Privacy and GDPR-agreement

Information on personal data protection - Applicants

We are committed to protecting the privacy of anyone applying for a job with our organization ("Applicants").

In this sense, we provide below the information on how we treat the personal data of the Candidates. If you are selected to work with us and accept our offer, we will, of course, collect and process more information about you and make other uses of your personal data – this will be explained to you at the stage of joining our organization.

1. Person responsible for the processing of candidates' data

Data controller	Efacec Serviços Corporativos, S.A. (NIF 513233962), as well as any other entity of the Efacec Group that may become the employer of the applicant
Address	Lugar da Arroteia 4465-587 Leça do Balio
Email	recrutamento@efacec.com

2. Information we treat about candidates

Efacec collects information about Candidates as part of the recruitment process. Some of this information is collected directly from the Candidate, and another is obtained through third parties (e.g. professional referrals), or through publicly available information, namely through the social network LinkedIn.

When you provide us with data from third parties (for example, so that we can request professional references), you warrant that you have informed such persons about the communication and processing of their personal data in accordance with what is indicated in this Information.

The personal data of the Candidates will be collected and processed for the purposes listed in the table below.

Purposes	Data categories
Organize and manage the recruitment process, assess the suitability of the candidate for the position or job in question and respond to professional applications	Identification and contact data; Data relating to qualifications, qualifications and professional experience; Information about the current position or job position and/or for which you are applying and/or for which you are being considered, including career plan and professional goals, current level of remuneration and/or expectation of remuneration; Other information provided by the Candidate in the CV, similar document or interview.
Communicate with the Candidate as part of his/ her application	Identification and contact data.
In certain cases, we may carry out selection tests and/ or psychotechnical tests (for example: conducting practical cases, or personality tests through the use of algorithms and artificial intelligence). These selection tests and/ or psychotecnical tests may involve the creation of a profile. However, we note that you have the right not to have a decision made about you solely based on automatic processing, namely profiling, if that decision produces legal effects on you or if it significantly affects you. Furthermore, we note that, as part of its recruitment process, Efacec does not make exclusively automated decisions about Candidates.	Identification and contact data; Data relating to qualifications, qualifications and professional experience; Current level of remuneration and/or expectation of remuneration; Test results; Other information that is provided by the candidate in the CV, similar document or interview.
Data analysis and statistics	Application data; Identification and contact data; Data relating to qualifications, qualifications, professional experience and educational institution; Information about your current position or job position and/or for which you are applying and/or for which you are being considered, including career plan and professional goals, current level of remuneration and/or expectation of remuneration; Other information provided by the Candidate in the CV, similar document or interview.
Compliance with legal obligations regarding equality and non-discrimination	Identification and contact data; Data relating to qualifications, qualifications and professional experience; Information about the current position or job position and/or for which you are applying and/or for which you are being considered, including career plan and professional goals, current level of remuneration and/or expectation of remuneration; Other information provided by the Candidate in the CV, similar document or interview.

The provision by the Candidate of their personal data is mandatory, so the non-availability of their data will make it impossible to assess their application.

3. Legal basis for the processing of personal data of candidates

The personal data of the Candidates are processed by Efacec based on the following legal grounds:

Purposes	Legal basis
Organize and manage the recruitment process, assess the suitability of the candidate for the position or job in question and respond to professional applications	The need for the processing for the performance of a contract to which the data subject is a party or for pre-contractual or contractual steps at the request of the data subject; Necessity of the processing for the purpose of the legitimate interests of the controller, namely to verify the suitability of the profile of the Candidate to the available job, which we believe to be absolutely compatible with the interests of the Candidate.
Communicate with the Candidate as part of his/her application	Necessity of the processing for the performance of a contract to which the data subject is a party or for pre-contractual or contractual steps at the request of the data subject.
Perform selection tests and/or psychotecnical tests (e.g., conducting practical cases, or personality tests using algorithms and artificial intelligence)	Necessity of the processing for the purpose of the legitimate interests of the controller, namely to verify the suitability of the profile of the Candidate to the available job, which we believe to be absolutely compatible with the interests of the Candidate.
Data analysis and statistics	Internal analysis of the effectiveness of recruitment processes and improvement of these processes.
Compliance with legal obligations regarding equality and non-discrimination	Necessity of the processing for the fulfillment of a legal obligation to which Efacec is subject.

