Processing of Personal Data Notice for Consent

Last updated on: 22 Mar, 2021

Introduction

Pursuant to the data protection laws and regulations of the Emirate of Dubai and the Federal laws and regulations of the United Arab Emirates, Ithra Dubai LLC, as “Data Controller”, hereby informs you that your personal data will be processed in full compliance with current applicable legislation, and for the purposes set out below.

Subject of the Processing

Your personal data including the personal data in your curriculum vitae will be processed (personal, professional, training, interests, etc.) or in any case provided by you to Ithra Dubai LLC and/or its subsidiaries and/or its affiliates. The processing will take place in compliance with the obligations of correctness, lawfulness, transparency and protection of confidentiality and integrity according to the principles and provisions of the aforementioned legislation on the protection of personal data in the Emirate of Dubai, United Arab Emirates.

In particular, the data strictly pertinent to the obligations, tasks and purposes indicated below, which cannot be fulfilled or implemented through the processing of anonymous data or data of a different nature, will be processed.

The processing of personal data may also concern data particular categories (formerly sensitive) for any indication of belonging to protected categories which will be treated in accordance with the provisions of the current legislation on the protection of personal data.

Only the information strictly pertinent and limited to what is necessary for these purposes will be the subject, also taking into account the particular tasks and/or specificities of the professional profiles required. Any additional data provided by you that is found to be irrelevant with respect to the purposes indicated below will not be processed.

How do we collect your personal data?

We may use different methods to collect data from and about you including through:

 Purpose of the Processing

The data you provide will be processed by Ithra Dubai LLC for the purpose of recruiting and selecting personnel and evaluating, upon your spontaneous request or in response to an announcement, the possibility of a possible establishment of an employment relationship for present or future business needs.

Procedure of the Processing

The processing of personal information concerning you will be based on the principles of correctness, lawfulness, transparency and the protection of your privacy and your rights.

Your data will be processed in electronic and paper form and your data will be collected and stored in computer databases and may be stored in paper archives.

Processing will be carried out by personnel duly authorised in compliance with, and in application of, appropriate security measures to safeguard the confidentiality, integrity and completeness of the data processed, in accordance with the applicable data protection laws and regulations in the Emirate of Dubai, United Arab Emirates and in accordance with the instructions given by the Data Controller.

Nature of the Processing

The provision of data for the indicated purpose is optional but necessary and constitutes an essential requisite for the pursuit of the described purpose. Failure to provide your data will make it impossible to evaluate your profile and your professional aptitudes with respect to the role to be filled or any future positions that may be available and will not allow us to proceed with the selection activities for the purpose of possible establishment of the employment relationship.

Duration of the Processing

The data communicated by you (personal data, contact details, data relating to training carried out, data relating to professional experience, interests, preferred employment, any data relating to health or belonging to protected categories) are preserved for a period not exceeding six years (starting from the reception of the data), except for the contracting of the employment relationship and the consequent conservation for the time related to it.

Access to Personal Data and Communication

Your personal data may be processed by the Data Controller and by persons authorised by them who need to process them in the performance of their duties as instructed in compliance with the principles of protecting personal data.

Your personal data may also be disclosed to all subjects authorised to access it in compliance with legal provisions.

In particular, your data may be disclosed, even in the pre-contractual phase, to third party companies or professionals (both individuals and legal entities) to whom the Data Controller should entrust tasks for the performance of certain outsourced activities and duly appointed as Data Processors (e.g. personnel selection personnel, labour consultants for the purpose of preparing the necessary documentation for the possible establishment of the employment relationship, web agency responsible for managing the website, etc.).

The communication of your data to the categories of subjects referred to above is necessary to implement the preliminary obligations with respect to the possible establishment of the employment relationship.

A complete list of the data managers and third-party companies to which your data is communicated is available at our Head Office. You can request a copy by writing to [email protected].

Your personal data is not subject to disclosure.

Change of Purpose

We will only use your personal data and/or sensitive personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may collect and process your personal data and/or sensitive personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Exercising your Rights

You may, at any time, exercise the rights recognised under the laws of the Emirate of Dubai and the federal laws of the United Arab Emirates as applicable to the Emirate of Dubai.

Specifically, you will be able to obtain from the aforementioned Data Controller who will make your personal data available to in an intelligible form; you may also obtain the erasure, transformation into anonymous form or object to data processed in violation of the law, updating, rectification or, if there is interest, integration of the data itself, or use the portability of these; may also object, for legitimate reasons, to the processing of the data.

You will also have the right to withdraw your consent to the processing at any time.

Complaints

If you believe that your rights have been violated, you may file a complaint with the relevant authorities in the United Arab Emirates.

Data Controller Contact Details

The Data Controller can be contacted at the following address:

Ithra Dubai LLC: 306, Gate Village 6, DIFC

Email: [email protected]