Candidate & Job Applicant Privacy Notice

Introduction and document metadata

How NOVARIC^® processes personal data for recruitment, candidate management and employment placement

This Privacy Notice is addressed to job applicants, registered candidates, and individuals seeking employment or training opportunities through NOVARIC^®. You are receiving this notice because NOVARIC^® processes information about you that constitutes personal data under GDPR (EU 2016/679). We take the protection of your personal data seriously.

1. Who We Are

NOVARIC^® Ltd. (registered in Malta, C 63881) and NOVARIC^® Sh.A. (registered in Albania) are the data controllers responsible for processing your personal data in connection with our recruitment, training, HR consulting, and relocation services. They may act individually or as joint controllers depending on the nature of the activity.

Contact the Data Controller: legal.department@novaric.co | Contact Form

Legal Basis: GDPR Art. 4(7) (definition of controller)  |  GDPR Art. 26 (joint controllers)  |  GDPR Art. 13 & 14 (information obligations)

2. What Data We Collect

Depending on the nature of your interaction with NOVARIC^®, we may collect and process the following categories of personal data:

Identification & Contact Data

• Full name, nationality, date of birth
• Email address, telephone number, address
• Passport or national identity document number (where required for visa/work permit processing)

Professional & Qualification Data

• CV, work history, qualifications, and certificates
• Educational background and academic transcripts
• Skills, language proficiency, and professional licences
• References and professional evaluations

Application & Assessment Data

• Cover letters and application forms
• Interview notes and assessment results
• Test scores and competency evaluations
• Placement and matching preferences

Immigration & Relocation Data

• Visa and work permit status and documentation
• Right-to-work verification documents
• Relocation preferences and country of origin

Special Category Data (processed only where strictly necessary and with explicit consent)

• Health information relevant to specific job requirements
• Criminal record checks where required by law or by employer
• Disability or accessibility requirements

Legal Basis: GDPR Art. 9 (special categories of data)  |  GDPR Art. 10 (criminal convictions data)  |  Directive 2019/1152/EU (transparent employment conditions)

3. How We Use Your Data

Legal Basis: GDPR Art. 6 (lawful bases for processing)  |  GDPR Art. 9(2)(b) (employment law obligations)  |  Directive 2019/1152/EU  |  Directive 2008/104/EC (agency work)

4. Who We Share Your Data With

NOVARIC^® shares your personal data only where necessary and with appropriate safeguards in place:

• Prospective employers and clients — only with your explicit prior consent
• NOVARIC^® group entities — NOVARIC^® Ltd. (Malta) and NOVARIC^® Sh.A. (Albania) acting as joint controllers
• Immigration and legal authorities — where required by law for visa and work permit processing
• Vocational training providers — for Academy enrolment and certification
• Technology and IT service providers — under strict data processing agreements (GDPR Art. 28)
• NOVARIC^® Nexus AI system — for candidate matching and communication, governed by the NOVARIC^® Nexus AI Governance Framework
• Regulatory and supervisory authorities — when legally required

We never sell your personal data to third parties. We do not share your profile with employers without your explicit consent.

Legal Basis: GDPR Art. 28 (processor agreements)  |  GDPR Art. 46 (transfers outside EU)  |  GDPR Art. 49 (derogations for specific situations)

5. International Transfers

When NOVARIC^® transfers personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Binding Corporate Rules or other approved transfer mechanisms

Transfers to Albania: Albania has received an EU adequacy decision for data protection purposes.

Legal Basis: GDPR Art. 44–49 (international data transfers)  |  EC Implementing Decision on SCCs (2021/914)  |  EDPB Guidelines 05/2021

6. How Long We Keep Your Data

After the retention period, your data is securely deleted or anonymised. You may request early deletion by contacting legal.department@novaric.co.

Legal Basis: GDPR Art. 5(1)(e) (storage limitation)  |  Maltese Employment and Industrial Relations Act Cap. 452  |  Albanian Labour Code

7. Your Rights

To exercise any right, submit your request to: legal.department@novaric.co — we will respond within 30 days.

8. Automated Decision-Making

NOVARIC^® may use automated tools and AI systems (including NOVARIC^® Nexus) to assist in candidate matching and communication. However, no fully automated decision with legal or significant effect is made without human review and validation.

You have the right to request human review of any automated assessment. Contact us at legal.department@novaric.co.

Legal Basis: GDPR Art. 22 (automated decision-making and profiling)  |  EU AI Act 2024 (high-risk AI in recruitment)  |  EDPB Guidelines on Automated Decision-Making

9. Data Security

NOVARIC^® implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encrypted data transmission and storage
• Access controls and authentication
• Regular security audits and testing
• Staff training on data protection obligations
• Incident response procedures compliant with GDPR Art. 33–34

Legal Basis: GDPR Art. 32 (security of processing)  |  ISO 27001:2022 (information security management)  |  Directive 2016/1148/EU (NIS Directive)

10. Updates to This Notice

We review and update this Privacy Notice periodically to reflect changes in our practices or applicable law. We will notify you of material changes via email or through our website. The current version is always available at novaric.co/resources/privacy/candidate-privacy-notice/.

Related Privacy Notices