1. Our Commitment to Data Protection
EVA Business Solutions Heorhii Skoropad (trading as World Manpower) is fully committed to compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). As an international recruitment and staffing agency based in Warsaw, Poland, we understand that protecting the privacy and security of the personal data of our candidates and clients is not just a legal obligation, but a cornerstone of our business reputation and trust.
2. Principles of Processing
We ensure that all personal data handled by our agency is:
- Processed lawfully, fairly, and transparently. We are clear about what data we collect (e.g., CVs, trade test results) and why.
- Collected for specific, legitimate purposes. Data is used strictly for recruitment, visa processing, and employment administration.
- Data minimization. We only request information that is necessary for the specific role or migration process.
- Accurate and kept up to date. We actively verify candidate qualifications through our testing facilities to ensure data accuracy.
- Stored for limited periods. We do not retain candidate data longer than necessary for the recruitment cycle or legal compliance.
- Processed securely. We use robust technical and organizational measures to prevent unauthorized access.
3. Lawful Basis for Processing
In the course of our recruitment activities, we rely on the following lawful bases:
- Consent: For collecting CVs and creating candidate profiles in our database.
- Contract: For processing data necessary to fulfill staffing agreements with our clients or employment contracts with workers.
- Legal Obligation: For processing data required by tax, labor, and immigration authorities (e.g., visa applications).
4. International Data Transfers
Given the global nature of our business (sourcing talent from Asia, Eastern Europe, and Africa for deployment in Europe), we frequently transfer personal data across borders.When transferring data outside the European Economic Area (EEA) to countries that do not have an adequacy decision from the European Commission, we implement appropriate safeguards, including:
- Standard Contractual Clauses (SCCs): We incorporate EU-approved data protection clauses in our agreements with partners and service providers in third countries.
- Strict Vetting: We ensure our overseas partners adhere to high standards of data confidentiality.
5. Data Security Measures
We have implemented a comprehensive security framework, including:
- Encryption of digital records.
- Access controls (data is accessible only to authorized HR and recruitment staff).
- Secure physical storage for hard-copy documents (e.g., during trade tests or visa processing).
- Regular staff training on data protection protocols.
6. Information for Our Corporate Clients
When acting as a Data Processor or Joint Controller with our corporate clients (employers), we guarantee:
- Full cooperation in handling Data Subject requests (e.g., if a candidate asks to be deleted).
- Prompt notification in the unlikely event of a data breach (within 72 hours).
- Assistance with Data Protection Impact Assessments (DPIA) where relevant to large-scale recruitment projects.
7. Contact Officer
We have appointed a dedicated point of contact for all GDPR-related inquiries. For any questions regarding our data protection practices, please contact:
Data Protection Representative:
EVA Business Solutions Heorhii Skoropad
st. Rodziny Hiszpańskich, no. 8, 02-685, Warsaw, Poland
Email: info@worldmanpower.com
