SGS Technical Staffing Services

PRIVACY NOTICE
The protection of your personal data is providers, from former employers when
important to SGS, which has adopted, for • Education, training and employment gathering references, or from publicly
the entire Group, strong principles in this information (e.g. remuneration at your available sources such as business
area, as stated in its Data Privacy Policy current employer, employment dates employment-oriented social networking
available at with your current employer, interview service providers.
https://www.sgs.com/en/privacy-at-sgs. performance evaluation and scores in
any online testing, position information
As used in this privacy statement, “SGS” 3. ON WHICH LEGAL BASIS AND FOR
such as position title, and language
refers to SGS SA and its affiliated WHAT PURPOSE DO WE PROCESS
skills);
companies (each a “Company“) that may PERSONAL DATA
• Any further information submitted by you
process Candidate’s personal data The Company will always process your
as part of your application;
(hereinafter the “Data”), as listed below, personal data for a specific purpose and
pertaining to data of all candidates, from • Identification data collected by browsing will only process such personal data which
initial role application to assigning the Company website and is relevant to achieve that purpose as
successful applicants, placed as communicating electronically such as explained below:
subcontractors and/or on the SGS PAYE cookies, IP addresses, user name and
passwords; a. For fulfilment of contractual obligations
scheme. Each SGS Affiliate is a separate
legal entity. The data controllers of your • Any other data similar to the categories Your personal data is necessary to take
personal information are one or more of mentioned above, processed in the pre-contractual steps at your request, such
the SGS Group of Affiliates listed in our context of an online job application as preparing an agreement for you
Office Directory. Where legally required, process. following a decision to offer you an
SGS Affiliates Privacy Notices will also be assignment as a subcontractor and to
If you accept a role specifically offered as a perform our contractual obligations towards
made available in each relevant SGS
fixed term Subcontractor assigned to an you such as make payments for services.
country.
SGS Client, we will collect the following
additional Data: b. In the context of legitimate interests
1. DATA CONTROLLER AND
• financial details (tax identification and Where required and without unduly
CONTACT DETAILS
bank account details, VAT registration). affecting candidates’ privacy interests or
SGS is responsible as a controller, for fundamental rights and freedoms, the
• personal information (nationality,
collecting information about our Company processes your personal data
eligibility to work documentation,
prospective, current and former candidates beyond the actual fulfilment of the contract
pictures, emergency contacts);
for assignments. for the purposes of the Company’s
If you have any questions or comments • Certification of incorporation, relevant legitimate interests pursued directly by the
about this notice, please contact us: insurance certificates; Company or by a third party. These
• By email at [email protected] or • Terms and Conditions – working legitimate interests may include:
patterns, leave entitlements, role outline, • Undertaking recruitment activities such
• By using our online privacy request form
basic salary, bonus, other remunerations as determining the suitability of a
available at
and benefits e.g. pensions, insurances candidate’s qualifications, checking for
https://www.sgs.com/en/online-privacy-
statement/privacy-request-form or Background checks including employment any existing or potential conflicts of
© SGS Group Management SA – 2023 – All rights reserved – SGS is a registered trademark of SGS Group Management

interest or any other restrictions which

• In writing to the company Data Protection references and Criminal Records (if
required by law or if we have a legitimate may otherwise restrict or prevent a
Officer. Please refer to the Office
interest to do so); candidate’s employment with SGS;
Directory for our local affiliate contact
details or send to: The DPO, SGS • Occupational health information such as • maintain and administer accurate and up-
Headquarters, 1 Place des Alpes, P.O. fitness to work checks; to-date subcontract records, contractual
Box 2152, Switzerland terms and contact details
• Performance management, disciplines
• Please specify your country location and grievances • Verify the accuracy of your personal
and if this relates to a job application. information during the recruitment
• Drugs and Alcohol Testing results;
process through background screening;
2. CATEGORIES AND TYPES OF DATA • any other data which we process in the • Transfer to a potential client for
COLLECTED AND PROCESSED context of our business relationship as
subcontracting assignment.
per the specific applicable contract
We collect basic identification information terms. c. As a result of your consent
such as your name, title, position,
professional history, experience and If you accept a role, as a PAYE candidate As long as you have granted us consent to
contact details. with SGS, we will process the following process the data for certain purposes, this
additional Data within the Company processing is legal on the basis of your
• If you actively apply for a role, either consent. Your consent is always optional
• Ongoing financial details (tax
directly to SGS or through a third-party and can be withdrawn at any time. This
identification and bank account details).
recruitment agency/job board, we will also applies to withdrawing declarations of
usually collect data at point of application • Attendance records and payments, consent that were given to the Company
through to potential offer: including reasons and length of time before GDPR came into force, i.e. before
such as holidays, sickness and all other 25th May 2018. For the avoidance of
Detailed contact and personal information types of leave doubt, withdrawal of consent shall not
(name, home and business address, affect the legality of data processed prior to
telephone, email addresses, gender, date Most of the time we will collect data directly such withdrawal.
and place of birth, citizenship, position, from you. However, we may also collect
title, pictures, ID card, passport numbers personal data about you indirectly from d. Due to statutory or legal obligations or in
and other national ID numbers as required, third parties such as recruitment agencies, the public interest and to protect your vital
country of residence; internet job boards, background check interests
SA

