1. Introduction

2. Definitions

3. Identity and Contact Details of the Data Controller and the Data Protection Officer  

4. Categories and Sources of Personal Data Processed

5. Purposes for Data Processing

• For carrying out your recruitment process, including to process your application; to evaluate your aptitude for the job opening in regard to capabilities and qualifications; to conduct refer-ence checks as allowed or demanded by local laws;  to respond to your inquiries; and to com-municate with you and to structure the recruitment process based on your needs, e.g. in re-gard to possible health issues. 
• To carry out the employment relationship, including in regard to HR and performance man-agement upon hire.
• For the purposes of business process execution and internal management, including for equal opportunity monitoring and ensuring a disabled-accessible workplace.
• For IT security and data breach procedures;
• For compliance with legal obligations including tax regulation; and in relation to obligations addressed to employers in relation to the work relationship such as confirming the applicant's eligibility to work in the respective country of the companies of IDEX Fire & Safety
• For business process optimization, including to improve our application process or to optimize other recruitment processes or diversity programs.  
• For the assertion and defense of legal claims.

6. Legal Basis for Processing Personal Data

• Once you have been informed about the intended Processing of your Personal Data and you have provided your consent This may include foremost your consent to the Processing of your Personal Data by us for future recruitment activities, such as your inclusion in our internal Tal-ent Pool.  The scope of Processing is then determined by the content of the respective con-sent.  You may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on your consent before the withdrawal. Article 6 GDPR.
• If the Processing of your Personal Data is necessary in order to carry out the contractual rela-tionship between you and us, which might include a pre-contractual employment relationship. Article 6 GDPR.
• If the Processing is necessary for IDEX Fire & Safety to comply with a legal obligation.   E.g., a court orders the release of certain information for legal proceedings). Article 6 GDPR.
• If the Processing is necessary for purposes of the legitimate interests pursued by IDEX Fire & Safety or by a third party, except where overridden by your interests or fundamental rights and free-doms which require protection of Personal Data. These legitimate interests can include:
  • Management of the recruitment process, including to enable the recruitment process; assessment and confirmation of suitable candidates for employment; and towards the procurement of a suitable recruitment strategy and corre-sponding implementation.
  • Administrative and management optimization purposes, including business process execution; internal management optimization; aggregate manage-ment reporting or internal training; working climate and equal opportunities monitoring.
  • The procurement of evidence for legal proceedings, including the defence against legal claims asserted against us;  the assertion of our legal claims; and prevention of compliance or other legal violations.
• In accordance with Article 9 paragraphs  2 or 4 GDPR regarding Sensitive Data.

7. Your Rights

• Request access to Personal Data about you (commonly known as a “data subject access re-quest”).  This enables you to receive information about the Personal Data we hold about you and to check that we are lawfully Processing it.
• Request rectification, correction, or updates to Personal Data that we hold about you.  This enables you to correct any incomplete or inaccurate information.  
• Request Personal Data to be transferred in machine-readable format (“data portability”) to the extent this right is relevant in the employment context.
• Request erasure of Personal Data. This enables you to request deletion or the removal of Per-sonal Data where there is no legitimate reason for us to continue to Process it. You also have the right to ask us to delete or remove Personal Data where you have exercised your right to object to Processing (see below).
• Request the restriction of Processing of your Personal Data.  This enables you to ask us to sus-pend the Processing of Personal Data about you if you want us to establish its accuracy or the reason for Processing it.
• Withdraw consent you have given at any time without affecting the lawfulness of processing based on consent before its withdrawal.

8. Data Sharing and International Data Transfers: Intra-Group and External Third Parties

• To countries, which fall under an adequacy decision by the EU-Commission and is deemed to provide an adequate level of protection, currently including Switzerland, Uruguay, Argentina, Japan, Israel, Isle of Man, New Zealand, Guernsey, Canada, An-dorra, Faroe Islands and Jersey; or are  
• Governed by one of the following safeguards: EU Commission-approved Standard Contractual Clauses, GDPR-compliant Data Processor clauses where the US vendor is certified under the EU-US Privacy Shield Framework or Binding Corporate Rules ap-proved by an EU data protection authority. You may receive a copy of these data pro-tection safeguards by contacting us at the contact details given in Section 3above.  

9. Retention of Personal Data

10. Statutory/Contractual Requirements

11. Automated Decision-Making and Profiling