Privacy Notice for Candidates

This privacy notice (“Notice”) applies to candidates in the process of applying for a job at Istra. 

In connection with your job application and considering you as a candidate, we (“Istra,” “we,” or “us”) have to process, collect, and use certain Personal Data (as defined below). 

The purpose of this Notice is to provide you with information regarding the Personal Data we collect, process, and use about you. 

Please note that we also work with data processors who we have instructed to collect, store, and process personal information on our behalf for the purposes of providing our services, for example, Comeet, as a recruiting and applicant tracking platform (“Platform”) in order to handle your personal data as a candidate.

Personal Data” means information that relates, alone or together with other data, to a uniquely identified or identifiable individual, as set for in applicable privacy laws.

You are not legally obligated to provide us with Personal Data, and you hereby confirm that you are providing us with Personal Data of your own free will and consent. By submitting your application, you consent to the terms of this Notice and to our collection, processing, and sharing of Personal Data for the purposes set forth herein. If you do not agree to this Privacy Notice, please do not apply for the relevant position. We reserve the right, at our discretion, to change this Privacy Notice at any time. Such change will be effective ten (10) days following the posting of the revised Privacy Notice on the Site.

1. What Personal Data do we collect and process? 

We process the following information and Personal Data about you, including, without limitation, contact information, address, Curriculum Vitae (resume) information (such as, skills, work experience, and education), URL of your LinkedIn and other online profiles and websites, files that you submit (such as work samples or assignments), the position for which you are considered, the source who submitted your candidacy (e.g., recruiting agency, referral), information from references, your responses to questionnaires sent to you by Istra and to interview questions asked during the interview process, information about your candidacy and employment options (such as availability to be hired and salary expectations), materials you or other parties submitted (such as evaluators) and our summaries of that information. Collectively “Candidate Data“. 

2. Why does Istra need to collect and process your Candidate Data?

  • To receive, review, and reply to your application.
  • To assess your suitability for the opportunity you applied for, and in certain cases, for other opportunities at Istra.
  • To facilitate the interview/recruiting process.
  • To verify the information you or others provide, and to check your references.
  • To prepare an employment contract, if your application is successful.
  • To stay in touch and engage with you for opportunities at Istra we may consider you for current and future opportunities.

3. How does Istra share my Candidate Data?  

Istra may transfer your Candidate Data to third parties located in any jurisdiction, as follows: 

  • Service providers and other relevant third parties. As necessary in connection with your candidacy process, communication contact details and other Candidate Data may be transferred to partners, suppliers, vendors, and other third parties as appropriate for the particular processing activity, including Comeet (who provide us with the Platform) you can read Comeet’s privacy policy here. If you were referred to us by a third party (such as recruiting agency, referral) we may inform the referrer about the status of your application.
  • Regulators, authorities, and other third parties. As necessary for the purposes described above, Personal Data may be transferred to regulators, courts, and other authorities (e.g., tax and law enforcement authorities), independent external advisors (e.g., auditors and legal advisors), directors within the company group, insurance carriers, benefits providers, internal compliance and investigation teams (including external advisers appointed to conduct internal investigations). We will share your Candidate Data with third parties where required by law, where it is necessary to administer the potential working relationship with you, or where we have another legitimate interest in doing so.
  • Acquiring entities. We may share your Candidate Data with other third parties. For example, in the context of the possible sale, restructuring, or transfer, of some or all of the business, shares, or assets to a third party, we will disclose your Candidate Data to such third party (whether actual or potential) in connection with the foregoing events. 
  • Professional advisors. We may share Candidate Data with our professional advisors, such as lawyers and accountants where doing so is necessary to facilitate the services they render to us.

Some of the recipients with whom we may share Candidate Data, as described above, may be located in countries outside of your jurisdiction (including, EU and the US). In such cases, we use commercially reasonable efforts to make sure that the recipients of the Candidate Data undertake to take sufficient measures to ensure the privacy of your Candidate Data. 

  • Security. We implement industry standard measures to reduce the risks of damage, loss, unauthorized access, or use, of your Personal Data. However, these measures do not provide absolute information security. 

4. What rights do you have in respect of my Candidate Data 

Depending on your location, you may have a number of rights in relation to your Candidate Data. Such rights can be summarized in broad terms as follows (for more details contact us): 

  • Right of access. You may have the right to request access to the Candidate Data processed and/or stored about you. If you want to submit this request, please do it in writing to [email protected]. We do have to take into account the interests of others, though, so this is not an absolute right.
  • Right to rectification and erasure. You may have the right to rectify or request to erase inaccurate, outdated or incomplete Candidate Data concerning you. If you want to submit this request, please do it in writing to [email protected] Please note that in some circumstances, we may not be able to delete or erase your Candidate Data (partially or totally).

5. Who can I contact about this?

If you have concerns or questions regarding this Notice or if you would like to exercise your rights, you can send an email to [email protected]