Maxiflex LTD and its affiliated companies (“Company”, “we”, “our”, or “us”) are committed to protecting and respecting your privacy. This notice sets out the basis on which any personal data (“Personal Data" means any data that can or may be used whether alone or in combination with other information in order to identify you) that you provide to us, or that we otherwise collect, will be processed. This notice does not form part of any contract of employment or other contract to provide services.
It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing Personal Data about you, so that you are aware of how and why we are using such information.
1. OUR DATA PROTECTION PRINCIPLES
We are committed to ensure that the Personal Data we process about you will be:
2. WHY DO WE COLLECT YOUR PERSONAL DATA?
We collect, store and process Personal Data about you for the following purposes:
3. WHAT INFORMATION WE COLLECT ABOUT YOU
We collect, store, use and process all or some of the following categories of Personal Data about you:
4. HOW DO WE COLLECT YOUR PERSONAL DATA?
Prior to your employment - we collect Personal Data about employees through the application and recruitment process, either directly from candidates or sometimes from an employment agency or background check provider. We may also collect additional information from third parties including former employers, credit reference agencies or other background check agencies or publicly available resources (such as social networks).
During your employment - we will collect Personal Data in the course of job-related activities throughout the period of you working for us.
5. HOW DO WE USE YOUR PERSONAL DATA?
Most commonly, we will use your Personal Data in the following circumstances:
If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as paying you or providing a benefit), or we may be prevented from complying with our legal obligations (such as to ensure the health and safety of our workers).
We will only use your Personal Data for the purposes for which we collected it. If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your Personal Data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
6. HOW DO WE USE SENSITIVE PERSONAL DATA?
Your Consent - In some circumstances, we may approach you for your written consent to allow us to process certain particularly sensitive data. If we do so, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent. You should be aware that it is not a condition of your contract with us that you agree to any request for consent from us.
7. SHARING YOUR PERSONAL DATA WITH THIRD PARTIES
Where required by law, necessary to administer the working relationship with you or where we have another legitimate interest in doing so, we may have to share your data with third parties, including third-party service providers and other entities in the Company group.
We require third parties to respect the security of your data and to treat it in accordance with the law.
We may transfer your Personal Data outside the EU. If we do, you can expect a similar degree of protection in respect of your Personal Data.
All our third-party service providers and other entities in the group are required to take appropriate security measures to protect your Personal Data. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
Transferring information outside the EU
We may need to transfer the Personal Data we collect about you to third parties outside the EEA, in order to perform our contract with you. In order to ensure that your Personal Data does receive an adequate level of protection we transfer data outside of the EEA by using Standard Contractual Clauses approved by the European Commission which give personal data the same protection it has in Europe.
If you require further information about this protective measure, you can request it from dpo@maxiflexglobal.com .
8. HOW DO WE PROTECT YOUR PERSONAL DATA?
We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your Personal Data to those employees and other third parties who have a business need to know. They will only process your Personal Data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
9. RETAINING YOUR PERSONAL DATA
We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Details of retention periods for different aspects of your Personal Data are available in our Data Retention Policy. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances we may anonymize your Personal Data so that it can no longer be associated with you, in which case we may use such information without further notice to you. Once you are no longer an employee of the Company we will retain and securely destroy your Personal Data in accordance with our
Data Retention Policy.
10. DATA PROTECTION OFFICER
Mrs. Doria Papanicolaou
GURICON HOUSE
48 Inomenon Ethnon,
2nd & 3rd floor,
CY-6042 Larnaca, Cyprus
dpo@maxiflexglobal.com
11. YOUR RIGHTS AS A DATA SUBJECT
It is important that the Personal Data we hold about you is accurate and current. Please keep us informed if your Personal Data changes during your working relationship with us. We encourage you to keep your personal data up to date on all platforms made available to you in the course of your employment.
Under certain circumstances, by law you have the right to:
a. Access to your Personal Data. This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it.
b. Correction of your Personal Data. This enables you to have any incomplete or inaccurate information we hold about you corrected.
c. Erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it.
d. Object to processing of your Personal Data. Where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
You also have the right to object where we are processing your Personal Data for direct marketing purposes.
e. Request the restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of Personal Data about you, for example if you want us to establish its accuracy or the reason for processing it.
f. Request the transfer of your Personal Data (Right of portability). This enables you to request to receive your personal data in a structured, commonly used and machine-readable format and to transmit those data to another party.
If you wish to exercise any of the aforementioned rights, please contact our DPO at dpo@maxiflexglobal.com.
12. CHANGES TO THIS PRIVACY NOTICE
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your Personal Data.