Summary of APPLICANT PRIVACY STATEMENT This Summary Applicant Privacy Statement regarding job applicant’s personal data processing (“Summary Statement”) will provide you with a summary of the accompanied, detailed Applicant Privacy Statement (hereafter “Full Statement”) on our data processing activities with respect to individually identifiable information about job applicants for positions ("Personal Data") at ATLANTIS HOTEL. ATLANTIS HOTEL (Κ. ΚΟΥΛΙΑΣ Α.Ε.) has its registered offices in Lambi, Kos, Greece, 85300 (“ATLANTIS HOTEL” or “we” or “us” or “our”).
Scope of applicabilityThis Summary Statement applies to you if you are applying for a position at ATLANTIS HOTEL or if you are sending an unsolicited application/CV to ATLANTIS HOTEL. It also applies if you apply for a position at ATLANTIS HOTEL through a third-party provider, such as recruitment agency or a job search website (e.g. www.kariera.gr). In this case, we draw your attention to the fact that special terms apply to the processing of personal data by these third party providers, which we encourage you to ask them from these third party providers and keep a copy of them.
Processing of your Personal Data & Categories of Personal DataWe process the following Personal Data collected from you (during the application and job interview process or as included in your unsolicited application/CV), or from authorized third parties (recruitment companies), as applicable: full name, contact details, information related to your education and professional experience, language skills, your eligibility to work in Greece, information about the reason for your application at ATLANTIS HOTEL, information included in the CV you shared with us and any other information you have provided. For more details see I. 1. of the Full Statement further below.
Processing purposes We process your Personal Data for the following purposes, in order to:
- determine your suitability for the position you are applying for as part of the application process,
- inform you for existing or potential job opportunities that may be of your interests,
- protect the legal interests of ATLANTIS HOTEL (e.g., as required to defend against legal claims),
- comply with legal or regulatory obligations under laws applicable to ATLANTIS HOTEL.
For more details see I. 2. of the Full Statement further below.
Legal basis for the processing of your Personal DataOne of the key privacy law requirements is that any processing of Personal Data must have a legal justification. We generally use the following legal justifications: the processing is necessary (i) to conclude an employment contract with you [Art. 6(1)(b) GDPR], (ii) to comply with a legal obligation [Article 6 (1) (c) GDPR], (iii) to assert our legitimate interest [Art. 6(1)(f) GDPR], or (iv) based on your consent [Art. 6(1)(a) GDPR], where required. For more details see I. 3. of the Full Statement further below.
Data transfers and recipients of personal dataWe may, where applicable, transfer your Personal Data to our service providers, external advisors, and, in accordance with applicable law, governmental authorities, courts, and similar third parties, some of the aforementioned recipients might be located in jurisdictions outside the EU. For more details see II. of the Full Statement further below.
Retention periods for and deletion of your Personal DataWe delete your data immediately, in case your application is rejected, or in case you reject our job offer, although your application has been approved.
In case of rejection, the data collected during the recruitment process is retained by us for a maximum period of two years in case your application has been rejected but you asked from us to be informed for future positions.
In case of approval and acceptance of the job offer, you will be informed during the recruitment process and before the stage of assuming your duties about the processing of your data that we carry out as an employing company.
For more details see point III. of the Full Update or click here.
Your statutory rightsYou have specific rights with regard to the processing or your Personal Data, each as per the conditions defined in applicable law, such as the right to have access to your data, to have them corrected, erased or handed over. Please refer any of your questions to ATLANTIS HOTEL at info@atlantishotel-kos.com. For more details see IV. of the Full Statement further below.
Changes of this Summary and the Full Statement as well as further noticesBoth this Summary and the Full Statement are subject to change. You will be notified adequately of any such changes. In case of discrepancies, the latest update will always apply.
How to contact usIf you wish to exercise your data subject rights or if you have any other questions concerning this Statement, please address your request at info@atlantishotel-kos.com.
