Information on personal data processing

With this Information, Cromaris d.d., Zadar, Gaženička cesta 4/b (hereinafter: the Company) submits information on the controller, data protection officer, categories of personal data we process, for what purpose we process them and on what legal basis, who has access to data, the storage period and what rights you have in relation to the processing of personal data.

Your personal data are processed in accordance with the rules of Regulation (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the “Regulation”), as well as the national Act on the Implementation of the General Data Protection Regulation (hereinafter: the Act).

1. Information on the controller and data protection officer

Cromaris d.d., Zadar, Gaženička cesta 4/b, OIB: 58921608350 is the controller of your personal data processing in the sense described in the General Data Protection Regulation.

Contact information of the data protection officer: Cromaris d.d., Zadar, Gaženička cesta 4/b, n/r Službenika za zaštitu osobnih podataka, e-mail:  dpo@cromaris.hr.

• Categories of the personal data which is collected

The Company collects and processes the following personal data categories of job candidates:

• Identification and contact information: first and last name, date of birth, phone number, e-mail, mobile phone, address (street, city, post code)
• Education and work experience information: CV information, education certificate, work experience certificate, references of former employers or third parties
• Other data you specify in your application and CV
• Personal data regarding employment activities: interpretation of your psychological test results (when such testing is a part of the selection process), a summary of your job interview.

The Company in principle does not collect special categories of the candidates’ personal data, but it is possible that the candidate submitted health and/or social status information in their application.

The company collects and processes your personal data during the candidate selection process, which it received directly from you in your open application on the Company’s official website.

In certain cases, it is possible to achieve the purpose of the data processing using a smaller data range than previously described, since we collect only the data necessary for achieving a certain purpose.

• The purpose of processing and legal basis

Your personal data is collected and processed in order to:

• Create a candidate base for potential future employment in the Company and its affiliates;
• The execution of the selection process on the basis of received open applications.

Your personal data are processed based on the consent you have given us upon sending your CV and job application.

We inform you that you can withdraw your consent at any moment, which does not impact the legality of data processing based on your consent before it was withdrawn.

If the candidate submitted data related to their health and/or social status in their CV or job application, the candidate’s disclosure of those data is the legal basis for their processing.

• Recipient categories

The employees of the Company who have access to personal data due to their work requirements, for example employees of the human resources department, have access to your personal data. The employees of the Company who are granted access or otherwise process your data are under obligation to preserve the confidentiality of your personal data.

The Company may provide the Company’s affiliates with your personal data in order to achieve the purpose for which the data were collected. 

The Company may provide data to other persons/bodies in the event that such an obligation would arise for the Company pursuant to regulations and/or requests of the competent authority for the submission of data, in accordance with the powers that these authorities have under the regulations.

Your personal data may be disclosed to our data processing contractors who process personal data on our behalf and who have access to this data only to the extent necessary for the proper fulfilment of our obligations and only in order to achieve the aforementioned purposes (for example selection process service providers).

• Storage period

The personal data will be processed until you withdraw your consent. If you do not withdraw consent, your personal data will be deleted from our storage systems after 5 years.

If the candidate is offered employment and they accept it, the data remains in the system as employee data, in accordance with the Company’s rules on the processing of personal data of employees.

• Your rights

Regarding personal data protection, you have the following rights:

a) the right to access your personal data;

b) the right to rectify data that is incorrect or incomplete;

c) the right to erase personal data, especially if those data are no longer necessary for the purpose they were collected, if they were processed illegally, if they are under the obligation to be deleted in order to achieve compliance with legal obligations;

d) the right to restrict the processing of personal data;

e) the right to object to the processing of personal data;

f) the right to file a complaint with the Agency for Personal Data Protection.

Our decisions are not made automatically. Profiling is only done to the extent needed to achieve the aforementioned purposes.

Regarding your exercise of the listed rights, you can contact our data protection officer by sending a request to the e-mail address dpo@cromaris.hr or sending a letter to the address: Cromaris d.d., Zadar, Gaženička cesta 4/b, n/r Službenika za zaštitu osobnih podataka.

Yours sincerely,

Cromaris d.d.