“METROPOLITAN GENERAL HOSPITAL - HEALTHCARE FACILITIES OPERATION AND MANAGEMENT SINGLE MEMBER SA” - hereinafter “Metropolitan General” - wishes to inform you that the processing of your personal data, ordinary and/or sensitive, which are obtained through this Application for the submission of a Curriculum Vitae (“CV Form”), is in accordance with the laws applicable on data protection (regulation (EU) 2016/679 - hereinafter “GDPR” and national legislation) and our Hospital’s Privacy Policy.
1. Data Processing Controller and Data Protection Officer
The Data Processing Controller is “METROPOLITAN GENERAL HOSPITAL - HEALTHCARE FACILITIES OPERATION AND MANAGEMENT SINGLE MEMBER SA”, registered at 264 Mesogeion Ave. 155 62 Cholargos, telephone No. 210 650 2000 (“Data Processing Controller”).
You may contact the Data Protection Officer (“DPO”) at: dataprotection@metropolitan-hospital.gr
2. The data we process
With your consent, we process the following personal data, ordinary and/or sensitive, which you provide to us with your CV. Besides the first name and surname, such data include contact information, gender, information on education, previous experience, specific knowledge, professional skills, etc., and any other information you consider useful to provide (“Data”).
3. Why and how we process your data
The personal data obtained from the file you send us, including sensitive personal data, shall be used for the processing of your application for prospective employment with Metropolitan General. The legal basis for the processing of your personal data for the aforesaid purpose is your consent (article 6, paragraph 1, sub-paragraph a, and article 9, paragraph 2, sub-paragraph a of the Regulation on GDPR). In any case, even without your prior consent, the Controller may process your data in order to comply with legal obligations arising from the relevant laws and the EU regulations and law, to exercise rights in legal proceedings, to exercise the Controller’s own legal rights, and in all the circumstances laid down in articles 6 and 9 of the Regulation on GDPR.
The data are stored for a period of one (1) year from the date of submission of your application, for the purpose of comparison with your true data in any future job vacancies that may arise. If you wish to withdraw your application within a period shorter that the aforesaid time period, please advise us accordingly in writing at the addresses indicated above.
4. Persons with access to the data
The data are processed both electronically and manually in accordance with the procedures and practices relating to the aforesaid purpose and can be accessed by the Controller’s personnel authorised for such processing in the course of their duties.
Such personal data may be accessed and processed by other companies of the same Group as METROPOLITAN GENERAL in the European Union, or other companies which perform such processing on its behalf. Such companies shall process Personal Data solely in the context of an employment relationship with METROPOLITAN GENERAL or any other associated company, and under no circumstances for personal benefit, acting as processors.
To the exclusion of the foregoing, the Data shall not be communicated to third parties, whether natural or legal persons, that do not perform duties of commercial, business or technical nature for the Controller, and, likewise, they shall not be disseminated.
5. Your rights
At any time, you may contact the Controller at the addresses indicated above in order to exercise your rights arising from articles 15-22 of the Regulation on GDPR, for example in order to receive an updated list of the persons who have access to your data, receive confirmation as to whether personal data concerning your person are being processed, check the contents, source, accuracy and location thereof (in relation to any third country), request a copy thereof, request rectification and, where provided by the Regulation on GDPR, request restriction of processing or erasure. Likewise, you may, at all times, make remarks on specific uses of data with regard to specific categories of personal data which are deemed inaccurate or are not justified by the relationship with the Data Protection Officer, or lodge a complaint with the supervisory authority, namely the Data Protection Authority, 1 - 3 Kifissias Ave., 115 23 Athens, switchboard: +30 210 6475600 or http://www.dpa.gr. You may withdraw your consent at any time. However, withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Important Note:
If you exercise any one of your above rights, METROPOLITAN HOSPITAL shall take whatever steps are necessary in order to give effect to your request within thirty (30) calendar days from receipt, and shall advise you in writing whether your request has been granted, or shall give you the reasons why you are not entitled to make such request, or advise you whether one or more of your above rights are satisfied, in accordance with the General Data Protection Regulation (EU 679/2016)
By choosing to send your CV, you affirm that you fully understand and agree with the foregoing, and consent to the manner in which your data are stored and processed.
