Personal data processing policies

Karyon recruitment services & consulting,
(hereinafter referred to as “controller”)
 

1. Introductory provisions
This document sets out how our company Karyon recruitment services & consulting, operating in the field of recruitment and employment mediation within the EU, processes personal data of job applicants, clients, and business partners in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
 

2. Data controller
Company name: Karyon recruitment services & consulting
Registered office: 205, Arcibiskup Makarios Avenue, Limassol, Cyprus
ID / registration number: 60214476F
Email for data contact: info@karyonrsc.com
 

3. Categories of data subjects

• Website visitors

• Job applicants (candidates)

• Clients (job applicants after signing the Mediation Agreement)

• Partners (Clients/companies for whom we search suitable employees)
   

4. What data we process
We process only the necessary data that we need to fulfil the purpose of mediating our services.

For website visitors:

• IP address and cookies, i.e., behaviour on our website (visited sections, clicks, time spent on page, etc., for website analysis)

• We process only data voluntarily provided via the contact form:

  • Name and surname

  • Email address

  • Phone number (if provided)

  • Content of the message/CV sent to us
     

For candidates:

• Identification and contact data (name, email, phone, address)

• Information in the CV (education, experience, language skills, competencies)

• Preferences and expectations regarding employment

• Communication history

• Reference verification (only with prior consent)
  Purpose: Mediation of job opportunities and management of selection procedures
   

For clients:

• Identification and contact data (name, email, phone, address)

• Information in the CV (education, experience, language skills, competencies)

• Preferences and expectations regarding employment

• Communication history

• Reference verification (only with prior consent)

• Date of arrival and start with the partner

• Selected job position and partner

• Billing information

• Mediation agreement (with Karyon recruitment services)
   

For partners:

• Company name, name of contact and responsible person, position, contact

• Information about the company, recruitment requirements, offered salary, duration of the offered employment contract, company accommodation

• Billing information
  Purpose: Fulfilment of contractual relationship, record-keeping, and communication
   

5. Legal basis of processing
Processing is based on:

• Consent of the data subject (especially for candidates to retain their profile)

• Performance of a contract and steps prior to its conclusion

• Legitimate interest of the controller (e.g., fraud prevention, record-keeping of communication)

• Compliance with legal obligations (accounting, audits)
   

6. Data retention period

• Candidate data is retained for a maximum of 2 years from the last contact, unless a new consent is given

• Accounting and tax documents according to legal requirements (usually 10 years)

• Data may be retained longer if necessary for legal defence
   

7. Who we share data with

• Clients seeking employees, only with the candidate’s consent

• IT (for improving our website) and accounting service providers (with GDPR-compliant agreements)

• Authorities and public bodies – only if required by law

• Data is not transferred outside the EU or to other companies
   

8. Rights of data subjects
Every data subject has:

• Right of access to their data

• Right to correct inaccurate data

• Right to erasure (“to be forgotten”)

• Right to restriction of processing

• Right to data portability

• Right to object to processing

• Right to withdraw consent to processing at any time

• Right to lodge a complaint with the supervisory authority
   

Supervisory authority:
Cyprus: Office of the Commissioner for Personal Data Protection (www.dataprotection.gov.cy)