This is a boilerplate template and must be reviewed and localised by counsel in each market before publication.

Your personal data

Personal data relates to a living individual who can be identified from that data, whether on its own or together with other information held by the data controller. The processing of personal data is governed by the EU General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”) together with the national data protection laws of each country in which Tessero operates.

Personal data includes, but may not be limited to:

Name / Email address / Telephone number / Location details / Address / Date of birth / Nationality / Education and qualifications / Work experience / Bank details / Tax and social-security identifiers / Emergency contact details / Online identifier / IP address.

As part of our registration process we may also ask for details of the following special categories of data, and will request your explicit consent before sharing them with named third parties:

• Health or medical information

• Criminal-record information, where lawful and relevant to a role

Refusal to provide certain data may limit or exclude you from some opportunities. All special-category data is processed in line with Articles 9 and 10 of the GDPR.

Who are we?

Tessero is a specialist recruitment group operating across six European markets — Sweden, Denmark, Hungary, Romania, Luxembourg and Czechia — and is part of the Meraki family. The relevant Tessero market entity acts as the data controller in respect of the personal data we hold about you, meaning it decides how and why your personal data is processed.

Our point of contact for data-protection matters is the Tessero Data Protection team, which can be reached via the contact page at tesserogroup.com. [Insert registered entity name, company number and registered office for each market at localisation stage.]

Where have we sourced your data?

If you did not provide your personal data to us directly, we are likely to have sourced it from one of the following: LinkedIn or other professional networks; job boards and CV databases; information publicly available on a social-media platform; or a referral from another person.

How do we process your data?

We process your data for the purpose of providing work-finding services. We comply with our obligations under the GDPR by keeping your personal data up to date; storing and destroying it securely; not collecting or retaining excessive amounts of data; protecting personal data from loss, misuse, unauthorised access and disclosure; and ensuring that appropriate technical and organisational measures are in place.

We use your personal data to provide work-finding services and to support any subsequent employment, engagement, placement or selection process. This includes, but may not be limited to: providing your personal data (and, where relevant, special-category data) to prospective employers and to any managed-service or recruitment-process-outsourcing provider engaged on their behalf; requesting references from previous employers; verifying qualifications, certifications and professional memberships; and processing payment for any work carried out by you.

Our lawful bases for processing are typically the performance of a contract, our legitimate interest in providing recruitment services, compliance with a legal obligation, and, for special-category data, your explicit consent.

Sharing your information with third parties

In order to provide work-finding services to you, your personal data may be disclosed to: potential employers and third parties acting on their behalf; organisations approached to obtain professional or academic references; organisations contacted to verify training, qualifications, certifications and professional memberships; relevant government or regulatory bodies for the purpose of verifying your right to work; our professional advisers and administrative service providers; and any third-party company through which you are contracting or propose to contract.

We may also disclose your personal data where we are permitted or required by law to do so: to comply with a legal obligation, court order or lawful request from a governmental or regulatory authority; to investigate or prevent crime; or to bring or defend legal proceedings. Your personal data will not otherwise be shared without your consent.

International transfers

Your personal data is processed within the European Economic Area (EEA). Where any transfer outside the EEA is necessary, we will ensure an appropriate safeguard is in place, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, and we will update this notice accordingly.

How long will we retain your information?

We will usually hold your information for a period of 24 months, after which we will request your consent to continue to retain it for the purpose of providing work-finding services. We may be under a legal obligation to retain certain data for longer — for example, where we have placed you with a client and are required to keep auditable financial records. Where this applies, we hold only the minimum data required for that purpose.

Your rights

Under the GDPR, your rights include: the right to be informed; the right of access; the right to rectification; the right to erasure; the right to restrict processing; the right to data portability; the right to object; the right to withdraw consent at any time; and the right to be informed of a personal-data breach.

You also have the right to lodge a complaint with your national supervisory authority: Sweden — Integritetsskyddsmyndigheten (IMY); Denmark — Datatilsynet; Hungary — Némzeti Adatvédelmi és Információszabadság Hatóság (NAIH); Romania — ANSPDCP; Luxembourg — Commission Nationale pour la Protection des Données (CNPD); Czechia — Ú’ad pro ochranu osobních údajú (ÚOOÚ).

We do not use automated decision-making, including profiling, within our work-finding services.

When you submit your personal information

By submitting your personal data and application, you confirm that you have read and understood this notice and consent to the use and storage of your information in line with it.

Changes to this privacy notice

We keep this notice under regular review and may update it from time to time. Any changes will be published on our website, tesserogroup.com. Where appropriate, we will also contact you to notify you of any material changes.

Contact us

If you have any questions about this notice, wish to exercise your right to be forgotten, or would like a copy of, or to transfer, your personal information, please contact us via the contact page at tesserogroup.com.