Recruiting Data File

 1.

 Controller / Company

Orion Pharma (Ireland) Ltd.
C/o Allphar Services Ltd.
4045 Kingswood Road
Citywest Business Park
Dublin 24.
Tel:  + 353 1 468 7500

2.

The person in charge /contact person

Contact person: Paul Clinch
Orion Pharma (Ireland) Ltd.
C/o Allphar Services Ltd.
4045 Kingswood Road
Citywest Business Park
Dublin 24.
Tel:  + 353 1 468 7500

Contact details of the Data Protection Officer
email: Ireland.privacy@orionpharma.com

 3.

Name of the data file

 Orion Pharma (Ireland) Ltd recruitment data file

 4.

The purpose for processing the personal data / the legal basis for processing the personal data

The purpose for processing personal data is to enable the operation of the selection procedure for Orion Pharma (Ireland) Ltd new employees and trainees and to enable internal mobility.

Orion Corporation may use external services in its operations and in this connection personal data may be transferred to the external service provider. Personal data is transferred in order to obtain outsourced services such as recruitment and personal assessment services.

We may share your information with third parties, such as those who assist us by performing technical operations such as data storage and hosting. If ownership or control of Orion Pharma (Ireland) Ltd or all or any part of our products, services or assets changes, we may transfer your personal data to any new owner, successor or assignee.

The processing of personal data is based on the data subject´s consent (EU General Data Protection Regulation Art 6.1.a) 

 5.

Content of the data file

The data file may contain information relating to the following groups, when the processing of such data is necessary:

• A person´s basic information (name, date of birth, contact information)
• Interview information
• Video interviews
• Information related to job search (e.g. training information, work experience, language skills)
• Job application, CV and other possible information and attachments delivered by the applicant
• Information relating to personal and suitability assessments
• Information relating to security clearance (with the applicant´s separate consent)
• Information specified in the application process

 6.

Source of information

The personal data to be processed is delivered mainly by the job applicant in the recruitment process. For the purpose of job search necessary information may be obtained from other sources with the consent of the applicant. Information relating to security clearance are obtained from the Disclosure and Barring Service (DBS). Information may also be gathered from the regular operations of the controller. 

Transfer and disclosure of personal data outide the EU and EEA

Personal data will not be transferred nor disclosed outside the Euoprean Union (EU) or the European Economic Area (EEA).

 8.

Retention period of the personal data

The controller retains personal data for maximum period of 2 years.

The controller will delete the information when there is no longer any defined purpose for the storage.

 9.

The principles how the data file is secured

A. Manual data file
The manual data shall be stored in an a secure locked area with restricted access, available only for the authorised persons involved in the recruitment process. 

B. Electronic information
The protection of the data file utilizes technical data protection (several security mechanisms) and electronically stored information is accessible only to the authorized persons in the human resources team.

10. 

Right of access and right to data portability

The data subject shall have the right of access, after having supplied sufficient search criteria, to the data on himself/herself in the recruitment data file, or to a notice that the file contains no such data. The controller shall at the same time provide the data subject with information of the sources of data in the file, on the uses for the data in the file and the destinations of disclosed data.

The data subject has the right to data portability (EU General Data Protection Regulation Art 20), i.e. the right to receive his or her personal data, which the data subject has provided to the controller and that is being processed by automated means, in a structured and machine-readable format and the right to transmit those data to another controller, where the basis for processing is consent or the fulfilment of a contract between the controller and the data subject.

The data subject who wishes to have access to the data on himself/herself, or right to data portability, as referred to above, shall make a request to this effect to the person in charge at controller by a personally signed or otherwise comparably verified document.

 11.

Right to withdraw consent

In case the legal basis for processing the personal data is the consent of the data subject, the data subject has the right to withdraw the consent.