The ORS GROUP (“we”, “us”, “our”) is committed to protecting the privacy and security of your Personal Data (“Data”), which is any information relating to an identified or identifiable natural person.
The ORS GROUP is a Personal Data Controller. This means that we are responsible for deciding how we hold and use Personal Data about you. As provided under the EU General Data Protection Regulation 2016/679 (“GDPR”), this Statement is aimed at informing you of how and why your Personal Data will be used, namely for the purposes of the recruitment exercise, and how long it will be retained for.
The person responsible for overseeing Data protection compliance issues within the ORS GROUP is the Data Protection Officer (“DPO”), who can be reached by email at DPO@orsgroup.ai
For questions about anything contained in this Statement please contact the DPO.
DATA PROTECTION PRINCIPLES
We will comply with Data protection Law and principles, which means that your Data will be:
THE KIND OF DATA WE HOLD ABOUT YOU
In connection with your application, we may collect, use and store the following categories of Personal Data about you:
HOW WE COLLECT YOUR PERSONAL DATA
We collect Personal Data about candidates from the following sources:
HOW WE WILL USE YOUR PERSONAL DATA
We will use the personal data we collect about you to:
It is in our legitimate interests to decide whether to appoint you to the role since it would be beneficial to our business to appoint a suitable candidate to that role.
We also need to process your personal Data to decide whether to enter into a contract with you.
Having received your CV and covering letter and the results from any tests you eventually took, we will then process that Data to decide whether you meet the basic requirements to be shortlisted for the role. If you do, we will decide whether your application is suitable to invite you for an interview. If we decide to call you for an interview, we will use the Data you provide to us at the interview to decide whether to offer you the role. If we decide to offer you the role, we may then take up references and/or any other check before confirming your appointment.
If you fail to provide Personal Data
If you fail to provide Personal Data when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history), we may not be able to process your application further.
HOW WE USE PARTICULARLY SENSITIVE PERSONAL DATA
We will use your sensitive personal Data only in so far as we are permitted by Law to do so:
We will process information relating to criminal convictions where the law allows it. This will usually be where it is necessary to carry out the Company’s obligations and where it is appropriate given the nature of the role.
We may share your Personal Data with other entities in the ORS GROUP and with our third-party service providers. We do not allow our third-party service providers to use your Data for their own purposes. We only permit them to process your Data for specified purposes and in accordance with our instructions.
DATA SECURITY AND DATA BREACH
We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your Data to those managers, employees, collaborators and other third parties who have a business need-to-know. They will only process your personal data on our specific instructions and they are subject to a duty of confidentiality. Details of these measures may be obtained from the DPO.
We have put in place procedures to deal with any suspected Data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
We will retain your Personal Data for a period of 3 years after your last application date [if you are unsuccessful, we shall retain your personal data for 6 months or for a period of 3 years upon your explicit consent]. We retain your Data for that period so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way. We further retain such Data in case a similar role becomes vacant for which you will be a fitting candidate. After this period, we will securely destroy your personal data in accordance with our data retention policy.
RIGHTS OF ACCESS, CORRECTION, ERASURE, AND RESTRICTION
Your rights in connection with Personal Data
Under certain circumstances, by law you have the right to:
If you want to review, verify, correct, or request erasure of your Data, object to its Processing, or request that the we transfer a copy of your Data to another party, please contact the DPO in writing. We may need to request specific information from you to help confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
NOTIFICATION OF CHANGES
We may update this Statement from time to time to reflect changes to our Data governance practices. The revised Statement will be posted on the website with an updated revision date.
PRIVACY QUESTIONS AND ACCESS
If you have a question about this Statement or ORS GROUP’s handling of your information, you can contact the DPO in writing.