eMAG – is the trade name of “EMAG International” Ltd., a legal entity, with headquarters in Sofia, 40 Tsarigradsko Shose Blvd. Europark Building.
Website – the domain www. https://careers.emag.bg/ and its subdomains.
Candidate – an individual who uploads a CV through the Site.
- RECRUITMENT POLICY
1.1. Access to the Site is for any individual for the purpose of applying through a CV
1.2. Communication with the Applicant can be carried out through direct interaction with him/her or through the addresses indicated in the CV submitted through the Site.
1.3. eMAG will analyze the CVs submitted through the site and will only contact candidates who meet the job requirements.
- PRIVACY POLICY ON THE PROCESSING OF PERSONAL DATA
Ensuring the right related to the protection of personal data is a core commitment of eMAG and that is why we dedicate all our resources and make all necessary efforts to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR” “) and any other applicable legislation. One of the fundamental principles of this legal framework is transparency and we want you to be fully informed, which is why we have prepared this document to present to you the ways in which we collect, use, transfer and protect your personal data when you interact with us either through our website or through the applications available on your mobile phone.
We reserve the right to periodically update and change this Privacy Policy so that you always have access to and are aware of any changes regarding the way we process your personal data, as well as any other changes in legal requirements. In the event of such a change, we will display on our website the updated version of our Privacy Policy and for this reason it is advisable to periodically check the content of this Privacy Policy.
Who are we and how can you contact us?
eMAG is the trade name of “EMAG International” Ltd., a legal entity, with headquarters in Sofia, bul. Tsarigradsko shose 40 Europark Building. For the purposes of data protection legislation, we are a controller when we process your personal data.
You can share your views with us and we will be happy to provide you with any additional information you need regarding the processing of your data. If you find yourself in this situation, you can contact the eMAG Data Protection Officer at data.protection@emag.bg email address or by mail or courier at EMAG International Ltd., legal entity, with headquarters in Sofia, blvd. 40 Tsarigradsko Shose Europark Building: to the attention of the eMAG Data Protection Officer.
What categories of personal data do we process?
- In general, we collect personal data that comes directly from you, so you control and decide what information you are willing to provide to us. For example, when you apply for a job at eMAG, you send us your email address, first and last name, phone number, city where you live, as well as other context-specific information that you mention in your CV.
- According to the Cookie Policy, our website may store and collect information in cookies or other similar technologies.
We note that we do not wish to collect or process data from minors under the age of 16.
For what purpose do we collect and process your data?
- We will use your personal data for recruitment purposes for eMAG
- for communication purposes, in a situation where you have questions for us and want to leave us a message.
How long do we keep your personal data?
As a general rule, we will store personal data for a period of 3 years from its transmission.
Who do we send your personal data to?
Where appropriate, we may transfer or provide access to certain personal data to the following categories of recipients:
- companies from the same group of companies as eMAG;
If we are required by law or if it becomes necessary to protect a legitimate interest, we may also disclose certain personal data to public authorities.
Of course, we ensure that access to your data by third parties under private law is carried out in accordance with the legal provisions on data protection and confidentiality of information, on the basis of contracts concluded with them.
To which countries do we transfer your personal data?
We currently store and process personal data on the territory of Romania and Bulgaria.
In this regard, we will always take the necessary steps to ensure that any international transfer of personal data is carefully managed so that your rights and interests are always protected. Transfers to service providers and other third parties will always be protected by contractual commitments and, where appropriate, by other safeguards, such as standard contractual clauses issued by the European Commission, or certification schemes, such as the Privacy Shield for the protection of personnel personal data transferred from within the EU to the United States of America.
You can contact us at any time using the contact information provided above to learn more details about the countries to which we transfer your data, as well as the safeguards we have put in place in relation to these transfers.
How do we protect the security of your personal data?
We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures in accordance with industry standards.
We store your personal data on secure servers using state-of-the-art encryption algorithms and guarantee excess storage.
Despite the measures taken to protect your personal data, we note that the transmission of information over the Internet in general, as well as through other public networks, is not completely secure, there is a risk that the data will be seen and used by unauthorized third parties. We cannot be held responsible for such vulnerabilities of systems beyond our control.
What are your rights?
The General Data Protection Regulation recognises a number of rights in relation to your personal data. You can request access to your data, you can request the correction of errors in our files and/or you can object to the processing of your personal data. You can also exercise your right to lodge a complaint with the competent supervisory authorities or to go to court. If applicable, you also have the right to request the erasure of your personal data, the right to restrict data processing, as well as the right to data portability.