FULL APPLICANT PRIVACY STATEMENT I.YOUR PERSONAL DATA / PURPOSES AND LEGAL BASIS OF THE PROCESSING
We will process your Personal Data in this regard, which we collect from you during the application process, as part of the job interview process or included in the unsolicited application/CV you have sent us or from third parties (e.g., employment agencies).
1.Categories of Personal Data
As needed, we may collect the following Personal Data categories:
- Identification data, such as name, date of birth, nationality.
- Contact details, such as address, phone number, email address.
- Recruitment-related information, such as professional experience (including references from previous employers), education, language skills, qualifications, talents, professional memberships.
- Interview notes.
- Communication details, such as email content.
- Information about your eligibility to work in Greece.
- Information about the reason for your application at ATLANTIS HOTEL.
- Any other information you provide in your CV/resume, cover letter and/or the documents you upload or provide to us by any other means.
The provision of Personal Data is necessary for the decision whether an employment contract with you will be concluded (hiring decision). The provision of Personal Data by you is voluntary. However, if you do not provide your Personal Data, the application process may be delayed and/or we may not be in a position to properly evaluate your applications and essentially need to reject it.
2.Processing Purposes
We process your Personal Data, to the extent permitted or required under applicable law, for the purposes to
- determine your suitability for the position you are applying for as part of the application process.
- contact you regarding your application.
- inform you for potential other job opportunities which might be of your interest (if you have provided your consent).
- protect the legal interests of ATLANTIS HOTEL (e.g., as required to defend against legal claims) and
- comply with legal or regulatory obligations under laws applicable to ATLANTIS HOTEL.
3.Legal Basis
The processing of your Personal Data is mainly necessary to evaluate your CV and professional background, as well as to determine whether to conclude an employment contract with you. This processing is based on Article 6(1)(b) of the General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR"). The legal basis for processing any information you provide to us in your application, which belongs to special categories of data, such as health data, is Article 9 para. 2 b) GDPR, which is also related to our obligations under labor law and to safeguarding your fundamental rights and Article 9 para. (2h) to assess the worker's working capacity.
If you have applied for a specific job position and have additionally provided your consent for ATLANTIS HOTEL to inform you for potential job opportunities that may be of your interest, the processing of your Personal Data is based on your consent [pursuant to Article 6 (1) (a) GDPR] (please specify that such consent is not necessary if you have sent us an unsolicited application/CV). Your Personal Data may also be processed when necessary to comply with our legal obligations (pursuant to Article 6 (1) (c) GDPR): e.g. if you are recruited, your data is transferred to the competent tax and social security authorities, or for the pursuit of the following legitimate interests (pursuant to Article 6 (1) (f) GDPR): in order to protect the legitimate interests of ATLANTIS HOTEL, e.g. as necessary to protect against legal claims).
II.DATA TRANSFERS AND RECIPIENTS
ATLANTIS HOTEL transfers personal data in accordance with applicable laws. Generally, your personal data are not transferred outside EU/EEA. To the extent that, in the context of and for the needs of the above-mentioned purposes, your personal data need to be transferred outside EU, such data transfer will take place in accordance with applicable law and ATLANTIS HOTEL will ensure an adequate level of data protection, by entering into appropriate data transfer agreements based on Standard Contractual Clauses, which are accessible upon request at info@atlantishotel-kos.com or taking other measures to provide an adequate level of data protection. ATLANTIS HOTEL establishes or confirms that all data recipients will provide an adequate level of protection for your personal data.
We may transfer some of your Personal Data to other parties, as permitted pursuant to Art. 6 para. 1 lit. f) GDPR, for the legitimate interests of ATLANTIS HOTEL, i.e., in order to be able to support our recruiting processes. We may use externally provided IT systems or services provided by third party vendors as a support in the recruitment process and third-party providers of recruiting software services.
We may also transfer of your Personal Data to public authorities, if legally required to do so under applicable national law and according to the Art. 6 para. 1 lit. c) GDPR.
