Privacy statement and specific conditions
EOJD - Data protection statement and Specific terms and conditions
This privacy statement provides information about the processing and the protection of your personal data.
Processing operation: EURES
Data Controller: Directorate General for Employment, Social Affairs and Inclusion, Directorate D, Unit D1 'Free movement of workers, EURES'
Record reference: DPR-EC-00609
Table of Contents
A) Data protection statement for the European Job Days platform
- 1. Introduction
- 2. Why and how do we process your personal data?
- 3. On what legal grounds do we process your personal data?
- 4. Which personal data do we collect and further process?
- 5. How long do we keep your personal data?
- 6. How do we protect and safeguard your personal data?
- 7. Who has access to your personal data and to whom is it disclosed?
- 8. What are your rights and how can you exercise them?
- 9. Contact information
- 10. Where to find more detailed information?
B) Specific terms and conditions for the use of the EJD website
A) Data protection statement for the European Job Days platform
The EJD website processes personal information. The European Commission (hereafter 'the Commission') is committed to protect your personal data and to respect your privacy. The Commission collects and further processes personal data pursuant to Regulation (EU) 2018/17251, which is applicable to processing of personal data by European Union institutions and bodies. The information in this Data protection statement is given pursuant to Articles 15-16 of that Regulation. Regulation (EU) 2016/679, the General Data Protection Regulation is applicable for any processing of data by organisations external to the EU institutions and bodies.
This privacy statement explains the reason for the processing of your personal data, the way we collect, handle and ensure protection of all personal data provided, how that information is used and what rights you have in relation to your personal data. It also specifies the contact details of the responsible Data Controller with whom you may exercise your rights, the Data Protection Officer and the European Data Protection Supervisor.
2. Why and how do we process your personal data?
The purpose of the EJD website is to provide e-services that enable jobseekers interested in finding a job abroad to connect with employers interested in finding candidates from other countries.
The EJD website is a platform for virtual (online) and on-site job fairs where employers can publish their company profiles and current job opportunities. Jobseekers can indicate their interest in specific job offers by making their user profile and CV visible for the employers they have selected. In virtual events, presentations can be streamed online and jobseekers, employers, and EURES staff can communicate with each other via live chats. Specific information regarding processing and protection of data submitted in the chats is provided in connection to the chat functionality.
Jobseekers and employers who register for a Job Day event will obtain a user account on the EJD website for that specific event. Jobseekers can upload their personal profile and a CV to the EJD website or request that a CV already published on the EURES portal becomes accessible from the EJD website.
Employers registered on the EJD website can only see the CVs and other information about a jobseekers if the jobseeker has indicated an interest in that particular employer .
Personal data will not be used for automated decision-making including profiling.
3. On what legal grounds do we process your personal data?
We process your personal data because:
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Union institution or body, and
- you as the data subject have given consent to the processing of your personal data for one or more specific purposes.
This is in accordance with Regulation (EU) 2018/1725 of 23 October 2018, in particular Article 5(1).
4. Which personal data do we collect and further process and by which technical means?
The personal information related to the creation of an account for a jobseeker is limited to the data necessary to identify a particular person. Name, preferred language and e-mail address are mandatory for contact purposes. Other information is requested for statistical purposes: gender; nationality; country of residence; age group; education level; employment status. This information can also be used for sending out targeted information.
When creating and posting a CV, all information the user has included in the CV will be stored in addition to the personal data already entered in order to create the account.
A company or undertaking lawfully registered in the European Economic Area or Switzerland that fulfils the criteria established for the participation in a specific event can register for and participate in that European Job Day event, subject to the approval of the organiser of the event. The representative of the company will be requested to provide the company's name, address, size, activity sector and the name, function, telephone number, and e-mail address of a main contact person.
5. How long do we keep your personal data?
Jobseekers' and employers' accounts that have been created for a specific Job Day event will be automatically deleted 12 weeks after the event. There will be no archiving of deleted CVs or other information. E-mail addresses of jobseekers or employers may however be stored for an additional time, not exceeding one year after the event they last registered for, in order to send out information on new and upcoming events (if the user has given permission to this).
6. How do we protect and safeguard your personal data?
All personal data in electronic format (e-mails, documents, databases, uploaded batches of data etc.) are stored in a database on a secure server, located within the European Economic Area, managed on behalf of the European Commission and access to this data is protected by an authentication mechanism. Access to the service is made available through the web servers, located in the Data Centre, where the application is hosted.
All processing operations are carried out pursuant to the Commission Decision (EU, Euratom) 2017/46 of 10 January 2017 on the security of communication and information systems in the European Commission.
Development, support and operations of the system may be delegated to external companies or organisations acting as "processor" on behalf of the European Commission. Such processors are bound by contracts defining the terms of service, including personal data protection clauses indicating their responsibilities as provided for by Regulation (EU) 2018/1725
In order to protect your personal data, the Commission has put in place a number of technical and organisational measures. Technical measures include appropriate actions to address online security, risk of data loss, alteration of data or unauthorised access, taking into consideration the risk presented by the processing and the nature of the personal data being processed. Organisational measures include restricting access to the personal data solely to authorised persons with a legitimate need to know for the purposes of this processing operation.
7. Who has access to your personal data and to whom is it disclosed?
Information on jobseekers' CVs is made available, for display purposes, to employers registered and verified by the site administrator acting on behalf of the controller. If these organisations reprocess the CV information obtained, this processing has to be in compliance with Regulation (EU) 2018/1725 and the General Data Protection Regulation (Regulation (EU) 2016/679).