4. Recipients of personal data

Whenever Efacec deems it appropriate and only if it consents, the personal data of the Candidates may be transmitted to other entities of the Efacec Group so that these entities can inform you of their recruitment processes. If Efacec understands that it is in the interest of the Candidate to transmit their data in the aforementioned ways, we will ask for their consent for this purpose, being free to withdraw such consent at any time.

Personal data may also be transmitted, where necessary, to third parties for the purpose of obtaining professional references, to public entities (e.g. Authority for Working Conditions) for the purpose of demonstrating compliance with legal obligations, or to courts for the purpose of declaring, exercising or defending a right in a judicial proceeding.

Efacec informs that, in the context of recruitment processes, it may use service providers that assist in the recruitment process (such as recruitment agencies) or service providers to support Efacec's business and operations (such as technology service providers, IT service providers, security companies, infrastructure management and maintenance companies, audit service providers and legal advice service providers). Within the scope and for the exercise of this subcontracted provision of services, these subcontractors will have, or may have access to the personal data of the Candidates, processing such data in the name and on behalf of Efacec, always and only in accordance with the express instructions given to them by Efacec and as a result of the contract concluded between the latter and those service providers.

We inform you that Efacec follows strict criteria in the selection of service providers in order to comply with its data protection obligations, committing to sign with them a data processing agreement, which includes, among others, the following obligations: apply appropriate technical and organizational measures; process personal data for the agreed purposes and responding exclusively to the documented instructions of the Employer; and delete or return the data to the Employer upon completion of the services.

5. Term of retention of personal data

Term
Applications as part of a recruitment procedure for a specific vacancy	The personal data of the Candidates will be kept during the recruitment process; If selected for the vacancy, the Candidate's data will also be kept for the purposes of the employment relationship, applying, in the latter case, the terms and deadlines defined for the employment relationship; If the Candidate is not selected in the scope of the recruitment process, his/her data will only be kept if he/she gives us his/her consent for this purpose and, in this case, for a period of 1 year. Efacec will ask the Candidate for such consent at the end of the recruitment period, being free to withdraw such consent at any time; The personal data of the Candidate will be kept for a period of 5 years to comply with the legally imposed obligations regarding the registration of recruitment processes and for the period necessary for the purposes of declaring, exercising or defending a right in a judicial proceeding.
Spontaneous applications	The personal data of the Candidates will be kept for a period of 1 year and used for recruitment processes that begin in that period. In this case, the above deadlines will apply; The personal data of the Candidate will be kept for a period of 5 years to comply with the legally imposed obligations regarding the registration of recruitment processes and for the period necessary for the purposes of declaring, exercising or defending a right in a judicial proceeding.

6. Rights of candidates

Candidates will have the following rights in relation to their personal data:

Right	Content
Access	Right to obtain from Efacec confirmation as to whether or not it processes your personal data, and may request a copy thereof.
Rectification	Right to rectify personal data that is inaccurate or incomplete.
Deletion	In certain situations, you have the right to erasure of your personal data.
Limitation	In certain situations, right to limitation of your personal data, in which case Efacec will mark the Candidate's Personal Data and will only use it again with the consent of the Candidate or if they are necessary for a judicial process.
Portability	In certain situations, ask Efacec for the Candidate's Personal Data in a structured, commonly used and machine-readable format and, if possible, for Efacec to transmit them directly to a third party indicated by the Candidate.
Opposition	In certain situations, the right to object, at any time and for reasons related to your particular situation, to the processing of your personal data, in which case Efacec will cease the processing of personal data, unless it presents compelling and legitimate reasons for such processing that prevail over the interests, rights and freedoms of the Candidate or for the purposes of declaration, exercise or defence of a right in legal proceedings.
Means of exercise: The Candidate may exercise his/her rights by sending an e-mail to recrutamento@efacec.com
If the Candidate considers that his/her personal data has been processed in violation of the applicable data protection legislation, he/she has the right to lodge a complaint with the National Data Protection Commission (www.cnpd.pt).