by PwC	Exercising legal claims.

4. Your personal data will not be disclosed to third parties except the following recipients:

other PwC global network member firms (each of which is a separate independent legal entity). For details of our member firm locations, please visit the website. We may share personal data with other PwC member firms where necessary for administrative purposes and legitimate interests pursued by the PwC referred to in section 3;
service providers that aren’t members of the PwC network (“third party service providers”) to process on PwC’s behalf. Third party service providers may include providers of IT services, including identity management, website hosting, marketing automation and management, CRM, data analysis, data back-up, security and storage services in so far as it refers to the business relation with PwC;
governmental or regulatory authorities, courts and law enforcement authorities or agencies as required by and/or in accordance with applicable law or regulation.

5. Your personal data may be transferred to countries outside the European Economic Area (EEA) – third countries, based on:

art. 45 sec. 1 of the GDPR - European Commission’s adequacy decision (applies for countries, which were subject of decision);
art. 46 sec. 2 let. c) of the GDPR - standard data protection clauses adopted by the European Commission.

6. Your personal data will be retained for a term of the recruitment process and 6 months after that. If you provide us consent for further recruitment processes your personal data will be retained until you withdraw the consent, but no longer than 2 years.

7. In accordance with processing your personal data you have the following rights:

right of access, to rectification (updating), to erasure, to restriction of processing, to data portability and to object;
to withdraw a consent, it is possible by sending an email
bg_privacy@pwc.com. Withdrawal of the consent does not affect the legality of processing based on consent prior to its withdrawal;
to lodge a complaint with a data protection authority (Commission for Personal Data Protection).

8. The provision of personal data is mandatory in the field of personal data specified in labour law. For the rest of the categories of personal data, its provision is voluntary.

9. In some recruitment processes PwC uses recruitment agencies for candidates and in at that cases:

recruitment agency are sources of candidate’s personal data;
categories of personal data concerned: name, surname, contact data provided by a candidate and other categories of personal data which are contained in applications provided voluntary by a candidate.