Personal Data Protection Policy of PHOENIX Pharma EOOD

Data Protection Notice

During the recruitment process and for the purposes of personnel selection, we will request that you provide us with certain personal data. This policy sets out the ways in which we will process these data and comply with all legal requirements applicable to PHOENIX Pharma EOOD in order to protect your personal data.

Who is the controller of your personal data?

Your personal data are collected and processed by PHOENIX Pharma EOOD, Sofia, 199A “Okolovrasten pat” Blvd., registered in the Commercial Register under UIC 203283623, which acts as the data controller. In the event of employment, your personal data may be shared with other companies that are part of the PHOENIX group, Germany.

What personal data may we collect about you and why?

For the purposes of recruitment, we process the personal data contained in your CV. These may include your name, date of birth, photograph provided by you, contact details, address, education, professional experience, and any additional information you choose to provide.

If necessary, we may request information regarding your visa, passport or work permit, certificates, diplomas, professional qualification documents, or driving license.

On what legal basis do we process your personal data?

The data you provide will be processed for the purposes of recruitment for the position you are applying for, in accordance with Article 6(1)(b), (c) and (f) of the General Data Protection Regulation (GDPR).

If we require additional personal data from you, we will inform you whether this is related to the performance of your contract or is due to a legal obligation.

For how long do we retain your personal data?

We retain your personal data for a period of up to 6 months after the completion of the recruitment procedure.

What are your rights regarding the personal data we collect?

ØAccess: You have the right to obtain access to all your data stored by the PHOENIX group, Germany, within one month of your request.

ØRectification: You may request that we correct any inaccurate personal data.

ØErasure: You may request the erasure of your personal data under certain circumstances, in accordance with Article 17 of the GDPR.

ØWithdrawal of consent: You may withdraw any consent you have given for processing in order to prevent further processing, where no other legal grounds exist on which PHOENIX Pharma EOOD may process your data.

ØRestriction: You may request that certain personal data be marked as restricted pending the resolution of complaints, or that processing be restricted under certain other circumstances.

ØPortability: You may request that we transfer your personal data, which we store, to a third party electronically.

ØLodging a complaint: You may lodge a complaint with the Commission for Personal Data Protection, which is the supervisory authority responsible for data protection, regarding the processing carried out by us.