The service is completely free of charge and it may not be used for any form of commercial advertising or sending of messages for other purposes than the ones stated above under point 2.
Information on registered jobseekers or employers will not be disclosed to anybody external to the EURES network.
By agreeing to this data protection statement a jobseeker also provides his consent to transmit the data to EEA Member States and Switzerland who are associated to the EURES network in compliance with Regulation (EU) 2016/589 and the Agreement between the European Community and its Member States and the Swiss Confederation2.
The data stored will not be used for sending out any kind of information to the registered users unless they have explicitly agreed to this apart from messages relating directly to the service, its availability and development, and surveys and the like conducted for evaluation purposes.
Only registered and accepted employers in which a jobseeker has explicitly indicated an interest - through marking an interest in one or several of this employer's job vacancies, or providing the jobseeker's registration code to the employer via the chat tool - can view that jobseeker's CV.
The website uses cookie technology in line with applicable European legislation. The cookies are set by default by the application server in order to keep track of the HTTPS sessions of users' browsers. These cookies are deleted whenever a session is closed by the user closing the browser window or when an HTTPS session timeout occurs. Cookies may also be used to keep track of whether any particular user (or more specifically, the browser from which the user is browsing the system) has already replied to a survey, a poll or the like. None of these cookies contain any personal information.
No personal information is contained in the log files of the application and we do not store any personal information outside the application.
8. What are your rights and how can you exercise them?
You have specific rights as a 'data subject' under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725, in particular the right to access, rectify or erase your personal data and the right to restrict the processing of your personal data. Where applicable, you also have the right to object to the processing or the right to data portability.
You can exercise your rights by contacting the Data Controller, or in case of conflict the Data Protection Officer. If necessary, you can also address the European Data Protection Supervisor. Their contact information is given under Heading 9. Contact information.
Where you wish to exercise your rights in the context of one or several specific processing operations, please provide their description (i.e. their Record reference(s) as specified under Heading 10. Where to find more detailed information?) in your request.
How can you verify, modify, or delete your information?
Once a user account has been created, users will be able to modify their data at any time. All they need to do is to log on to the website using their password-protected personal account and modify or update their profile. Users can deregister at any time and thereby delete their account and all related registered information including CVs by sending an e-mail to email@example.com
In case the site is temporarily not available, users can contact the controller (see contact details below) and request that accounts are deleted or made invisible.
Users have the right to obtain a copy of their personal data held on the EJD website by sending an e-mail to firstname.lastname@example.org.
Jobseekers are responsible for the quality of their own data. They can at any time access/modify/delete their data. Further details are given in other sections of this Data protection statement.
Employers and their staff
Employers and their staff are responsible as processors of jobseekers' CVs according to Regulation (EU) 2018/1725 in accordance with this Privacy Statement. Further processing outside the strict scope of the system is regulated by the General Data Protection Regulation (Regulation (EU) 2016/679). One example of such a processing is the evaluation of the jobseekers' skills and suitability for a given vacancy, carried out independent of the search criteria provided by the system. This does not fall within the EJD website's explicit functions and is thus outside the control and responsibility of the European Commission.
9. Contact Information
The Data Controller
The EJD website is managed by the European Coordination Office for EURES, established within the European Commission's Directorate -General for Employment, Social Affairs and Inclusion who is the "controller" under Regulation (EU) 2018/1725 as the body responsible for development, support, and operation of the EJD website> and for the technical and organisational measures set up to ensure adequate security of personal data and particularly the need for confidentiality and integrity.
For any questions, complaints or other requests regarding the service and the processing of personal data, please contact the controller at the following e-mail address: email@example.com
The Data Protection Officer (DPO) of the Commission
The European Commission's data protection officer can be contacted at firstname.lastname@example.org
The European Data Protection Supervisor (EDPS)
You have the right to have recourse (i.e. you can lodge a complaint) to the European Data Protection Supervisor (email@example.com) if you consider that your rights under Regulation (EU) 2018/1725 have been infringed as a result of the processing of your personal data by the Data Controller.
For further information see: https://edps.europa.eu/data-protection/our-role-supervisor/complaints.
10. Where to find more detailed information?
The Commission Data Protection Officer (DPO) publishes the register of all processing operations on personal data by the Commission, which have been documented and notified to him. You may access the register via the following link: http://ec.europa.eu/dpo-register.
This specific processing operation has been included in the DPO's public register with the following Record reference: DPR-EC-00609.
B) Specific terms and conditions for the use of the EURES portal services
CV Online service
1. In accepting these conditions, individuals agree to use the site solely to announce their availability as jobseekers to employers and recruitment professionals such as EURES Staff.
2. In accepting these conditions, employers agree to use the site solely to make contact with jobseekers for the purpose of offering a job or assignment with the employer's own undertaking, or with an undertaking which the employer is representing. Any offer of employment shall be consistent with the wishes expressed by the jobseeker in his/her profile.
Employers may not demand a fee or any other form of payment from jobseekers for access to information on vacancies.
3. The European Commission reserves the right to delete without prior warning any information inserted that can be regarded as unlawful, unethical or in any other way unsuitable. Likewise, any user using the site in a way judged to be inconsistent with the service's purpose may have their account closed and all data deleted. The European Commission accepts no liability for loss or damage resulting from such an action.
1 Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data (repealing Regulation (EC) No 45/2001)
2 Agreement on the free movement of persons, air and land transport, public procurement, scientific and technological cooperation, mutual recognition in relation to conformity assessment, and trade in agricultural products, Official Journal L 114, 30/04/2002.