Peptone's Privacy Policy

PRIVACY POLICY ON THE PROCESSING OF PERSONAL DATA OF JOB APPLICANTS

According to Art. 44 of the Regulation Data Protection Act Uk and UK GDPR, we provide you with the necessary information regarding the processing of personal data collected and processed during our recruitment process.

1. CATEGORIES OF PERSONAL DATA PROCESSED | DEFINITIONS

The personal data provided by you - or otherwise acquired in compliance with the legislative and contractual provisions in force - inherent in, connected with and/or instrumental to the assessment of your application for recruitment purposes, will be processed in compliance with the provisions of the Data Protection Act UK and UK GDPR, and the obligations of confidentiality.

Personal Data: all information relating to an identified or identifiable person.

Sensitive personal data: religious, ideological, political or trade union-related views or activities, health, the intimate sphere or the racial origin, social security measures, administrative or criminal proceedings and sanctions.

Data subjects: natural or legal persons whose data is processed (also referred to as “you”).

Processing: any operation with personal data, irrespective of the means applied and the procedure, and in particular the collection, storage, use, revision, disclosure, archiving or destruction of data.

Disclosure: making personal data accessible, for example by permitting access, transmission or publication.

In particular, we will process your following personal data: data indicated in the registration form on our website and platforms and contained in your CV, motivational letters, etc. (e.g. name, surname, e-mail address, previous working experience, education, references). When you apply on our platform, the data necessary for submit your application will be indicated as “required”(*).

2. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

The company that determines the purposes and means of this processing of personal data is PEPTONE LTD, a company with registered office at The Connolly Works ,41-43 Chalton Street ,NW1 1JD , London, United Kingdom, Company Number 11296080 (also referred to as “Peptone” or the “Data Controller” or the “Company” or “we”) in person of its Legal Representative.

The contact details of the Data Controller are as follows: privacy@peptone.io

2.1. CONTACT DETAILS OF OUR DATA PROTECTION OFFICER | DPO

We appointed a Data Protection Officer | DPO, who may be contacted at the following e-mail address: dpo.peptone@privacydesk.ch

3. PURPOSES OF THE PROCESSING | LEGAL BASIS | DATA RETENTION PERIOD | NATURE OF CONFERRAL PURPOSE OF THE PROCESSING

LEGAL BASIS

DATA RETENTION PERIOD

NATURE OF CONFERRAL

a) Recruitment, including the carrying out of the activity of research and selection of job applicants to the possible establishment of an employment relationship, also for any different positions than the one for which the data subject has spontaneously applied for. Management of applications in response to job offers published on our website or sent by e-mail or by mail. Your personal data could be collected from third parties carrier pages (e.g. LinkedIn). The interviews could be done also remotely (data processing including image/audio).

Contract Data will be retained for the entire recruitment process. After that period, data will be retained for maximum one year.

The provision of personal data is necessary for participating to the recruiting process. Otherwise, it will be impossible to take part to the recruiting process.

b) Visiting the job applicant's publicly accessible "social profile" on social media/networks.

The Data Controller may collect and process your personal data to the extent that such collection is necessary and relevant to the recruitment process.

Legitimate interest Data will be retained for the entire recruitment process of the candidate.

The provision of data is necessary for the achievement of the legitimate interest of the Data Controller.

c) Upon consent, we may verify the information provided for in your CV and motivational letter(s) at the training/educational/university institutions indicated by yourself (e.g. the number of years attended and the degree/diploma obtained), and/or contact the persons listed by you as references (e.g. former employers).

Consent Data will be retained for the entire recruitment process. After that period, data will be retained for maximum one year.

The provision of data is optional. Without data the Controller would not be able to use your references, but you will be able to participate to the selection process.

4. RECIPIENTS OF PERSONAL DATA

We may share your personal information with employees and/or staff acting under Data Controller’s authority (duly instructed for the former purposes), as well as third parties contractually linked to Peptone, in order to fulfill contractual obligations and achieve one or more of the aforesaid purposes of processing. Such third parties will process your data in their capacity as data processors, or as independent data controllers. More in detail, we may share your personal information to the following categories of recipients: a) subjects who provide services for the maintenance of the information system used by Peptone and of the telecommunications networks (including our tool for recruitment); b) firms or companies within the scope of assistance and consultancy relations; c) competent authorities for the fulfilment of legal obligations and/or provisions of public bodies, upon request; d) group companies including those having seat outside the territory of the United Kingdom (specifically, Switzerland that is considered as a Country guaranteeing an adequate level of data protection).

5. TRANSFERS OF PERSONAL DATA OUTSIDE THE UNITED KINGDOM

Personal data are communicated abroad in accordance with the provisions of the Data Protection Act UK and UK GDPR. In particular, personal data are communicated outside the United Kingdom specifically, in Switzerland that is considered as a Country guaranteeing an adequate level of data protection.

6. RIGHTS OF THE DATA SUBJECT

According to the conditions established by the Data Protection Act UK and UK GDPR, the Data Controller acknowledges the following rights to you as a Data Subject:

  • Right of access: you have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.

  • Right to rectification: You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.

  • Right to erasure: You have the right to ask us to erase your personal information in certain circumstances.

  • Right to restriction of processing: You have the right to ask us to restrict the processing of your information in certain circumstances.

  • Right to object to processing: You have the right to object to processing if we are able to process your information because the process forms part of our public tasks, or is in our legitimate interests.

  • Right to data portability: This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.

You may exercise your rights under the Data Protection Act UK and UK GDPR by contacting the Data Controller at privacy@peptone.io or the Data Protection Officer at dpo.peptone@privacydesk.ch.

7. ADDITIONAL INFORMATION | MODIFICATIONS │ UPDATES

We do not sell any of your data. The Data Controller reserves the right to revise, update, add or remove any part of the present privacy policy at its own discretion and at any time. In case of modifications, the date of update will be indicated.

Date of last update: October 26th, 2023