GDPR Notice and Policy for Candidates

BLACK PEAK TALENT EOOD warmly welcomes you to our internet page. We appreciate your interest in our company.

In this Privacy Notice, hereinafter referred to as “the Notice”, we provide information regarding the processing of your personal data. We are committed to transparency by providing you with clear details about the types of personal data that we process, the purpose of this processing, the retention period, the legal basis for the processing, as well as any other information we are entitled to share according to current legislation.

BLACK PEAK TALENT, (“we”, “us”, “the Company”) are data controller of your personal data, which we process in relation to your participation in the selection and recruitment procedures for hiring new employees for our clients or for our company.

We are a licensed recruitment company that assists in the recruitment of employees under traditional employment relationships, as well as associates under B2B or freelance contract for our clients. In this regard, we process your personal data to provide our services by helping you find suitable job opportunities.

BLACK PEAK TALENT is a commercial company registered in the Commercial Register of the Republic of Bulgaria with UIC 207119079. The registered office and management address of the company is Sofia, 1729, Mladost district, 31 Aleksandar Malinov Blvd. We are registered as a Private Employment Agency (PEA) for the provision of employment services, with registration number 3453/07.12.2022 for the Republic of Bulgaria and registration number 3454/07.12.2022 for the same activities in other countries.

The Company is a personal data controller within the meaning of applicable law. The Company processes personal data only in compliance with the requirements of Bulgarian and European legislation (Regulation (EU) 2016/679 of the European Parliament anda of the Council, dated 27 April 2016, on the protection of personal data, as well as the Personal Data Protection Act (PDPA).

How can you contact us?

If you have any questions regarding the confidentiality of your personal data, you can contact us through the following methods:

In person or by sending a registered letter to our address: Sofia, 1729, 31 Aleksandar Malinov Boulevard
To our email address: talent@blackpeak.tech.

If you do not agree with our answer or feedback, you have the right to lodge a complaint with the Data Protection Supervisory Authority:

Address: 2 Prof. Tsvetan Lazarov Boulevard, Sofia, 1592
Mobile 02/91-53-519
Work hours from 9:00 to 17:30
email: kzld@cpdp.bg
website: www.cpdp.bg

For more detailed information you can visit the Data Protection Supervisory Authority of the Republic of Bulgaria’s website at www.cpdp.bg.

Aim of the processing.

The aim of the personal data processing is conducting a recruitment/selection of staff/personnel by the Company. For this aim the Company collects, analyses, stores and processes the applicants's personal data in electronic form.

This includes:

Determining of qualifications, competences and assessment of suitability;
Determining of the professional and work experience of the applicant;
Identifying and assessing personal qualities, incl. the organisation and conduct of interviews;
Helping you find suitable job opportunities;
Sending your CV to potential employers (our clients);
Retaining the applicant's personal data and assessing eligibility for future selections.

What kind of personal data do we collect?

We collect personal data about you that you provide to us when applying for a position in our Company. In cases where BLACK PEAK TALENT EOOD acts as an intermediary for our clients' organizations, we also collect your personal data when you apply for positions with those clients. We sometimes collect personal data indirectly from third party sources, such as recruitment agencies. The following are the types of personal information we collect:

а. Your biographical details - including full name, date of birth (if provided in your application or CV), previous employment, CV, education and qualifications, professional skills, references and credentials;
b. Contact information - including phone number, email address;
c. Identification data – a photograph from the CV, only if you have provided one;
d. Data of a technical nature – browser type, browser extensions, screen resolution, forwarding/exit pages, operating system, date/time and forwarding URL address. For more information and to learn how to navigate the technologies we use, please, visit our Cookie Policy.

If you would like to apply for a position through your LinkedIn account for a job advertisement published on LinkedIn, you agree that we process the data contained in your LinkedIn profile for recruitment purposes.

Please keep in mind that you are NOT obliged to provide us with your personal data, but without this information we are unable to offer you our services. A minimum amount of information is required to assess your suitability for the position you are seeking.

Grounds for processing the data.

We typically collect your personal data from the CVs, cover letters, or references that you provide willingly for the aim of applying for a specific position. In order to take the necessary steps in response to your request, and before entering into a contractual relationship, either with us directly or with our partner companies, we need to process your personal data if you apply for a position. The processing of your personal data may also be necessary solely for the purpose of concluding a contract with you if you are applying for a position as our employee.

We also process personal data based on contractual relationships. This is the case in which we contact you regarding your approved application. In order to assist you in front of this and other employers, we must conclude an Intermediary agreement with you. This is our legal obligation related to the license we hold. We register the Agreement on the information platform of the Employment Agency. We retain the Agreement for 5 years, in accordance with the legally defined requirements (please see art. 41, para. 2 of the Ordinance on the Terms and Conditions for the performance of employment mediation activities).

