Applicant Privacy Notice

Solaris is the brand name for the regulated entities Contis Financial Services Limited and UAB „Finansinės paslaugos „Contis“, which are part of the Solaris Group.

Personal details are received by Solaris (“Company” or “we”) in relation to potential employment/engagement either from an individual or through a third party (such as recruitment agencies or referees). The Company is committed to protecting and respecting your privacy.

We will be the Data Controller of your personal data which you provide to us, or which is collected by us about you. This means that we are responsible for deciding how we hold and use personal data about you and that we are required to notify you of the information contained in this policy. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

The purpose of processing the data is to consider whether the individual is suitable for employment/engagement by the Company and if so, to facilitate that. This falls within Article 6(1)(b) of the General Data Protection Regulations (the “Regulations”) which enables processing for the performance of a contract (or its preparatory steps).

How your information will be used

1. We will collect, store and use the following categories of personal data about applicants received (from them or third parties):
   1. Name, date of birth and address.
   2. Contact details, such as phone numbers and an email address.
   3. CVs, application form and references.
   4. Correspondence with or about you.
   5. Any other information that you provide when contacting us directly.
2. Special categories of personal data will also be processed under Article 9(2)(b) and Article 9(2)(h) which are the exercising of the rights of a Data Controller in the employment field and that which is necessary for the purposes of preventative or occupational medicine for the assessment of working capacity.
3. Personal data will be received and processed by the Data Controller and only otherwise considered by any managers within the Company who would be considering the engagement within their team.
4. Much of the information we hold will have been provided by you, but some may come from other internal sources, such as your recruiting manager, or in some cases, external sources, such as referees or through screening processes.
5. Automated decision making (including profiling) does occur in the following limited circumstances:
   1. An applicant’s suitability for employment through online testing/qualification screening/reference suitability; and
   2. Right to work/identity checks
6. Personal data will be stored for a period of 24 months after which it will be deleted, or if it forms or has formed part of an ongoing appointment process involving the individual it will be retained until 1) no more than 24 months after the conclusion of that process if they are unsuccessful in appointment; or 2) in accordance with the employee privacy notice applicable to employees (for those successful in appointment).
7. Our third-party data host provider uses servers located in the UK and Europe to store personal data. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy when it is transferred, stored or processed in this way. The Company has entered into EU standard contractual clauses with any third party or group company in order to safeguard personal data.

More information about the EU Standard Contractual Clauses is available here http://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX:32010D0087.

Your rights

1. Under the General Data Protection Regulation (GDPR) you have a number of rights with regard to your personal data. You have the right to request from us access to and rectification or erasure of your personal data, the right to restrict processing, object to processing as well as in certain circumstances the right to data portability. You also have the right to be notified of the source from which the personal data originated, where it came from a third-party source, and to state, if applicable, whether the personal data came from publicly accessible sources.
2. If you have provided consent for the processing of your data, you have the right (in certain circumstances) to withdraw that consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn. Should it be requested by any individual that their personal data not be processed, this will likely result in them being unsuccessful for engagement with the Company.
3. You have the right to lodge a complaint to the Information Commissioners’ Office in the UK or the State Data Protection Inspectorate (VDIA) in Lithuania if you believe that we have not complied with the requirements of the GDPR or DPA 18 with regard to your personal data.

Identity and contact details of controller and data protection officer

1. Solaris is the controller and processor of data for the purposes of the GDPR. Contact with the relevant team in relation to the processing of your data can be made through the following email address: careers@solarisgroup.co.uk.
2. If you have any concerns as to how your data is processed, you can contact the Data Protection Team via email dpo@solarisgroup.co.uk.