Recruitment Privacy Notice
Candidate Privacy Notice
The controller is ΞΕΝΟΔΟΧΕΙΑ ΡΟΔΟΥ ΓΕΩΡΓΙΟΣ Β.-ΚΑΡΑΓΙΑΝΝΗΣ Α.Ε., operating The Ixian Grand & All Suites.
Data and purposes
We process your identification and contact details, CV, submitted information and recruitment assessments to assess your application, communicate with you, conduct interviews and take necessary steps before potential employment. Data are not used for marketing. Please do not submit unnecessary data, particularly health information, religious or political beliefs or other special categories of personal data.
Legal basis
Processing for a specific vacancy is based on necessary steps, at your request, before entering into a contract. Limited retention after assessment is based on the company's legitimate interest in documenting recruitment and handling related requests. Retention for future vacancies (Talent Pool) is based on separate consent. Declining it does not affect your application for a specific vacancy.
Access and security
Access is limited to authorised people as necessary for recruitment and technical providers under appropriate data protection and confidentiality obligations. We apply appropriate technical and organisational safeguards. Hiring and rejection decisions are not made solely through automated processing.
Retention
For a specific vacancy, data are retained while your application is assessed and for two months after its assessment is completed. With separate consent, data are retained for future vacancies for 12 months from submission, unless you withdraw consent earlier. Data are then deleted or anonymised, unless a specific legal obligation or the defence of legal claims requires limited further retention. If hired, necessary data become part of your employee record under the applicable notice. Restricted backups are not used for recruitment and expire under their retention cycle, within 30 days. Deletions must be reapplied following any restoration.
Rights and contact
Where applicable, you may request access, rectification, erasure, restriction, objection and portability. Talent Pool consent may be withdrawn at any time without affecting the lawfulness of earlier processing. Contact: DPO@theixiangrand.gr. You may complain to the Hellenic Data Protection Authority: www.dpa.gr. Required fields are marked; without necessary information we may be unable to assess your application.
The future-positions choice is optional and does not affect this application.