top of page

CANDIDATE PRIVACY NOTICE​

​

INTRODUCTION

​

GCC7 SERVICES LIMITED, a company registered under the laws of Malta, with company registration number C91687 and having its registered office at 115B,Suite 3, Old Mint Street, Valetta VLT 1515, Malta (hereinafter the “Company”) respect your privacy and is committed to protecting your personal data.
 

The Company is a personal data controller and as such is responsible for deciding how to hold and use personal data about any potential candidates (hereinafter the “Candidates”, “you”, “your”).
 

This notice is aimed at informing you of how and why your personal data will be used, namely for the purposes of the recruitment, and how long it will be retained for.
 

DATA PROTECTION PRINCIPLES
 

The Company shall comply with the relevant data protection law and principles, which means that your data will be:
 

  • Used lawfully, fairly and in a transparent way.

  • Collected only for valid purposes that the Company have clearly explained to you and not used in any way that is incompatible with those purposes.

  • Relevant to the purposes the Company have informed you about and limited only to those purposes.

  • Accurate and kept up to date.

  • Maintained only for as long as necessary for the purpose of the recruitment process.

  • Kept securely and protected against unauthorised or unlawful processing and against loss or destruction using appropriate technical and organisational measures.
     

CANDIDATES’ PERSONAL DATA
 

Upon a Candidate submitting the online recruitment application, the Company will collect, use and store the following categories of personal data about you:
 

  • The data you have provided to us in your curriculum vitae (CV) and the personal data contained in your covering letter.

  • The data you have provided on our application form, including inter alia, your name, title, home/term address, telephone number, personal email address, date of birth, gender, employment history, qualifications, nationality, social media accounts, profession, professional memberships, educational achievements, diplomas, transcripts, languages, computer skills, national service completion (if applicable), identification number and any data you provide us during interviews at our premises.

  • Any personal data provided to us about you by your referees [ if applicable].
     

HOW IS YOUR PERSONAL DATA COLLECTED?
 

The Company collects personal data about candidates from the following sources:

  • You, the candidate.

  • Your named referees, from whom we collect the following categories of data: full name, periods of previous employment, performance during previous employment.

  • From publicly accessible sources, such as Linkedin, etc., where we collect your full name, email, work history, and other data included on your profile.
     

HOW WILL THE COMPANY USE YOUR DATA
 

The Company will use the personal data collected about you to:
 

  • Communicate with you about the recruitment process.

  • Assess your skills, qualifications, and suitability for the role.

  • Carry out background and reference checks, where applicable.

  • Keep records related to our hiring processes.

  • Comply with legal or regulatory requirements.
     

It is in the Company’s legitimate interests and rights to decide whether to appoint you to a role.

​

The Company also need to process your personal data to decide whether to enter into a contract with you.

​

Having received your CV and covering letter and the results from any tests you took (if applicable), the Company will then process that data to examine and decide whether you meet the requirements to be shortlisted for the role. Following the shortlisting method, the Company will decide whether your application is suitable to invite you for an interview. In case you are invited for an interview, the Company will use the data you provided at the interview to decide whether to offer you the role. Where the Company decides to offer you the role, it may then take up/request references and/or any other documentation before confirming your appointment.

​

If you fail to provide personal data

​

Should the candidate fail to provide personal data when requested, especially data that are considered necessary for the Company to consider your application (such as evidence of qualifications or work history), the Company may not be able to process your application further.
 

HOW WE USE PARTICULARLY SENSITIVE PERSONAL DATA  
 

We will use your sensitive personal data only in so far as we are permitted by Law to do so:
 

  • We will use data about your disability status to consider whether we need to provide appropriate adjustments during the recruitment process, for example whether adjustments need to be made during a test or interview.

  • We will use data about your nationality or ethnicity, to assess whether a work permit and a visa will be necessary for the role.
     

AUTOMATED DECISION-MAKING  
 

The Company does not utillise any automated decision-making methods in relation to the recruitment process, thus your personal data will not be subject to decisions that will have a significant impact on you based solely on such methods.
 

HOW AND WHEN THE COMPANY MAY SHARE YOUR PERSONAL DATA
 

The company may share the candidate’s personal data with entities within the group. The data sharing shall be with the only purpose to test a candidate’s suitability for a role. The Company does not share personal data with third parties unless the Company has a legal obligation to do so. 
 

DATA SECURITY AND ORGANISATIONAL MEASURES
 

The Company has in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in any unauthorised way, altered or disclosed.
 

In addition, access to your personal data is limited only to specified employees on a need-to-know basis. They will only process your personal data on our specific instructions and solely for the recruitment process and they are subject to a duty of confidentiality. Details of these measures may be obtained from our website privacy[AL1]  policy.
 

The Company has established procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where it is legally required to do so.
 

DATA RETENTION  
 

The Company shall retain your personal data for a period of 3 years after your last application date. The Company shall retain your personal data for that period so that it can provide evidence, in the event of a legal claim, that it has not discriminated against candidates on prohibited grounds and that the recruitment process was exercised in a fair and transparent way.
 

The Company further retains such personal data in case a similar role becomes vacant for which you shall be a fitting candidate. After this period, the Company shall securely destroy your personal data in accordance with our data retention policy.
 

YOUR RIGHTS OF ACCESS, CORRECTION, ERASURE, AND RESTRICTION  
 

Under the applicable laws and regulations and subject some conditions, you are entitled to the below rights:
 

  • Right of Access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

  • Right to request Correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data corrected.

  • Right of erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).

  • Right to object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.

  • Right of restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.

  • Right of transfer of your personal data to another party.
     

In the event that you want to review, verify or correct your personal data or to request erasure of your personal data or object to the processing of your personal data, please send an email to career@gcc7-services.com.   
 

ADDRESS DATA PROTECTION QUERIES  
 

The Company has appointed a Data Protection Officer who is responsible to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how the Company handles your personal data, please contact the DPO at dpo@gcc7-services.com. You have the right to make a complaint at any time to the Office of the Information and Data Protection Commissioner of Malta, which is the supervisory authority for data protection issues.

​

bottom of page