International and national laws and regulations, including those applicable within the European Union (“EU”) such as the General Data Protection Regulation (“GDPR”), provide various restrictions on the collection, use and processing of personal data. This Data Protection Notice (the “Notice”) is intended to inform candidates who apply for a job to work for Lean Scale DMCC or any Clients that Lean Scale DMCC supports for Talent Acquisition, on the processing of their personal data during the recruitment process and explain the type of information company process, why company are processing it and how that processing may affect candidate.
Please find below answers to key questions candidate might have about how the Company will use Candidate Data during our recruitment process:
Controller of the processing of personal data according to the recruitment process is:
Lean Scale DMCC
Unit No: RET-R6-040, Detached Retail R6, Plot No: JLT-PH2-RET-R6, Jumeirah Lakes Towers, Dubai, United Arab
Tel: +971 50 525 785
Lean Scale DMCC will be referred to as “Company” in this document. The individuals who apply for the positions will be referred to "Candidate" in this document
If candidates have any questions regarding personal data and its processing, for example whether the information company request from candidate is mandatory and the implications of not providing it, please contact the company. Company can be reached at the following email address: info@leanscale.com
During the recruitment process the following data will be directly collected and processed:
The provision of these data is mandatory for the decision about the establishment of an employment relationship with candidates. If the data are not provided, it is possible that the company will not be able to offer a candidate an employment relationship.
Candidate Data that the Company will collect from other sources might include:
The Company needs to process candidates Personal Data in order to:
Please note that should the candidate be successful, and the company offers the candidate a job, a new data privacy notice will be issued for the term of the candidate's employment.
The Company must have a legal basis to collect and process Candidate Data in compliance with applicable law. In most cases the law allows to process data on the basis of one of the following grounds:
Occasionally the Company will ask for the Candidate’s consent according to Art. 6 paragraph 1 section a GDPR for the purposes of processing Candidate Data. In any such case, the Company will notify the Candidate and the Candidate will be entitled to withdraw the Candidate's consent at any time. The Company will also notify the Candidate of any consequences which may arise in the event the Candidate does not give the consent upon our request. Should the Candidate’s wish to have any further information in relation to the consent the Company collects, please contact the Company.
If the recruitment process is successful, the information collected during the recruitment process will become part of the Candidate's personnel file and be subject to the retention policy applicable for employee data. The Candidate will be further informed on this matter with the Company’s employee privacy notice.
The Company deletes all data related to the Candidate’s application in case the Candidate was not offered a subsequent employment within six months following an unsuccessful application. The underlying legal basis for this storage duration is justified by our legitimate interest (defending possible claims) according to Art. 6 paragraph 1 section of GDPR.
Given consent, the Company may retain Candidate's Personal Data to refer back to an earlier application. Unless otherwise required by applicable law, the Company shall retain Candidate’s Personal Data collected during the recruitment process for 2 years.
Candidate’s Personal Data will be processed and stored in access-controlled, centralized databases of Lean Scale DMCC in Dubai. The electronic databases are controlled only by authorized administrative human resources staff and can be accessed only by authorized users.
In addition to personal data, the Candidate may also provide the Company with information about Candidate’s referees. The Candidate shall communicate to such persons that the Candidate has provided their data to the Company for the same purposes for which the Candidate provided them in the manner set forth in this notice. The Candidate is entitled to share this notice with them.
Pursuant to Articles 15 and following of the GDPR the Candidate have the following rights:
a. Right to request access to Candidate’s Personal Data. It means that the Candidate is entitled to obtain a confirmation that Candidate’s data is being processed and the Candidate has admittance to Candidate’s Personal Data processed by the Company and other supplementary information. (Article 15 GDPR)
b. Right to request rectification of Candidate’s data. It means that the Candidate is entitled to have Candidate’s Personal Data corrected, completed if it is inaccurate or incomplete. (Article 16 GDPR)
c. Right to request erasure of Candidate’s data. It means that the Candidate is entitled to have Candidate’s Personal Data deleted in specific circumstances, if there is no lawful reason for continuing our processing. (Article 17 GDPR)
d. Right to object to processing Candidate’s data. It means that in some cases, where the Company processes Candidate’s Personal Data based on legitimate interest or the public interest, the Candidate has the right to challenge the processing of data the Company carries out. (Article 21 GDPR)
e. Right to request the Company to restrict the processing. It means that the Candidate may request to ‘block’ or suppress processing of Candidate’s Personal Data. The Candidate’s valid request is leading to that the Company will be permitted to store Candidate’s Personal Data, but not further process it. (Article 18 GDPR)
f. Right to data portability. It allows the Candidate to obtain and reuse Candidate’s Personal Data for the Candidate’s own purposes across different services. The Candidate is entitled to move, copy or transfer personal data easily in a safe and secure way, without hindrance to usability. (Article 20 GDPR)
Where the Company uses Candidate’s Personal Data on the basis of the Candidate’s consent, the Candidate is entitled to withdraw that consent at any time subject to applicable law. Please note that the withdrawal of a given consent does not affect the lawfulness of processing before the consent was withdrawn.
Company relies on the Candidate to ensure that the Candidate's Personal Data is complete, accurate and current. Please inform the Company promptly of any changes to or inaccuracies of Candidate’s Personal Data by contacting the Company.
This Notice may be amended by the Company at any time. The Company will place updates on our intranet and, when appropriate, the Company will notify the Candidate of any changes by email prior to commencing processing.