QPULSE REFERENCE HERE

UKGRP-HP-082 v2.0
 Such as providing you with disability as strict as in your home country. If your believe that any information, we hold
access to our premises for interviews or personal data is transferred to a country about you is incorrect or incomplete, you
meetings where applicable. that is deemed to not have an adequate may also request the correction of your
Where the data we collect is needed to level of data protection, we will put in place personal data.
meet Company legal or regulatory suitable safeguards to ensure that such You may also:
obligations or enter into an agreement with transfer is carried out in compliance with • object to the processing of your personal
you or is needed for legitimate purposes, if applicable data protection rules. To ensure data;
the Company cannot collect this personal this level of protection for your personal
information, SGS may use a data transfer • request the erasure of your personal
data the Company will be unable to
agreement with the third party recipient data;
continue the recruitment process and / or
fulfil its contractual obligations (in which based on standard contractual clauses • request restriction on the processing of
case the Company will inform you approved by the European Commission, or your personal data and/or
accordingly). ensure that the transfer is to a jurisdiction • withdraw your consent where SGS has
that is the subject of an adequacy decision obtained your consent to process
4. WHO HAS ACCESS TO YOUR DATA by the European Commission or to the US personal data (without this withdrawal
AND HOW IT WILL BE PROCESSED under the EU-US Privacy Shield affecting the lawfulness of any
framework or any other EU-US data processing that took place prior to the
4.1 Within SGS Global Group
transfer approved mechanism. You may withdrawal).
Your data will be shared within the request additional information in this
Company including Technical Staffing The Company will honour such requests,
respect and obtain a copy of the relevant withdrawal or objection as required under
Services department and other business safeguard by exercising your rights as set
functions and managers, to assess your applicable data protection rules, but these
out below. Where SGS transfers personal rights are not absolute: they do not always
application, check references, verify your data to other group companies, we rely on
information and potentially to contact you apply and exemptions may be engaged.
the standard contractual clauses. We will usually, in response to a request,
about an offer of contract.
ask you to verify your identity and/or
Your contact information might also be 6. HOW LONG YOUR DATA IS provide information that helps us to better
used to improve your job application STORED understand your request. If we do not
experience and SGS’s recruitment We will only retain personal data for as comply with your request, we will explain
process. For example, you might be asked long as necessary to fulfil the purpose for why.
to participate in surveys related to which it was collected or to comply with
recruitment. Your participation in such To exercise the above rights, please send
legal, regulatory or internal policy an email to the contact details mentioned in
surveys is completely voluntary. requirements. Data relating to section 1 above.
If your application is unsuccessful, the unsuccessful candidates for roles within We strive to maintain good customer
information you submit may be referred to the Company is kept for a minimum relations and deal with your issues to your
in the event that you make a later period of 12 months and a maximum of satisfaction. If you are not satisfied with the
application and we may attempt to contact 48 months after the date on which we Company’s answer or processing of your
you via the e-mail address or the notify you that your most recent Personal Data, please let us know and we
telephone number you provide in the event application has been unsuccessful. Data will investigate your concern. Should you
that a subsequent vacancy becomes relating to successful candidates will be still not be satisfied with SGS’s response,
available for which you may be suitable. at least for the duration of the you have the right to make a complaint to a
subcontract agreement and working supervisory authority.
4.2 Outside SGS Group
relationship with the Company, but in
We usually transfer personal data to third most cases the Company will keep your
parties outside the Company to complete 8. HOW DO WE PROTECT PERSONAL
personal data for a period after the
DATA
© SGS Group Management SA – 2023 – All rights reserved – SGS is a registered trademark of SGS Group Management

the purposes listed in clause 3 above: agreement has ended, to allow us to fulfil
• Transfer to Client to whom SGS is our legal obligations. Retention periods The Company implements appropriate
providing search and recruitment may vary depending on why the technical and organisational measures to
services under contract Company needs the Data. The retention protect personal data against unauthorised,
periods for candidate personal data are accidental or unlawful destruction, loss,
• Third party service providers such as IT alteration, misuse, disclosure or access
systems providers, hosting providers, contained within the Company’s
Technical Staffing Services Retention and against all other unlawful forms of
cloud service providers, database processing. These security measures have
providers and third parties who carry out Schedule. been implemented taking into account
pre-employment checks on prospective However, if a candidate wishes to have
their personal data removed from our state of the art technology, proportionate
candidates and relocation and visa cost of implementation, the risks presented
applications agencies. Each of these systems, they can make a request as
by the processing and the nature of the
service providers has signed contracts to described in section 7 below, which we personal data, with particular care for
protect your personal information; will review as set out therein.
sensitive data. In particular, the Company
• The referees which you have provided to is committed to raising awareness,
7. WHAT YOUR RIGHTS ARE AND
us during the recruitment process and confidentiality undertakings and training to
HOW YOU CAN EXERCISE THEM
interviews; ensure that data is not shared or disclosed
• Any legitimate recipient of Your information will be accessible as is to unauthorised persons.
communications required by local laws or necessary for your application, taking
regulations. into consideration our need to comply 9. UPDATES TO THIS NOTICE
with legal requirements under applicable
law(s). We may retain your information to This notice was last updated in January
5. TRANSFER OF YOUR be able to contact you should a suitable 2023. It may be subject to amendments.
INFORMATION TO OTHER COUNTRIES job opening occur in the future. If you do Any future changes or additions to the
SGS is a company that operates globally. not wish to be considered for future processing of personal data as described
Your data might therefore be used globally employment opportunities, we will delete in this notice that may affect you will be
in connection with the recruitment process your information at your request. You communicated to you through the normal
by SGS. You understand that your data have a right to request access and to appropriate channels.
might be processed by SGS in countries obtain a copy of your personal data as
where data privacy legislation might not be processed by the Company. If you
SA

QPULSE REFERENCE HERE

UKGRP-HP-082 v2.0