Declaration for the consent of candidate employees of Bioanalytica S.A. on the processing of personal data

A. Data Controller Details

Our Company with the name BioAnalytica S.A. having its seat in Attica (Iliision no. 3Α-5, zip code 11528 tel. +302106400318 e-mail: [email protected]) collects and processes personal data of its potential employees, hereby informs you of its capacity as data controller, in accordance with Regulation (EU) 2016/679 (hereinafter referred to as “GDPR”) and the relevant provisions of Greek legislation on the protection of personal data, as applicable, regarding the type of personal data it collects, the source of their collection, the reason for their collection and their processing, any recipients thereof, their retention period, any transfer outside the EU as well as your rights in relation to your data as a candidate employee of the Company and how you can exercise them.

B. Data types and sources of origin

The personal data collected and retained are:

1. your identification details, i.e. your name, father’s name and mother’s name, ID card number, gender, date and place of birth, nationality
2. your contact details, i.e. postal and email address, telephone number (landline, mobile)
3. family status, education, CV, any disabilities,
4. work history, professional experience,
5. reason for rejecting the recruitment application,

For the purpose of evaluating your application, the Company will collect information about you from your previous employers and from recruitment and evaluation companies, provided that you have provided your consent to them.

The above personal data under points a to d are provided to the Company by you, if you express interest in the job position.

C. Purposes and legal basis for processing

The Company collects and processes your data to the extent required during the interview and potential recruitment process, in order to assess your eligibility for a specific position in the Company.

The processing of your data is necessary for the legitimate interest we pursue in our effort to recruit qualified and suitable personnel for the purposes of our business activity.

If you wish us to retain your data for potential employment opportunities in our Company in the future and to inform you about the possibility of recruitment in them, you must provide us with your consent for this purpose.

D. Data Retention

In case you accept the offer of employment with the Company, your personal data will be kept on the basis of the “Notification of employees of the Company on the processing of personal data”, which is communicated to all Employees.

The personal data of candidate employees who will not conclude an employment contract with the Company will be kept for six (6) months from the filling of the job position for which they were collected.

After the above period has elapsed, your personal data will be deleted/destroyed.

You reserve the right to withdraw your consent by submitting a request in the ways set out below.

E. What rights do you have in relation to your data and how can you exercise them

As a potential employee, you have a series of rights, in accordance with the provisions of articles 15-22 of the GDPR, regarding your personal data, which are processed by the Company.

The table below lists your rights by processing purpose and corresponding legal basis. In this table you will find detailed information (meaning, method and deadlines for exercise) and a form for exercising each right.

If you wish to exercise any of your rights, please complete the corresponding form and send it to the electronic address [email protected] or in writing to Ilision no. 3Α-5, zip code 11528. We note that in case there are reasonable doubts regarding the identity of the data subject, we may request the provision of additional information to confirm the identity.

It is noted that the Company has the right in any case to partially or fully refuse to satisfy your request for restriction of processing or deletion of your data, if the processing or retention of personal data concerning you is necessary for the establishment, exercise or support of its legal rights or the fulfillment of its legal obligations.

The Company must respond to your request within one month of receipt. This deadline may be extended by two more months, if required at the Company's discretion, taking into account the complexity of the request and the number of requests, in which case the Company will inform you within one month of receipt of this extension, as well as the reasons for the delay.

If the Company does not act on your request when exercising the above rights or following its response you consider that your above-mentioned rights are being violated, you have the option of submitting a complaint to the Personal Data Protection Authority, 1-3 Kifissias Ave., 115 23, Athens, https://www.dpa.gr/, tel. 2106475600.

Having taken note of the form ‘Informing prospective employees of the Company about the processing of personal data’, as well as the above, I agree to the processing of my personal data for the stated purpose.