Notification of job applicant's privacy

(in accordance with the General Data Protection Regulation 679/2016 ("GDPR"))

As part of any recruitment procedure, Porsche Leasing BG Ltd ("the Company") collects and processes personal data relating to job applicants. The organization is committed to being transparent about how it collects and uses this data and to meeting its data protection obligations.

What information will we collect?

"Porsche Leasing BG Ltd collects a range of information about you. This includes:

- Your name, address and contact details including email address and telephone number;
- CV details;
- details of qualifications, skills, work experience and work experience;
- information about your rights to work in Bulgaria.

"Porsche Leasing BG Ltd may collect this information in various ways. For example, data may be contained in job applications, CVs or resumes obtained from your passport or other identification documents, or collected during an interview or other form of assessment.

We may also collect personal data about you from third parties, for example from former employers in connection with job references. This information will only be sought from third parties once a job offer has been made to you and we will in turn inform you of these actions taken.

The data will be stored in a variety of places, including on your application register, HR management systems and other information systems (including email).

Why does Porsche Leasing BG Ltd process personal data?

We need to process personal data in order to take the necessary action in relation to your request before proceeding to enter into a contract with you. We may also need to process your data in order to enter into the contract itself with you.

In some cases we need to process data to make sure we comply with our legal obligations. For example, it is our obligation to check that the applicant is entitled to work in Bulgaria before they are appointed.

"Porsche Leasing BG Ltd has a legitimate interest in processing personal data during the recruitment procedure and to keep records of this procedure. The processing of job applicants' data allows us to manage the recruitment procedure, assess and confirm the applicant's ability to perform the job and decide who to offer the job to. We may need to process information from job applicants in order to respond to and defend against legal claims.

"Porsche Leasing BG Ltd may process special categories of personal data, such as information about ethnic origin, sexual orientation or religious beliefs, to enable us to monitor the recruitment process. We may also collect information about whether applicants have any disabilities in view of which necessary adjustments should be made for those applicants. Such information may also be processed in order to fulfil our obligations and exercise our specific rights in relation to our capacity as an employer.

If your application for employment is not approved, Porsche Leasing BG Ltd will not retain your personal data, which will be destroyed after the selection procedure is completed in accordance with the Company's internal rules. Currently such data is kept by the Company for a period not exceeding 6 months.

Who has access to the data?

Your information may be exchanged internally for the purposes of the recruitment procedure. This includes the Human Resources Officer, the recruiters interviewing and taking part in the recruitment process, the managers of the departments with vacancies, employees of the Marketing Department if access to data is necessary for the exercise of their roles.

We will not share your data with third parties unless your application for appointment has been approved and we make you an offer of employment. In this case, we may share your data with former employers in order to obtain information about you and to those competent regarding your previous employment in order to carry out necessary background checks.

How does Porsche Leasing BG Ltd protect data?

We treat the security of your data with responsibility. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disseminated, and that it is not accessible to anyone other than our employees, and in the proper performance of their duties.

For what period does Porsche Leasing BG Ltd. store the data?

If your application for appointment has not been approved, the organisation will not hold your data. If your application for appointment has been approved, the personal data collected during the selection process will be transferred to your employment file (electronic and paper) and retained for the duration of your employment. You will receive a new notice about the periods for which your data will be stored.

Your rights

As a data subject, you have a set of rights. You can:

- access and obtain a copy of your data upon request;
- ask the organization to replace incorrect or incomplete data;
- require the organization to delete or stop processing your data, for example for data that is no longer necessary for the purposes of the processing; and
- object to the processing of your data where the Company relies on its legitimate interest as the legal basis for the processing.
If you would like to exercise any of these rights, please contact our Data Protection Officer ("DPO") - Nadezhda Krasteva Bozhkova, contact phone : +359 (2) 8071 436, email nadezhda.bozhkova@porschebulgaria.bg. If you believe that the organization has not complied with your data protection rights, you can contact the Data Protection Commission.

What happens if you do not provide personal data?

You are under no legal or contractual obligation to provide data to Porsche Leasing BG Ltd during the recruitment period. However, if you do not provide information, we may not be able to process your application correctly or at all.