Privacy Policy

1. The Company

SKS365 Malta Ltd (C 57502) (the ‘Controller’, ‘We’, ‘Us’ and/or the ‘Company’), a Maltese registered company with registered address 135, Central Business Centre, Level 2, Spinola Bay, St Julian’s, Malta STJ 3093, is committed to protecting the user’s privacy and is herewith drawing up this Privacy Policy, which describes the processing operations carried out by the Controller during navigation or use of the site or for active behavior by the user during such navigation. Such data is treated in accordance with international legislation, particularly but not limited to, the European Union’s General Data Protection Regulation (the ‘GDPR’) and local legislation, namely the Data Protection Act, Chapter 586 of the Laws of Malta, and/or any further and different national legislation, if applicable. Each processing activity will respect the principles of correctness, lawfulness, transparency and protection of confidentiality.

2. Data the Company Collects and Processing Purposes

The Company maintains data which you provide Us with and also collects data upon you visiting or using the Company’s website. The purpose of such data processing is for recruitment purposes, in order to review and follow up your application, fulfill your request and optimize recruiting processes. Personal data, such as your name, surname, address, date of birth, contact details and email address may be obtained by the Company through the submission of your curriculum vitae, online application forms and/or registration forms and/or any other personal data you may provide Us with through the completion of any online forms We make available.

The provision of such personal data is not mandatory, but failing that, it may not be possible for Us to fulfill your request.

Furthermore, the Company’s website allows user simple interactions or communications with the Company’s social pages, through specific links to other websites owned or managed by third parties belonging or not to the same SKS365 Group (meaning the corporate group consisting of all the companies directly or indirectly owned by SKS365 Malta Holding Limited).

The Company declines any responsibility for any processing of personal data by third parties who own the websites in question.

3. Lawfulness of Processing

The data processing for the purposes of the previous paragraph takes place on the basis of art. 6 (1) (b) of the GDPR, i.e. for the performance of contractual or pre-contractual measures requested by the data subject, and also on the basis of art. 6 (1) (f) of the GDPR, i.e. the legitimate interest of the owner, as regards the optimization of the recruiting process.

4. Data Usage and Transfer to Non-EU Countries

The data you provide us with will only be used for the purpose stipulated above under strict confidentiality. Furthermore, the Company may provide such information on the data subject to any regulatory or law enforcement authority, if required to do so in the course of action. In addition, your data may be disclosed or shared with other authorized employees of the Company for the purposes stipulated above, namely but not limited to, recruitment. Your personal data could be accessible to suppliers or collaborators of the company also (e.g. online recruiting platforms), who process data on the instructions of the Company and who, therefore, act as data processors. Both authorized employees and data processors will be bound by legal obligations of confidentiality. Notwithstanding this, the Company ensures that it will take all measures possible to protect the data subject’s privacy rights as established under this Privacy Policy and data protection laws and regulations.

In some cases, data processing may be carried out even in non-EU countries (for example, personal data acquired for recruiting purposes could be processed by data processors, employees or other group companies located in different or non-EU countries). If so, every transfer to third countries, where applicable, will comply with the requirements for the transfer of Extra-EU data, and Company will guarantee appropriate safeguards to such transfer. In particular, the processing of personal data for recruiting purposes takes place through a platform based in the UK. The lawfulness of such data transfer is based on the adequacy decision adopted by the European Commission, who established that the UK ensures an adequate level of protection for personal data.

5. Data Retention Period

Personal data processed for recruiting purposes are stored for six months from the application. Personal data processed to fulfill other requests of the user will be stored for as long as necessary to fulfill such request or for as long as allowed by applicable law.

6. Rights of Data Subjects

Each data subject shall have the right to obtain confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to such personal data, and obtain rectification of inaccurate personal data concerning him or her.

Each data subject shall have the right to obtain erasure of personal data concerning him or her without undue delay, and the restriction of processing, in accordance with articles 17 and 18 of the GDPR, and to be notified for rectification or erasure of personal data or restriction of processing carried out. The data subject shall have the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. Data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her, and not to be subject to a decision based solely on automated processing.

In the event that the processing is based on data subject’s consent, the latter shall have the right to withdraw his or her consent at any time.

To exercise any of the above rights please email your request to the Company’s Data Protection Officer on dpo.mt@sks365.com.mt or by mailing any such requests in writing to the attention of the Data Protection Officer, SKS365 Malta Limited, 135, Central Business Centre, Level 2, Spinola Bay, St Julians, Malta. The user is to ensure that such a request is signed by himself/herself personally. The data the Company collects will not be kept longer than is necessary needed. Furthermore, should the user not be satisfied with our response, s/he may lodge a complaint with Information and Data Protection Commissioner (the ‘IDPC’), Level 2, Airways House, High Street Sliema, SLM 1549 Malta, and/or with other supervisory authority, in particular in the Member State the user’s habitual residence, place of work or place of the alleged infringement, if the user considers that the processing of personal data relating to him or her infringes the GDPR. The IDPC may also be reached by telephone on (+356) 23287100 or email idpc.info@idpc.org.mt.

7. Security

The processing of the data provided by browsing the Site is carried out using electronic procedures and supports and adopting adequate technical and organizational measures to guarantee the security of the processing. The Company ensures that all measures possible are undertaken to safeguard the security of the personal data the user provides Us with. The technical, physical and managerial measures are regularly reviewed and updated in order to maximise and enhance security to avoid any unauthorised access, improper use or disclosure and accidental loss or destruction. Our employees and data processors are also bound to protect such personal data and ensure adequate confidentiality. Despite this, the web is not a foul-proof medium and data transferred may be subject to unauthorised compromises by third parties. Therefore, the Company cannot guarantee the privacy of information reached to Us through the internet. As a result, the Company is not in a position to fully guarantee absolute security of your data while in transit through the Web.

8. Changes to the Privacy Policy

The Company reserves the right to update this Policy at its own discretion and at any given time. The user is therefore encouraged to periodically read through the policy for any changes and updates.