Aroma City Group – Data Protection & Privacy Policy (GDPR Compliant)
1. Introduction
Aroma City Group is committed to protecting the personal data of all job applicants and ensuring full compliance with the General Data Protection Regulation (GDPR). This policy outlines how we collect, use, store, and protect personal data during the recruitment process.
2. What Data We Collect
We collect personal and professional information directly from candidates who apply through our website or via email. This includes:
- Full name, nationality, contact details (email, phone)
- Employment history and education
- Professional certifications, salary expectations
- References (name and position only)
- Occasionally, voluntarily submitted ID documents (e.g., passport copies)
We do not request or process any health-related or other sensitive personal data.
3. How We Collect Data
Data is collected through:
- Our website job application forms
- Email communication with our recruitment team
4. Why We Collect and Use Your Data
We collect your data solely for recruitment purposes, including:
- Evaluating your qualifications for current or future job openings
- Sharing your CV with clients only after shortlisting
- Sharing your contact details only if approved by the client
By submitting your CV, you give informed consent for us to process your data in this way.
5. How We Store and Protect Your Data
- All data is stored securely on our Amazon Web Services (AWS) servers.
- Backup copies may exist within our secure company Gmail accounts.
- Access is restricted to authorized staff only.
6. Data Retention
We retain personal data for up to 2 years from the date of receipt. After this period, the data is permanently deleted from all systems unless:
- The candidate is hired by a client
- A new application is submitted by the candidate
7. Your Rights Under GDPR
You have the right to:
- Request access to your personal data
- Request correction of any inaccuracies
- Request deletion of your data
- Withdraw consent at any time
To make any such request, please contact us at info@aromacitygroup.com.
8. Policy Updates
This policy may be updated from time to time. The latest version will always be available upon request.