PRIVACY NOTICE FOR JOB APPLICANTS
eMcREY is committed to protect the privacy and security of your personal data that we process. It is important that you read this Privacy Notice (“Notice”) so that you are aware of how and why we are using your personal data.
Purpose: This Notice describes how we collect and use personal data about you, during and after your working relationship with us, in accordance with the Personal Data Protection Law of Kingdom of Saudi Arabia (KSA-PDPL).
Applicability: This Notice applies to all job applicants and candidates applying for positions at eMcREY. It does not form part of any employment contract or other service agreement. We may update this Notice at any time, and the updated version will be published on our website. All applicants are encouraged to check the website regularly to stay informed of any changes.
Relationships and Purpose of Processing Data: eMcREY is responsible for managing your personal data as a prospective employer. We require this data for various employment-related purposes, including recruitment, contract management, legal compliance, and record-keeping.
Processing Activities Include:
Collection, recording, organization, and storage of your personal data.
Adaptation, retrieval, use, disclosure, and destruction of your data.
Your data will be utilized for operational purposes to effectively manage our relationship with you, both during and after your employment. This includes ensuring compliance with your employment contract, meeting legal obligations, and protecting against liabilities and fraud.
Personal data we will process about you:
eMcREY will process the following categories of personal data about you:
- Personal details include name, title, addresses, telephone numbers, mobile number, personal email addresses, geo location, date of birth, gender, age, photographs, etc.
- Recruitment information including work experience, qualification details, copies of right-to-work documentation (work permit certificate), references and other information included in a CV or cover letter or as part of the application process, language test results, background check report, credit check report, previous employment references/ feedback etc. wherever permissible by the local laws, etc.
- CCTV footage and other information obtained through electronic means, such as fingerprint records, are collected for security and safety purposes at eMcREY.
How is your personal data collected
eMcREY collects the above personal data from job applicants through application forms and interviews as part of the recruitment and onboarding process. This data may be obtained directly from applicants or indirectly from third-party sources, such as employee referrals, employment agencies, background check providers, former employers, credit reference agencies, and medical clinics.
Additional personal data may also be collected during job-related activities while you are employed with us. All collected data will be used and stored to facilitate recruitment activities and fulfill the employment agreement, should you be selected. This data will also help ensure compliance with legal obligations and eMcREY’s legitimate interests.
How will we use personal data about you/Our basis of processing
eMcREY will use your personal data only when legally permitted. We commonly use your information in the following circumstances:
- To fulfill the employment contract if you are selected.
- To comply with legal obligations, such as verifying eligibility to work before employment.
- When necessary for our legitimate interests or those of a third party, provided your interests and rights do not override these.
- To protect your interests or the interests of others.
- When required for public interest or official purposes.
- If we have obtained your explicit consent, such as for client interviews.
If you fail to provide personal data
If you fail to provide certain data when requested, we may not be able to perform our recruitment process and the contract that we might have to execute with you based on your selection (such as paying you or providing a benefit), or we may be prevented from complying with our legal obligations (such as to ensure the health and safety of our employees).
Change of purpose
eMcREY will only use your personal data for the purposes for which we collected it. If we need to use your personal data for an unrelated purpose, we will notify you and will explain the legal basis which allows us to do so without undue delay. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Data sharing
eMcREY may share your personal/special categories of data with the following recipients:
Third parties with whom we have a contractual relationship, including medical vendor, law firm, data shredding, background check vendor, technology vendor etc. We require third parties to respect the security of your data and to treat it in accordance with our instructions and as per the applicable law.
Transferring information outside the KSA
eMcREY may transfer the personal data that it collects from you to internal group companies or with our authorized vendors / partners, located outside the KSA, for the purpose of legitimate interests, performance of employment contract and internal administration. However, we ensure that the transfers of your personal data are to be done in accordance with the guidelines defined under article 29 of the KSA-PDPL.
Data security
eMcREY has implemented measures to protect the security of your data.
- Breach Procedures: We have procedures in place to address any suspected data security breaches. If we are legally required, we will notify you and any applicable regulator of such a breach.
Data retention
eMcREY will retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including legal and reporting requirements. The retention period is determined by the nature and sensitivity of the data, the risk of unauthorized use, and applicable legal requirements. In some cases, we may anonymize your data for further use without notice. The personal data of candidates will be securely retained and destroyed according to our Data Retention Policy and relevant laws.
Data Protection Officer
eMcREY has appointed a Data Protection Officer (DPO) to oversee compliance with the protection of personal data within the eMcREY environment. If you have any questions about this Notice or how we handle your personal data, please contact the DPO at DPO@eMcREY.com. You have the right to make a complaint at any time to the regional supervisory authority for data protection issues.
Your duty to inform us of changes
It is important that the personal data we hold about you is accurate and current. Please keep informed if your personal data changes during your working relationship with us.
Rights Available to you
Your rights in connection with personal data: Under certain circumstances, by law, you have:
- Right to be Informed: You have the right to be informed about the collection and use of your personal data.
- Right of Access: You can request access to your personal data through a “data subject access request” to receive a copy of the data we hold about you.
- Right to Request a Copy: You may request a copy of your personal data in a clear and readable format.
- Right to Correction: You can request correction of any incomplete or inaccurate data we hold about you.
- Right to Request Destruction: You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
- Right to Withdraw Consent: If you have provided explicit consent for processing your personal data, you can withdraw that consent at any time. To do so, please contact the Data Protection Office at dpo@emcrey.com. Once notified, we will cease processing your data for the agreed purposes unless we have another legal basis to do so.
How to Contact Us If you have any questions or concerns about this Privacy Notice, please feel free to contact us at dpo@emcrey.com.
