Find a Job

Provectus Privacy Notice and Data Policy

Provectus EU Candidate Privacy Notice

We know that you care how we use information about you, and we appreciate your trust in us to do that carefully and sensibly. This notice is aimed at informing you of how and why your personal data will be used, namely for the purposes of the recruitment exercise, and how long it will be retained for. It provides you with certain information that must be provided under the General Data Protection Regulation ((EU) 2016/679) (GDPR) and the local data protection law.

Who does this Notice apply to?

This Notice applies to all employment candidates of Provectus and its affiliated companies in the European Economic Area (the “EEA”), Switzerland, and the United Kingdom.

Data protection principles

We will obey data protection law and principles, which means that your data will be:

  • Used lawfully, fairly and in a transparent way.
  • Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
  • Relevant to the purposes described in this policy and limited only to those purposes.
  • Accurate and kept up to date.
  • Maintained only for as long as necessary for the purposes mentioned herein, i.e. in relation to the recruitment exercise.
  • Kept securely and protected against unauthorized or unlawful processing and against loss or destruction using appropriate technical and organizational measures.

What personal data does Provectus collect about you, and how do we use it?

Provectus, as a company you are applying to, controls what personal data is collected and how it is used. In some countries, this is referred to as the “controller”.

Generally, the personal data we collect from you helps us manage your recruiting and hiring process, conduct Provectus’ businesses, and obey Provectus’ legal obligations.

We collect and use the following categories of personal data from and about our candidates (some or all may apply to you):

  • Identification data
  • Contact information
  • Demographic data
  • Data regarding responses to screening questions
  • Background check information
  • Previous employment information
  • Data pertaining to work preferences and abilities
  • Resume data
  • Information on certain health conditions (only where required by law)
  • Job interview notes
  • Assessment results
  • Travel-related records
  • Expense data
  • What are the purposes of collecting your personal data?

Collecting and using your data enables Provectus to administer the recruiting process, including setting up an electronic job applicant HR file; managing your application; conducting assessments; organizing interviews, including arranging or reimbursing for your travel; providing accommodations; processing interview feedback; on-boarding; and conducting background checks and screening. We will process your personal data to meet recordkeeping and internal and external reporting responsibilities. If necessary, your data will also be used in investigations and legal proceedings.

Typically, we do not use your personal data for so-called “automated decision-making” (the process of making a decision by automated means without any human involvement). We will inform you separately if your personal data is ever made subject to automated decision-making.

In the event of an unsuccessful application, most candidates want us to retain the data they provided so that we can contact them about other interesting job opportunities at Provectus. To make this possible, we ask you at the point of your first application whether, in the event of an unsuccessful application, you want us to keep the personal data that you provide to us for a period of time and make it available to recruiters within the Provectus group. If you consent, our recruiters will be able to consider and contact you for other Provectus job opportunities. You can revoke your consent at any time by changing the consent settings in your candidate profile.

Where does Provectus obtain your personal data?

We obtain most of your personal data from you. We also create personal data about you during the application process (for example, during interviews or via job assessments). Additionally, we collect certain types of personal data about you from third parties, including, for example, from recruitment agencies.

With whom does Provectus share your personal data?

We use third parties for recruitment-support services. In providing such services, these third parties process your personal data on Provectus’ behalf. For any third party that we use, we will confirm that they provide sufficient guarantees regarding the protection of your data. We will require that any third party complies with our data security standards and international transfer restrictions.
Where relevant, we will share your personal data with third parties who act as controllers in their own right for the purposes described above and in accordance with the data protection laws, including:

  • HR services providers
  • Insurance providers and brokers
  • Governmental organizations or agencies, including law enforcement
  • External advisors (such as legal advisors, accountants)
  • Employee benefits providers

Does Provectus transfer your personal data to countries outside the country/region in which you apply?

On some occasions, for example, when we or one of our service providers have employees or operate equipment in other countries, we will transfer your personal data to countries outside the country/region where you work and outside the EEA. For all such transfers, we provide appropriate safeguards through EU Standard Contractual Clauses based on the European Commission’s model clauses.

How is your personal data secured?

We maintain appropriate technical and organizational measures to protect the confidentiality of your personal data, including security measures to protect against unlawful or unauthorized processing of personal data, and against the accidental loss of, or damage to, your personal data.

How long does Provectus store your personal data?

If your application for employment is successful and you commence employment with Provectus, your personal data will be maintained consistent with Provectus’ employee data retention policies.
If your application for employment is not successful and you have not provided consent, we will generally keep your personal data beyond the end of the application process for a limited period of time specific to the country where the job is located (i) to meet recordkeeping requirements, and (ii) for potential use in legal proceedings. To avoid unreasonable duplications of recruiting efforts we will keep assessment data and master candidate data as long as it is necessary for the purposes described in this policy, as well as for contacting you for future job opportunities.

What are my rights under applicable data protection laws?

You have the right to request access to, correction, or deletion of your personal data, to ask for data portability and the restriction of processing, and – depending on the laws of your country – the right to define instructions on your personal data after your death. You are also entitled to object to the processing of your personal data in certain instances. When we process your personal data based on your consent, you may withdraw your consent for the future at any time. To make a data subject request, please contact us on You can also lodge a complaint with a supervisory authority.

Questions and queries?

If you have any questions or concerns about your privacy, please contact your Provectus hiring entity contact (or the respective data protection officer, where appointed) or send an email to

Our business changes constantly, and our Privacy Notice will change also. If the change is fundamental or will significantly affect you, we will provide you with the updated Notice in advance of the changes taking effect. You can also check this Notice at your convenience to see any recent changes. Unless stated otherwise, our current Notice applies to all information that we have about you. We stand behind the promises we make and will not materially change our policies and practices to make them less protective of candidate personal information collected in the past.