We also collect and process your personal data based on the legitimate interest in conducting and protecting our business. The provision of personal data by you in response to a job advertisement published on our website or on an electronic jobseeker portal, as well as a result of business electronic correspondence or communication with us through professional electronic platforms or portals, is a prerequisite for the consideration of your application.

If your job application is not approved, the Company may retain your personal data in a file in a secure internal system, for the period specified below, in the event that a future job opportunity arises for which you are a suitable candidate. Before we store your personal data for this purpose, we will request your consent, which you can withdraw at any time.

In some cases we may also process your personal data when necessary to comply with our legal obligations. Examples are legal obligations to maintain records for tax purposes or to provide information to public authorities (e.g. the Employment Agency, as we indicated above).

You have the following rights:

You have the right to receive information about the way, in which your personal data is being used, and to obtain a copy of the data we store for you.

You have the right to request a correction of any inaccuracies in personal data relating to you.

When a complaint has been lodged and is still under examination, you have the right to request that the processing of your personal data shall be restricted.

You have the right to object to the processing of your personal data if it is based on the legitimate interest of the employer, unless there are compelling legal grounds for the processing or if it is necessary for legal claims.

You have the right to request that your personal data be deleted (right to be forgotten) unless there is a legal ground for its storage.

You have the right to receive and transfer to another controller the personal data about you that you provided to us (right to portability).

You have the right to file a claim to the competent supervisory authority or to the court, in case your rights have been violated or you have suffered from an unlawful processing of your personal data (the supervisory authority for personal data protection in Bulgaria is the Data Protection Supervisory Authority, with address Sofia city, 1592, 2 Prof. Tsvetan Lazarov Blvd.

When you have agreed that we store your personal data in order to participate in the selection of our next job advertisements, you have the right to withdraw your consent for the processing of your personal data at any time by contacting us on the following email address talent@blackpeak.tech, without this concerning the lawfulness of the processing based on your consent before its withdrawal.

You can exercise your rights by contacting us at the email address provided.

When exercising your rights, please be as specific as possible so that your questions are answered accurately and correctly.

Recipients and categories of recipients.

We may share your personal data with trusted third parties who assist us in performing our business activities and providing services to our organization. These third parties are legally obligated to protect in a proper manner the data, which we entrust to them. We may disclose your personal data to the following categories of third parties:

Individuals providing certain services (such as providers of telecommunications services, postal or transport services, cloud software services, etc.).
Our professional consultants, including lawyers.
Governmental and regulatory agencies and bodies or other third parties, subject to and in accordance with the provisions of applicable law.
Companies that are employment intermediaries.
Our clients for whom we provide recruitment and selection services.

Disclosure of data to parties outside of EU/EEA.

The job candidates’ personal data are processed mainly within the limits of EU/EEA. For specific positions at BLACK PEAK TALENT may also be used services provided by BambooHR.

BLACK PEAK TALENT has contractual relationship with BambooHR, which allows the candidates to apply for positions, offered by BLACK PEAK TALENT, and to send their CVs and/or other documents (cover letter, copies of their diplomas, reference letters etc.) directly to an account in the platform BambooHR. Access to this account is restricted to the Human Resources Department of the BLACK PEAK TALENT. BambooHR is registered in the United States of America. This data processing shall be carried out in the presence of appropriate data transfer and protection mechanisms in accordance with the applicable legislation. The contractual relations with BambooHR include standard contract clauses that have been approved by the European Commission. BambooHR's data protection policy is available here: https://www.bamboohr.com/data-processing-agreement/.

Security and privacy

We use various protection technologies and procedures in order to protect your personal data from unauthorized access, use or disclosure. We also take steps in order to guarantee that only individuals with the appropriate authorization have access to Your personal data. We have systems and procedures in place to prevent unauthorized access, improper modification or disclosure, misuse or loss of information. Only authorized employees have access to your personal data if this data is relevant to the performance of their duties.

For what period do we store the data?

For individuals hired by client companies for whom we have mediated, their personal data will be stored for a period of 1 year following their employment in order to prove the Company's compliance of the contract with the relevant client.

If your application has not been approved, Black Peak Talent will store your data for 6 (six) months after the end of the relevant selection procedure.

In case you have given us your explicit consent in advance, we can store your data in order to contact you in subsequent selection procedures for the purpose of appointing new employees or associates to us or our clients. When submitting your application, you will be asked whether you consent to the storage of your data for the purpose of consideration for another position. In this case, the data will be stored for a period of 24 months, from the provision of your consent. Once you have withdrawn your consent, your data will be either deleted or destroyed.

We retain the information on concluded agreements for intermediary employment activities with candidates for a period of 5 years, in accordance with the above-described legal obligation.

Updates to the Privacy Notice

In order to implement the most up-to-date protection measures and to comply with applicable legislation, we will regularly update this Privacy Notice. We invite you to regularly review the current version of this Privacy Notice in order to be constantly informed about how we take care of the protection of the personal data we collect.