Privacy notice for job applicants

Rigid Technologies Ltd, One Innovation, IH-00-01-01-OF-01, Level 1, DIFC, Dubai, United Arab Emirates. Contact: [email protected].

• Your CV and application, your contact details, and anything else you send us.
• Interview notes and our assessment.
• References, where you give us referees.
• For roles with access to card data, the result of a background check (pass or fail, and its date). The card-industry rules require this check before hire. It is run by our HR platform; the full report stays on that platform and is not copied into our systems.

You do not have to give us this information, but without it we cannot consider your application.

You; the job site or recruiter you applied through; your referees; the background-check provider.

To assess your application and take the steps you ask for before any contract; in our legitimate interest in hiring suitable people and meeting the card-industry screening rules; and, with your consent, to keep your CV for future roles. You can withdraw that consent at any time.

We check applications against our own records of earlier applications and employment with us. You can ask what we hold about you and have errors corrected.

The people involved in hiring; suppliers that process data for us under data-processing contracts (our HR platform, the background-check provider, email and file tools, and recruitment software if we introduce it); our professional advisers where needed; and authorities where the law requires.

We are in the United Arab Emirates. Our suppliers store data in the European Union and the United States. Where the law requires a safeguard for this, we rely on standard contractual clauses in the supplier's terms. Ask [email protected] for details of the safeguard that applies.

• If you are not hired: up to 6 months after the decision.
• If you agree to stay in our talent pool: for the period we tell you when we ask, unless you withdraw earlier.
• If you are hired: your application becomes part of your staff file.
• A record that we decided, on documented facts, not to consider you again: up to 10 years.

We may keep data longer where a law, a regulator, a legal claim or a dispute requires it. We protect this data with appropriate security measures, including access controls.

You can ask us to show you your data, correct it, delete it, restrict or stop its use, hand it over in a portable format, and you can withdraw consent at any time. Email [email protected]; we respond within the time the law allows, normally one month. We may ask you to verify your identity first, and some data we may have to keep by law.

Complaints: [email protected] first, then the DIFC Commissioner of Data Protection or, if you are in the European Union, your national data-protection authority.

We may update this page at any time; the date at the top shows the current version. This page is information about how we handle data and does not form part of any contract or offer.