RECRUITMENT PRIVACY POLICY

Dear applicant,

We appreciate your interest in applying for open job positions, as well as in expressing a general interest in employment with ITD sh.p.k. We would like to inform you that InfoSoft Management Services sh.p.k. is the company authorized to provide recruitment services for interested candidates.

InfoSoft Management Services sh.p.k. acts as a Data Processor when recruiting employees on behalf of and for the account of ITD sh.p.k, in accordance with its standards and regulations (the Data Controller).

Both the Controller and the Processor are committed to fulfilling the obligations as set out in Regulation (EU) 2016/679 (GDPR) and Law No. 124/2024 “On the Protection of Personal Data.”

Each party has appointed a Data Protection Officer (DPO) who may be contacted for any request or clarification related to the processing of personal data during the recruitment process.

We assure all applicants that any personal data received and stored in our database is processed and maintained in full compliance with the applicable law.

Collection of personal data

During the recruitment process, whether you are contacted by our Company or you contact us to present your qualifications or preferences regarding a position you want to apply for, it may be necessary to provide or collect certain personal data.

Specifically, we may process the following categories of data:

  • Identification data (name, surname, date of birth, nationality, contact number, email address, residential address);
  • Professional data (education, work experience, qualifications, skills, references);
  • Additional information that you may voluntarily provide in your CV, cover letter, or during the interview;
  • Information from third parties (e.g., employment referees), but only with your prior consent.

If you provide information about other persons, such as referees, you are responsible for ensuring the accuracy of the information provided and for obtaining any necessary consent from those persons so that the Company may contact them to verify the details you have provided.

Based on your references, InfoSoft Management Services sh.p.k. may collect information about you from third parties, but in all cases solely for recruitment purposes, avoiding the collection or processing of unnecessary data.

Purpose of Processing and Legal Basis

The processing of your personal data will be carried out solely for recruitment purposes, specifically for:

  • Assessment of your suitability for the advertised position;
  • Communication with you during the recruitment process;
  • Administration of documentation and evaluation of interviews;
  • Retention of your application for potential future employment opportunities.

The legal basis for processing your data is established under Article 6(1) of the GDPR / Law No. 124/2024, namely: Your consent, when we retain your CV for future job openings; and the necessity to take steps prior to entering into an employment contract for the advertised position.

Measures to Ensure Security and Confidentiality

We declare that we have taken appropriate organizational and technical measures to protect personal data against breaches, unlawful and/or accidental destruction, loss, manipulation, as well as unauthorized access or disclosure of personal data.

The right to request correction/change/deletion of personal data

In accordance with the law and the GDPR, you have the right to request:

  • access to your personal data;
  • correction or deletion of your data;
  • restriction of processing;
  • withdrawal of consent at any time (without affecting the lawfulness of processing carried out before the withdrawal);
  • as well as any other rights granted to you by law.

You may send your requests by email to the official address: humanresources@infosoftgroup.com.al or to the official addresses of the DPOs. You will receive a response within 30 calendar days from the date your request is received.

International Data Transfers

Currently, your personal data are not transferred outside the territory of the Republic of Albania.
If, in the future, any transfer outside the country is foreseen, it will be carried out only to countries that ensure an adequate level of data protection in accordance with the applicable legislation, and you will be notified in advance.

Retention Period of Personal Data

Your personal data collected during the recruitment process will be retained only for the period necessary to fulfill the purposes for which it was collected, as follows:

  • Data of candidates who are not shortlisted for the interview stage: retained for up to six (6) months from the date of application;
  • Data of candidates who participate in an interview or assessment process: retained for up to two (2) years from the date of application or the most recent data update.

This retention period allows for the consideration of your candidacy not only for current vacancies but also for future employment opportunities that may arise during this timeframe.

After the expiration of the retention period, your personal data will be permanently deleted from our database.

Applicant’s Consent

By submitting your application or participating in the recruitment process, you acknowledge that:

  • you have read and understood this Privacy Policy; and
  • you give your informed consent for the processing of your personal data for the purposes described in this policy.

Contact infomation:

Data Protection Officer (DPO) of the Controller (ITD sh.p.k):

  • Name: Eugena Agalliu
  • Email: eagalliu@infosoftgroup.com.al

Data Protection Officer (DPO) of the Processor (Infosoft Management Services sh.p.k):

  • Name: Refie Qypi
  • Email: rqypi@infosoftgroup.com.al

 

I accept