III.RETENTION PERIODS
The main principle is that Personal Data pertaining to a job application will be deleted as soon as a decision has been made in respect of the job and any applicable period to appeal or otherwise dispute the decision has expired. In other words, Personal Data processed for the purposes stated in the Statement will only be stored for as long as necessary to evaluate them.
In case your application is rejected (including your unsolicited applications), or you reject our job offer, your personal data will be deleted immediately with safety. If you have applied for a specific position and in case of rejection of your application you have provided your consent which allows ATLANTIS HOTEL to inform you about existing and future new positions that may be of interest to you, your Personal Data is stored for 2 years maximum, or until you withdraw your consent and let us know about such withdrawal.
In case of hiring, you will be informed at the stage of taking up your duties about the processing of your data that we carry out as an employing company.
ATLANTIS HOTEL may retain anonymized data, i.e. data that does not allow you to be identified, for internal statistical purposes and for the purpose of improving our recruitment process.
IV.YOUR STATUTORY RIGHTS
Under the conditions provided for in the relevant legislation, you have the following rights regarding the protection of your Personal Data:
(i) Right of access: You may contact us to explain to you if and which data we retain about you, as well as the way we process such data. You may also request a copy of your personal data which retain about you.
(ii) Right to rectification: If you believe that your data are not accurate or need to be updated, you have the right to ask for the rectification of inaccurate personal data and to completion of the incomplete data.
(iii) Right to erasure: Under certain circumstances, e.g., the personal data are no longer necessary, you withdraw your consent, the data have been unlawfully processed, you have the right to ask for the erasure of personal data.
(iv) Right to restriction of processing: If you believe that your data are not accurate or their processing is unlawful or you think that we no longer need your data or you have objections to automated processing, you have the right to ask for the restriction of processing.
(v) Right to data portability: You have the right to receive the data concerning you in a structured, commonly used and machine-readable format, as well as the right to transmit those data to another entity (controller), indicated by you to us.
(vi) Right to object: You have the right to object to processing of your personal data from us on grounds relating to your particular situation, unless, among other reasons, if there are compelling and legitimate grounds for the processing which override your interests, rights and freedoms. You also have the right to object when a decision concerning you is based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you (the law provides exceptions which apply).
If, where applicable, you have provided your consent to any processing activity (e.g. in order to be contacted in case of job vacancy), you may withdraw your consent at any time, with effect for the future, i.e. such withdrawal will not affect the lawfulness of the processing prior to the withdrawal of consent.
The table below lists your rights per processing purpose and corresponding legal basis:
| RIGHTS (GDPR ARTICLES) |
Access (15) | Rectification (16) | Erasure (17) | Restriction (18) | Portability (20) | Objection (21) | Withdrawal of consent (7.3) |
PURPOSE | LEGAL BASIS | | | | | | |
Assessment of recruitment conditions | 6.1b GDPR (take steps prior to contract) | Χ | Χ | Χ | Χ | | Χ | |
Inform you about future job opportunities | 6.1a GDPR (consent) | Χ | Χ | Χ | Χ | Χ | | Χ |
V. RIGHT OF APPEAL TO THE AUTHORITYWe inform you that you have the right to appeal to the Hellenic Data Protection Authority (HDPA) for issues relating to the processing of your personal data. The Hellenic Data Protection Authority is based in Athens (Kifisias 1-3, PC 115 23). Regarding the competence of the Hellenic Data Protection Authority and the procedure for a complaint submission, you can visit the website of the Hellenic Data Protection Authority (www.dpa.gr). Further and more detailed information about your rights can be found on the website of the Hellenic Data Protection Authority, which we encourage you to visit.
VI. CONTACT ATLANTIS HOTELTo contact ATLANTIS HOTEL and/or to exercise your rights mentioned in the above section entitled "IV. Your Rights» you can contact us at the following address: info@atlantishotel-kos.com