Privacy Policy

Definitions

The GDPR includes a list of definitions, among which the most important are explained below:

Controller” means a person or organization who, alone or jointly with others, determines the purposes and means of the processing of personal data. In the context of this policy, West Beton Construct is a controller.

“Employee” – For practical purposes, the term “employee” will have a broad meaning in this policy and will include any former or current employee, temporary worker (agency), volunteer, expatriate, intern, or other non-permanent worker.

“European Economic Area (EEA)”, which currently includes the following countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Italy, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, United Kingdom.

“Personal Data” means any information relating to an identified or identifiable natural person (“data subject”).

“Data Subject” means an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity.

“Sensitive Personal Data” means Personal Data that reveals, with respect to a person:

  • racial or ethnic origin;
  • political opinions;
  • religious or philosophical beliefs;
  • trade union membership;
  • data concerning health or sex life;
  • data relating to criminal convictions and offenses or related security measures.

“Processing” is defined as any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. This means the term “processing” has a very broad meaning and scope.

“Consent” is defined as any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

The meaning of the terms listed above shall be as stated in the definition, whether or not they are capitalized within this Policy.

Principles Regarding the Processing of Personal Data

West Beton Construct respects the privacy of the data subjects referred to above, whose Personal Data is processed by West Beton Construct, and commits to protecting Their Personal Data in accordance with GDPR requirements. This compliance aligns with West Beton Construct’s intention to inform its Employees and all other Data Subjects about the processing of their personal data and to recognize and respect their rights regarding privacy.  The data processing carried out by West Beton Construct as of the adoption date of this Procedure is outlined in Annex no. 2 to the Procedure. Should changes occur within West Beton Construct’s activities to the data flows described in Annex no. 2 to the Procedure and/or if new data processing operations, not outlined at that time in Annex no. 2, become necessary, these will be analyzed and it will be determined (through modification or supplementation of Annex no. 2): which data is processed, where it is collected from, where it is stored, which departments within West Beton Construct have access to this data, to whom the data is transmitted, what is the purpose of processing the data in question, the retention period, and the legal basis for processing (referring to the list of legal grounds for processing outlined below).  –      Data will be processed concerning the Data Subject in a legalfair, and transparent manner. Data is processed lawfully only if the processing is based on at least one of the legal grounds listed below: 
– The Data Subject has given Consent regarding the processing of their Personal Data for one or more specific purposes; or – The processing is necessary for the performance of a contract to which the Data Subject is a party or to take steps at the request of the Data Subject prior to entering into a contract; or – The processing is necessary for compliance with a legal obligation of the controller Eren Cons; or – The processing is necessary to protect the vital interests of the Data Subject or another natural person; or – The processing is necessary for the purposes of the legitimate interests pursued by the controller Eren Cons or by a third party;

–      Data will be collected for specified and legitimate purposes. Data will not be further processed in ways that are incompatible with these purposes;–      Data will be adequate, relevant, and limited to the purposes for which they are processed;
–      Data will be accurate and, when necessary, kept up to date. Reasonable steps will be taken to rectify or erase any inaccurate or incomplete data;
–      Data will be retained only as long as necessary for the purposes for which they were collected and processed. These purposes are described in this policy and may be amended or extended only in compliance with GDPR provisions and other relevant laws, after proper notification to the Data Subjects.
–      Data will be deleted or modified following a justified request from the data subject;
–      Data will be processed in accordance with the legal rights of the data subject, as described in this policy or under legal provisions;
–      Appropriate technical, physical, and organizational measures will be taken to prevent unauthorized access, illegal processing, and unauthorized or accidental loss, destruction, or damage of the data. In case of a breach as mentioned above and/or accidental data leakage, Eren Cons will take appropriate measures to stop the breach / eliminate the leakage and determine responsibility in compliance with GDPR and will cooperate with competent authorities when necessary, should they be involved due to such breach or leakage.

The company West Beton Construct expects all its employees to comply with these principles and the rules of this policy.

Categories of Personal Data Processed

Candidates for Positions

Personal data related to candidates for positions include the following:

–      Standard identity data of the candidate (first name, last name, address, etc.);
–      Personal data (date and place of birth, nationality, gender, phone number, email address, hobbies and areas of interest, etc.);
–      Candidate’s photo, if voluntarily provided (e.g., included in the CV or other documents submitted by the candidate);
–      Affiliations to various groups/entities/professional, cultural, or other clubs if such data are included in the CV or other documents submitted by the candidate;
–      Information about the candidate’s professional experience (details about previous employers, termination of the last job, activities performed there, special projects, etc.), including reference checks if the job applicant provided references in the CV submitted to West Beton Construct;
–      Information regarding the candidate’s education (diplomas, certificates, internships, special training, etc.);
–      Language skills;
–      If applicable, information about the candidate’s work permit and/or residency in the European Economic Area (EEA);
–      Any other information the candidate provides to West Beton Construct as part of their CV or job application, which may be relevant to the performance of their role if hired;
–      Digital evaluation through the internet (social media), to the extent these profiles are available for viewing by West Beton Construct and the candidate has been previously informed about the processing of these data and the purpose of the processing;
–      Results of assessment tests carried out by evaluation centers, if provided by the candidate via CV and other documents submitted;
–      Any other personal data (other than those mentioned above) which require processing by law.