1. Introduction
We take our responsibilities under the General Data Protection Regulation (GDPR) (EU 2016/679) extremely seriously. This document serves as our transparency notice to data subjects located within the European Economic Area (EEA).
Our primary goal is to facilitate secure employment while ensuring that the rights and freedoms of individuals are respected throughout the screening process.
2. Data Controller
Controller Details
Reg: 0105554132676
Bangkok, Thailand
SH Middle East Fz. LLC
Reg: 0000004036841
Dubai, UAE
3. Data We Collect
The scope of data collected depends on the specific background check requested by our client (the employer). Below is a breakdown of the categories of data processed.
| Data Category | Examples |
|---|---|
| Identity Data | Full Name, Date of Birth, Address History, National ID/Passport Number. |
| Academic Records | Diplomas, Degrees, Certificates, Transcripts, Accreditation status. |
| Employment History | Job Titles, Dates of Employment, Performance Reviews, Reason for leaving. |
| Criminal Records | Certificates of Good Conduct, Court Records, Sex Offender Registry checks. |
| Digital Footprint | Publicly available content from professional networks and social media. |
4. Legal Basis for Processing
Under Article 6 of the GDPR, we rely on the following lawful bases to process your personal information. We will inform you of the specific basis when we collect your data.
- Contractual Necessity: The processing is necessary for the performance of a contract between the employer and the candidate (e.g., a contingent offer of employment).
- Legitimate Interest: The processing is necessary for the purposes of the legitimate interests pursued by the controller (the employer), provided that these interests are not overridden by the fundamental rights and freedoms of the data subject.
- Legal Obligation: The processing is necessary for the controller (employer) to comply with the law (e.g., employment in regulated sectors like finance or healthcare).
- Consent: Where the employer does not have a specific legal basis, or for certain sensitive data (like health information), explicit consent may be obtained. Consent can be withdrawn at any time.
5. Your Data Rights
As a data subject, you have the following rights under GDPR. You may exercise these rights by contacting our Data Protection Officer.
Right to Access
You have the right to request a copy of your personal information that we hold. This is known as a "Subject Access Request" (SAR).
Right to Rectification
You have the right to request correction of any inaccurate or incomplete data we hold about you.
Right to Erasure
You have the right to request the deletion of your personal data, provided we are not legally required to retain it.
Right to Restrict Processing
You have the right to request that we restrict the processing of your data in certain circumstances (e.g., while you contest the accuracy of the data).
6. International Data Transfers
Safe Hiring Worldwide operates globally. We may transfer your data to countries outside the EEA. We ensure that any transfer is compliant with GDPR regulations by using:
- Adequacy Decisions: Transferring data to countries recognized by the European Commission as having adequate data protection laws.
- Standard Contractual Clauses (SCCs): Using legal contracts approved by the European Commission to protect your data when transferred to other countries.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, secure servers, access controls, and regular security audits compliant with ISO 27001 standards.
