Recruitment Privacy Policy
We appreciate your interest in our company. Enhesa is an EHS Regulatory Compliance Assurance tool & services provider and assumes the role of Data Controller in regards to your personal data related to recruitment. We value the importance of protecting your privacy and personal data. To ensure transparency and security, our recruitment privacy statement as set forth below will inform you about the nature, scope, and purpose of the personal data processed by us. We will process your personal data in accordance with this Privacy Notice, unless such processing conflicts with the requirements of applicable law, in which case, applicable law will prevail.
We reserve the right to update this Privacy Policy at any time without prior notice. We will process data in accordance to the Privacy Policy that you have consented to at the time of your consent. Upon a change in policy, we will alert you by email.
To facilitate internal and external recruitment, Enhesa uses for some requisitions the Greenhouse software, to share job offers and to collect and manage applications. Enhesa acts as the controller of the personal data communicated and Greenhouse acts as a subcontractor.
Your personal data will be processed for the purposes of managing Enhesa’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by Enhesa, which are the solicitation, evaluation, and selection of applicants for employment.
When you apply for a position at Enhesa, your personal data will be retained by Enhesa as long as it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have to right to data portability. In addition, you may lodge a complaint with an EU supervisory authority.
Please note that if your application to Enhesa successful, you and Enhesa may enter into a separate agreement that will govern the processing of all information and data collected by Enhesa in connection with this employment. Such agreement takes precedence over any conflicting provision in this Recruitment Privacy Policy.
By submitting your personal data to us, you acknowledge that:
• You have read and understood this Privacy Notice and agree to the use of your personal data as set out herein.
• You are not required to provide any requested information to us, but your failure to do so may result in not being able to continue your candidacy for the job for which you have applied.
• All of your representations are true and correct to the best of your knowledge and belief, and you have not knowingly omitted any related information of an adverse nature. Providing any inaccurate information may make you ineligible for employment.
• This Privacy Notice does not form part of any contract of employment offered to candidates hired by Enhesa.
Personal Data We Collect
We usually collect personal data directly from you when you apply for a role with us, such as your name, address, contact information, photographs and videos, work and educational history, achievements, identity documents, and test results. We also collect similar personal data about you from third parties, such as professional recruiting firms, your references or prior employers. We may also collect personal data about you online to the extent that you have chosen to make this information publicly available. For example, we may find your profile on professional social media websites (such as LinkedIn), and contact you about suitable roles.
Sensitive personal data is a subset of personal data that includes ethnicity, health, trade union membership, philosophical beliefs, sexual orientation, and other categories as prescribed by law. We may collect sensitive personal data to the extent that a candidate chooses, without being asked, to voluntarily disclose it during the recruiting process. Enhesa will not further process this data, and under no circumstances it will be a determining factor during the recruitment process.
Use of your personal data
The collected data will be used solely for the selection process. This process may include the following:
• Verification of the entered data;
• Reference checks;
• Assessment of the qualifications and skills needed to perform the job you are applying for;
• Communication concerning the process (e-mails, phone calls, SMS messages);
• Filling out questionnaires and tests;
• Fulfilling legal regulations.
We may also use your personal data for Enhesa analytics purposes, including in aggregated/pseudonymized form, to improve our recruitment and hiring process and augment our ability to attract successful candidates.
We do not sell or rent your personal information to third-parties. We do not share your personal information, except as provided in this Privacy Policy.
Legal basis for processing your personal data
Our processing of your personal data for the purposes mentioned above is based:
• in part, on our legitimate business interest in evaluating your application to manage our relationship with you, to ensure that we recruit appropriate employees, and to evaluate and maintain the efficacy of our recruiting process more generally;
• in part, on our performing contractual and precontractual measures relating to our potential employment relationship with you;
• in part, on our complying with applicable law with regard to personal data necessary to satisfy our legal or regulatory obligations;
• in part, on your express consent for allowing Enhesa to retain your profile to be considered for other positions.
Data Access
The access to your personal records is limited to Enhesa employees who participate in the selection process; members of the HR team, hiring managers for the position you are applying for, and any member of the staff if access to the data is necessary for the performance of the role you are applying for.
International transfer of personal data
Your personal data may be accessed by recruiters and interviewers working in the country where the position for which you are applying is based, as well as by recruiters and interviewers working in different countries within Enhesa group. Individuals performing administrative functions and IT personnel within the Enhesa Group may also have limited access to your personal data to the extent necessary to perform their jobs.
Within Enhesa’s systems, the data is stored within the European Union, and access to it is secured with the highest level of technical standards and practices. All data is encrypted at rest and in transport. Multifactor Authentication is required for access.
Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Enhesa to help manage its recruitment and hiring process on Enhesa’s behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. the transfer will be subject to appropriate additional safeguards; all data is encrypted both in transit and at rest following industry best practices and high-security standards to ensure confidentiality and integrity. The data is hosted exclusively by carefully selected sub-processors that are ISO/IEC 27001 certified, ensuring they meet stringent information security management requirements.
Data Retention
If you accept an offer of employment with us, any relevant personal data collected during your pre-employment period will become part of your personnel records and will be retained in accordance with specific country requirements and with the privacy notice applicable to Enhesa employees, which will be provided during the on-boarding process.
If we do not employ you, we may nevertheless continue to retain and use your personal data with your explicit content for a maximum period of 2 years after the last contact with our recruitment department. This is for system administration purposes and to consider you for potential future roles. At the end of that period, or once you withdraw your consent, your data is deleted or destroyed.
Rights and Contact Info
Upon request, our Data Protection Officer will provide you with information as to whether and what personal data we store in relation to you. Should your personal data be incorrect, you may have it rectified. You may also revoke your consent to use your personal data in the future, in whole or in parts, or request deletion of your personal data.
Please feel free to direct such requests, or other questions and comments regarding this privacy statement or the privacy practices of Enhesa to our Data Protection Officer:
Enhesa SA
Louise Center Building
Avenue Louise 287, 1050 Brussels
Belgium
Email: dpo@enhesa.com