You can get more information about these rights by consulting the table below.
To exercise your rights, you can contact us using the contact details mentioned above. If you want to exercise your rights, it is important to remember the following aspects:
Identity. We take the confidentiality of all records containing personal data seriously. We reserve the right to verify your identity by requesting additional information to verify your identity.
Taxi. We will not charge you a fee to exercise any right in respect of your personal data unless your request for access to the information is unfounded, repetitive or excessive, in which case we will charge a fee for such circumstances. Of course, you will be informed in advance of any applicable fees before settling your request.
Reaction time. We aim to respond to all valid requests within a maximum of one month, unless this is particularly complicated or when you have made several requests, in which case we will respond to you within a maximum of two Mondays. We will let you know if we need more than a month. We may ask you if you can give us more details about your request, which will help us act faster and shorten the time to respond to your request.
Rights of third parties. We must not comply with a request if it would adversely affect the rights and freedoms of other data subjects.
Access
You can ask us:
· to confirm whether we process your personal data;
· to provide you with a copy of this data;
· to provide you with other information about your personal data, such as: the data we hold, for what purpose we use it, to whom we disclose it, whether we transfer it abroad and how we protect it, how long we keep it, what rights you have, how you can lodge a complaint, where we obtained your data from – if the information has not already been provided to you through this information.
Correction
You can ask us to correct or supplement your personal data if it is inaccurate or incomplete.
We may try to verify the accuracy of the data before correcting it.
Data deletion
You can ask us to delete your personal data only in cases where:
· are no longer needed for the purposes for which they were collected; or
· you have withdrawn your consent (if the data processing is based on consent); or
· exercising a legal right of objection; or
· are processed illegally; or
· We have a legal obligation to do so.
We are not obliged to comply with the request for deletion of your personal data if the processing of this data is necessary:
· for compliance with a legal obligation; or
· to establish, exercise or defend a right by judicial procedure;
There are other circumstances in which we are not obliged to comply with your request for data deletion, but the two situations mentioned above are the most likely circumstances in which we can deny your request.
Restriction of data processing
You can ask us to restrict the processing of your personal data, but only if:
· their accuracy is disputed (see the correction section) to allow us to verify their accuracy; or
· the processing is unlawful, but you do not want the data to be deleted; or
· are no longer necessary for the purposes for which they were collected, but are necessary for you to establish, exercise or defend a right in court; or
· You have exercised your right to object and the verification of whether our rights take precedence continues.
We may continue to use your personal data following a restriction request if:
· we have your consent; or
· for establishing, exercising or ensuring the protection of a right by judicial procedure; or
· to protect the rights of another natural or legal person.
Data portability
You can ask us to provide your personal data in a structured, commonly used and machine-readable format, or you can request that it be “ported” directly to another data controller, but in any case only if:
· the processing is based on your consent or the conclusion or performance of a contract with you; and
· Processing is carried out by automatic means.
Opposition
You can object at any time, for reasons related to your particular situation, to the processing of your personal data on the basis of our legitimate interest, if you consider that your fundamental rights and freedoms take precedence over this interest.
You can also object at any time to the processing of your data for direct marketing purposes (including the creation of profiles) without giving a reason, in which case we will stop this processing as soon as possible.
Automated decision-making
You can request not to be subject to a decision based solely on automated processing, but only where that decision:
· has legal effects on you; or
· affects you in another similar and significant way.
This right does not apply if the decision reached as a result of automatic decision-making:
· it is necessary to conclude or perform a contract we have with you;
· is permitted by law and has adequate safeguards for your rights and freedoms; or
· is based on your explicit consent.
Complaints
You have the right to lodge a complaint with the supervisory authority regarding the processing of your personal data.
Without prejudice to your right to contact the supervisory authority at any time, we ask you in a similar possible situation to contact us in advance and we promise that we will make every effort to resolve any problem in an amicable manner.
We remind you that you can contact the eMAG Data Protection Officer at any time by submitting a request using any of the following communication channels:
- by e-mail to: data.protection@emag.bg or
- by mail or courier to the address: “EMAG International” Ltd., a legal entity, with headquarters in Sofia, blvd. Tsarigradsko Shose 40 Europark Building – with mention of the attention of the eMAG Data Protection Officer