ON THE PROCESSING OF PERSONAL DATA within OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L. in light of EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC   OLGA GUDYNN INTERNATIONAL SCHOOL S.R.L. (OGIS), with its registered office in Bucharest, 8 Ancuța Băneasa Street, Sector 2, registered with the Bucharest Trade Registry Office under no. J2008006874403, having fiscal identification code 13947805, email: dpo@olgagudynn.ro, is the controller responsible for the processing of your personal data. These data are collected directly from you or from our collaborators, exclusively in the context of the recruitment process, for the purpose of entering into and performing an individual employment contract. Under Regulation (EU) 2016/679 (GDPR), as a candidate for a position within OGIS, you have the status of “data subject” — meaning an identified or identifiable natural person through the personal data provided. The confidentiality and protection of these data are a priority for us. We process them exclusively for the purpose of carrying out the recruitment process: to maintain communication, assess the application and make an appropriate decision in relation to each candidate’s specialisation and qualifications, with a view to entering into an individual employment contract. Please note that, in the absence of these data, OGIS cannot initiate or continue the recruitment process and cannot enter into or perform the intended contract. WHY OGIS COLLECTS THESE DATA:   OGIS collects only the personal data that are strictly necessary, for specific and legitimate purposes, based on the following legal grounds provided by Regulation (EU) 2016/679:

• entering into and performing an individual employment contract;
• fulfilling applicable legal obligations, including the management of operational and financial-accounting documents;
• pursuing OGIS’s legitimate interests, in particular the proper conduct of current activities and ensuring the security of the premises through video surveillance;
• your explicit consent, for retaining your CV and the data related to your application for future employment opportunities.

As part of the recruitment process, OGIS does not use automated individual decision-making and does not create candidate profiles within the meaning of Article 22 GDPR.   If selection interviews are audio-video recorded, this is done based on your consent, exclusively for the assessment of your application and for a limited period, in accordance with the internal retention policy. CATEGORIES OF PERSONAL DATA: The personal data processed by OGIS in the context of the activities mentioned are: surname, first name, address, date of birth, telephone number, email address, gender, professional experience and all data included in the application file and Curriculum Vitae. Depending on the position for which you apply, we may also process other information that you voluntarily provide during the recruitment process, for example references, cover letters, portfolios, results of tests or practical assessments, strictly in connection with the assessment of your application. OGIS does not usually request and does not encourage the submission of special categories of personal data, for example religious or political beliefs, except where such data are required by law or strictly necessary for fulfilling legal obligations in the field of employment relations. YOUR RIGHTS AS A DATA SUBJECT: In relation to the personal data processed by OGIS in the recruitment process, you benefit from the following rights:

• The right to be informed about how your data are processed;
• The right of access to the data held about you;
• The right to rectification of inaccurate or incomplete data;
• The right to erasure (“the right to be forgotten”);
• The right to restriction of processing;
• The right to data portability — the transfer of your data to another controller;
• The right to object to the processing of your data;
• The right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
• The right not to be subject to automated decision-making, including profiling;
• The right to seek judicial remedy;
• The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (A.N.S.P.D.C.P.).

TRANSFER OF PERSONAL DATA: OGIS does not transfer the data collected as part of the recruitment process to third parties without first obtaining express and separate consent in this regard. Transfer to third parties may occur only where the provision of the data is required on a legal basis. Your data may be accessed, to the extent strictly necessary, by service providers who assist us in carrying out our activities, for example IT providers, consultants/lawyers or auditors, with whom OGIS has concluded contracts containing confidentiality and personal data protection clauses, in accordance with Article 28 GDPR. In certain situations, your data may also be communicated to other entities with which OGIS has collaborative relationships in the field of education, exclusively for purposes related to recruitment and only on the basis of an appropriate legal ground and suitable data protection safeguards. Certain data may be stored or accessed through service providers located outside the European Economic Area (EEA). In such cases, OGIS ensures that an adequate level of protection exists by using a transfer instrument recognised by the GDPR, for example standard contractual clauses approved by the European Commission, and, where applicable, additional security measures. STORAGE OF DATA FROM THE RECRUITMENT PROCESS WITHIN OGIS: Personal data are stored securely — electronically and/or in printed format — or are properly destroyed. Candidates’ data will be retained for the period necessary to carry out the recruitment process for the relevant position and, after its completion, for a maximum period of 12 months for the defence of OGIS’s rights and legitimate interests in any disputes related to the recruitment process. If you have given your consent to be contacted in relation to future opportunities, the data will be retained for an additional period of up to 2 years or until the withdrawal of consent. OGIS BRINGS TO THE ATTENTION OF EACH NATURAL PERSON CONCERNED THAT: * If they wish to exercise their rights, they may do so by submitting a written request, filed at the OGIS registered office in Bucharest, 8 Ancuța Băneasa Street, Sector 2, indicated above, or by email at dpo@olgagudynn.ro * In the request addressed to OGIS, please indicate, as far as possible, the right you wish to exercise and describe the subject of the request as clearly as possible. In order to identify you properly, we may request certain additional information; * The rights listed above are not absolute. There are exceptions, and therefore each request received will be analysed so that it can be determined whether it is justified or not, and the data subjects will be informed accordingly; * OGIS will respond to your request within 30 days. However, this period may be extended depending on various factors, such as the complexity of the request, the large number of requests received or the inability to identify you within a useful timeframe; * If the request is manifestly unfounded or excessive, in particular because of its repetitive character, OGIS reserves the right either to charge a reasonable fee, taking into account the administrative costs of providing the information or communications or of taking the requested measures, or to refuse to act on the request, in accordance with Article 12(5) GDPR. * This information notice may be updated whenever necessary, for example as a result of legislative changes or changes in OGIS’s internal processes. The version published on our website always reflects the updated form of this information notice. OGIS informs you that, in Romania, the National Supervisory Authority for Personal Data Processing (“A.N.S.P.D.C.P.”) operates and that you have the right to lodge a complaint when you consider that your rights have been infringed, by accessing the website www.dataprotection.ro.