1. Identity of the controller

This information notice is addressed to you as a candidate submitting a job application to SLAVIA PHARM S.R.L., with its registered office in Bucharest, 44C Theodor Pallady Blvd., 032266, Sector 3, registered with the Trade Register under no. J40/3503/1997, Tax ID (CUI) 9427294, legally represented by its administrator, Gheorghiev Slavi (hereinafter “Slavia Pharm” or the “Controller”), for the purpose of taking part in the recruitment process it conducts.

Slavia Pharm processes your personal data as a controller, in accordance with Regulation (EU) 2016/679 (GDPR). This notice informs you about the data processed, the purpose and legal basis of the processing, the recipients of the data, the storage period and the rights you have.

2. Contact details of the Data Protection Officer (DPO)

The DPO can be contacted by e-mail at dpo@slaviapharm.ro or by post at the Controller’s registered office, marked “For the attention of the DPO”.

3. Purpose and legal basis of the processing

Slavia Pharm processes your personal data for the following purposes:

Slavia Pharm processes your personal data for the following purposes:

The processing of your data is necessary in order to assess your application, contact you for an interview and carry out the selection process.

Legal basis: Art. 6(1)(b) GDPR – steps taken at the request of the data subject prior to entering into a contract.

(b) Creating an internal recruitment database (optional)

If you have not been selected for the position in question but give your consent to this, Slavia Pharm will keep your application in order to contact you about future collaboration opportunities.

Legal basis: Art. 6(1)(a) GDPR – your explicit consent.

(c) Compliance with applicable legal obligations

In specific situations, Slavia Pharm may process your data in order to comply with legal obligations (e.g. archiving obligations, communications to competent authorities).

In specific situations, Slavia Pharm may process your data in order to comply with legal obligations (e.g. archiving obligations, communications to competent authorities).

4. Categories of personal data processed

Through the application form on the website www.slaviapharm.ro/cariere, as well as through the documents you submit, Slavia Pharm processes the following categories of data:

• Through the application form on the website www.slaviapharm.ro/cariere, as well as through the documents you submit, Slavia Pharm processes the following categories of data:
• Professional data: curriculum vitae, professional experience, education and qualifications, skills, information provided in the free-text section of the form;
• Data obtained during the recruitment process: interview results, assessors’ notes, any additional information voluntarily provided by the candidate.

Note: Slavia Pharm does not request or systematically process sensitive data (marital status, nationality, photograph, health data) through the online application form. If you provide such data voluntarily (e.g. in your CV), it will be processed solely for the purpose of assessing your application and subsequently deleted if it is not relevant.

5. Source of the data

We process your personal data as a result of your application being submitted (i) directly through the form on the website www.slaviapharm.ro/cariere, (ii) by e-mail to contact@slaviapharm.ro, (iii) through a referral by a third party who provides us with your CV, or (iv) through a recruitment platform or agency with which you have created a profile and which recommends you to Slavia Pharm.

6. Mandatory nature of providing the data

You have no legal obligation to provide us with your personal data. Providing the data is voluntary. However, failure to provide the information necessary to assess your application may affect Slavia Pharm’s ability to review and process your application.

7. Recipients of the data

Your data may be accessed by or disclosed to:

• Slavia Pharm employees with human resources responsibilities and the department managers involved in the recruitment process;
• IT service providers acting as processors on behalf of the controller under contracts compliant with Art. 28 GDPR (hosting, IT systems, recruitment platforms);
• Competent public authorities, in the cases provided for by law.

Your data is not transferred outside the European Economic Area. Should a service provider be established outside the EEA, the transfer will be carried out exclusively with the safeguards provided for in Chapter V GDPR (standard contractual clauses, Decision (EU) 2021/914).

8. Storage period

• Unsuccessful application, without consent for the database: the data will be kept for the duration of the recruitment process and for a period of 6 months after its completion, in order to respond to any challenges or complaints, after which it will be deleted or anonymised.
• Unsuccessful application, with consent for the database: the data will be kept for a period of 1 year from the date consent is given or until it is withdrawn, in order to contact you about future collaboration opportunities.
• Successful application (employment): the relevant data will be included in your personnel file and processed in accordance with the internal policies applicable to the employment relationship, for its duration and thereafter, in line with legal archiving obligations.

9. Your rights

Under the conditions and within the limits provided for by the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): the right to obtain confirmation that your data is being processed and to receive a free copy of it.
• Right to rectification (Art. 16 GDPR): the right to request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): the right to request the deletion of your data, within the limits provided for by law.
• Right to erasure (Art. 17 GDPR): the right to request the deletion of your data, within the limits provided for by law.
• Right to object (Art. 21 GDPR): the right to object, on grounds relating to your particular situation, to processing carried out on the basis of legitimate interest.
• Right to data portability (Art. 20 GDPR): applicable to processing based on consent or a contract and carried out by automated means.
• Right to withdraw consent (Art. 7(3) GDPR): consent for the recruitment database may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.

Automated processing: your data is not subject to a decision based solely on automated processing that produces legal effects or similarly significant effects (Art. 22 GDPR).

10. How to exercise your rights

Requests to exercise your rights may be submitted in writing to dpo@slaviapharm.ro or by post to the registered office of Slavia Pharm S.R.L., 44C Theodor Pallady Blvd., 032266, Sector 3, Bucharest, marked “For the attention of the DPO”. The Controller will respond within one month at the latest (Art. 12(3) GDPR); this period may be extended by two months in complex cases, with prior notice to you.

11. Right to lodge a complaint

You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, 010336, Bucharest, e-mail: anspdcp@dataprotection.ro, www.dataprotection.ro.

You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, 010336, Bucharest, e-mail: anspdcp@dataprotection.ro, www.dataprotection.ro.

This section is to be completed only if you wish Slavia Pharm to keep your application in its internal recruitment database for future employment opportunities. Ticking this option is voluntary and does not affect the assessment of your current application.

Candidate’s Full Name: ___________________________________

Signature: ___________________________________

Date: _______________