Date protection notice


(1) General information

(a) Introduction
The purpose of this notice is to inform you the processing of your personal data and your rights regarding this processing according to the European Union Regulation no. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”) and additional data protection laws.

(b) Controller:
Under GDPR, the controller's capacity is held by Metro Systems Romania SRL, a Romanian legal entity, registered with the Trade Register under no. J23/1989/2004, Unique Identifier 17056464, address: 4C Șos. Pipera Tunari, Construdava Business Centre, Voluntari, Ilfov County, telephone 0212438347, email hr@metrosystems.net (“METRO SYSTEMS”). METRO SYSTEMS is responsible for the data processing explained herein.

(c) Data Protection Officer
You can contact our data protection officer at any time by using the following contact details: telephone: 0212438261, e-mail: dataprotection@metrosystems.net.

(2) Information regarding the Processing of Personal Data

(c) Data Protection Officer
You can contact our data protection officer at any time by using the following contact details: telephone: 0212438261, e-mail: dataprotection@metrosystems.net.

(2) Information regarding the Processing of Personal Data

(a) Collected Personal Data:
The personal data mentioned below are collected during and throughout the recruitment process carried out by METRO SYSTEMS.

  • Information you provide in the curriculum vitae, specific application forms, cover letter and during interviews including: surname and forename, date of birth, age, gender, permanent address, personal email address, information on your education, details on your qualifications and professional experience, right to work and/or reside in Romania and references.
  • Information we collect or create during and throughout the recruitment process including: interview notes, test results and our correspondence with you.
  • Information from public sources including: information from various public databases (Trade Register, the portal of courts of law, etc.), public profiles on social media platforms (LinkedIn, Facebook, etc.), other publications.

(b) How we use personal data:
We process your personal data to initiate and carry out/continue the recruitment process, to assess and make a decision on your fitness for a certain position with METRO SYSTEMS, as well as to inform you on employment opportunities with METRO SYSTEMS. We shall also use personal data to meet our legal requirements and obligations. Processing is grounded on the provisions of Article 6(1)(c) and (f) GDPR.

(c) Information sources:
Such information is either (a) provided by you, (b) obtained from third parties in the recruitment process; or (c) created by us during the recruitment process.

(d) Why we use personal data:
We process your personal data because: (1) this is required to contact you; (2) this is necessary to meet our requirements and obligations under the law; (3) because we or a third party have a legitimate interest to: (a) ensure effective administration and management of the recruitment process; (b) make sure we will hire the right person for a position; (c) resolve any disputes and effectively manage any incidents, by requesting legal or any other professional assistance; and (d) assess your fitness for any certain position.

(e) The information we disclose to third parties:
Your personal data shall be transferred in the European Union, to METRO AG, as well as to other external service providers only for the purpose of, and in connection with the recruitment process.

(f) The storage of your personal data:
We shall process your personal data throughout the recruitment process, including subsequent recruitment stages, but in any case for not more than 10 years.

(g) Where your personal data shall be kept:
Your personal data shall not be transferred outside the European Union.

(3) Your rights

You can contact our data protection officer at any time with a formless notification under the contact details mentioned above under Art. 1(c) to exercise your rights under the applicable laws. These rights are:

(a) right to receive information on data processing and a copy of the processed data (right to access, Article 15 GDPR);

(b) right to demand the rectification of inaccurate data or the completion of incomplete (right to rectification, Article 16 GDPR);

(c) right to demand the erasure of personal data and, in case the personal data has been made public, the information towards other controllers about the request of erasure (right to erasure, Article 17 GDPR);

(d) right to demand the restriction of the data processing (right to restriction of processing, Article 18 GDPR) ;

(e) the right to receive the personal data concerning the data subject in a structured, commonly used and machine-readable format and to request the transmittance of these data to another controller (right to data portability, Article 20 GDPR);

(f) the right to object the data processing in order to stop it (right to object, Article 21 GDPR);

(g) the right to prevent you being subject to a decision based solely on automated processing, if such decision produces legal effects concerning you or similarly significantly affects you (Article 22 GDPR);

(h) right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro), if you consider that the data processing infringes GDPR (right to lodge a complaint with the supervisory authority, Article 77 GDPR).