The following Privacy Statement shall govern the lawful, fair and transparent processing of Personal Data of natural persons conducted by Superology in regard to natural persons applying for employment through a contact form (hereafter: the Candidate) on the Superology website (www.superology.com/careers)
By reading this Privacy Statement, you hereby acknowledge and agree that the personal data you provide to us is supplied at your own free will and will be used in accordance with the purposes described in this document. If you do not understand this Privacy Statement, please do not share your personal data with us.
We reserve the right to change and/or update our Privacy Statement at our discretion and at any time. You will be notified accordingly and in advance about these changes and or updates, which we kindly ask you to read carefully and make sure you understand and agree with.
Superology d.o.o. (hereinafter Superology) is an R&D innovation hub that provides entertainment solutions for the market-leading sports betting operator and acts as a part of Superbet Group.
Superbet Group1 and all affiliates is a betting & gambling organizer, trading under the brand name Superbet and part of the Superbet group of companies.
Superology d.o.o. is a Controller of the personal data we process about you.
The term “employee” refers to all employees, directors, officers and Board members of Superology. For the purposes of this privacy Statement, it also refers to other consultants and individual contractors engaged by Superology, even though they are not otherwise employees.
The term “Candidate” is used in this Statement to refer to anyone who applies for a job role, or who otherwise seeks to work with or for us (whether on a permanent or non-permanent basis).
As used in this Privacy Statement, personal data means any information that can be used to individually identify you, directly or indirectly, alone or along with other information, or contact you online or elsewhere.
The purpose of processing your personal data is to carry out specific recruitment activities and to provide you with information on various employment opportunities within Superology.
The legal basis for processing your personal data is the possibility of taking steps at your request prior to entering into a contract for a job within Superology and subsequently your consent in accordance with the requirements of GDPR.
You have the right to withdraw your consent at any time, without prejudice to the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
The categories of personal data that can be processed are those provided by you in your CV and/or Cover Letter. Sometimes, you may be asked for other categories of data, based on which a possible employment decision can be made such as:
At the same time, according to our internal policies and local legal provisions, we may collect information about you from open sources. We can also ask you for recommendations/references about your current or previous professional activities.
We solely collect your personal data with your informed knowledge and when you voluntarily submit it to us.
After the Candidate has provided us with their Personal Data through our contact form, we immediately forward the data to our Data Processor, a company specialised in recruitment and Candidates tracking.
All Personal Data processed by our Data Processor is done in accordance with the provisions of the GDPR and a binding Data Processing Agreement.
NOTE: After forwarding your Personal data to our Data processor, Superology does not save or in any other way process your Personal data.
Although Superology may not be interested in hiring the Candidate within a reasonable time frame after receiving the application, our Data Processor may process your Personal Data for an extended period after application, should Superology decide to extend an offer to the Applicant due to changed circumstances within that time frame.
If you are accepted for a role at Superology, the information collected during the recruiting process will be processed in accordance with applicable law, including any Employee Privacy Statement, a copy of which will be provided when you are on-boarded as an employee if applicable.
Once collected, we shall at all times ensure that any processing of your personal data is carried out in compliance with applicable laws, with this Privacy Statement and for the purpose for which you submitted your data to us.
By law, we must have a lawful reason for processing your personal information. The data we collect about you will only be used for the purpose for which you submitted it to us (i.e. toenable us to ascertain whether we would be interested in making the Candidate a part of our team as an employee or through any other legally binding form of service provision), to perform our legal obligations and our legitimate interests in specific circumstances. Such purposes are made clear to you at the point of collection or in this Privacy Statement. Thus, we process your personal data for the following purposes:
Also, we make sure that all our employees which have access to your personal data will process them only according their job responsibilities and in compliance with all laws, regulations or with your consent and these requirements are stated in their labour contract and undisclosed agreement they signed with Superology.
You can decide at any time not to provide us with the requested personal data. However, if you refuse to share your personal data with us when requested, we may not be able to fulfil and undergo our recruitment procedures and potentially provide you with job opportunities.
Your refusal to share your personal information with us in order to benefit from certain services may also limit the services and benefits we may offer you. For example, if you do not give us your consent to sign up to our sports and relaxing programs, you will not be able to receive such benefits.
We will never share your personal data with any third party who intends to use it for commercial purposes, unless we have expressly informed you and you have given us explicit permission to do so. In certain circumstances described below, we will share a minimum amount of personal data as follows:
Usually, when we disclose this personal information to other companies and institutions, we are properly taking care to share only minimum amount of personal needed to fulfil their functions, making them aware that these data can be used only when services are performing in our behalf or to comply with legal requirements. If the case, we apply security measures to request our services’ suppliers to protect your personal data.
In case we share your personal data outside the EU, Superology has in place contractual relationships with each such recipient that include standard contractual clauses intended to ensure an adequate level of protection and will always conduct rigorous due diligence to ensure there are no risks to such transfers
A network of computers, cloud-based servers, and other infrastructure and information technology, including, but not limited to, third-party service providers support our operations. We and our third-party service providers store and process your Personal Data in the European Union.
Our Data Processor may not transfer any Personal Data to third countries without written consent by the Data Controller.
Each of our service providers who process and store your personal data have an obligation to keep it protected and secured, in accordance with applicable industry standards and whether less stringent legal provisions apply in their jurisdiction.
Where such recipients of data are located in third countries for which the European Commission has not issued an adequacy decision, Superology has in place contractual relationships with each such recipient that include standard contractual clauses intended to ensure an adequate level of protection and will always conduct rigorous due diligence to ensure there are no risks to such transfers. A copy of the standard contractual clauses used by Superology can be found here.
Your personal data will only be stored for a necessary and strict period of time in accordance with the purpose for which it is collected and applicable laws or regulatory requirements. Generally, this means we will keep your personal data until the end of your employment with us, plus a reasonable period of time after that where necessary to respond to any employment inquiries, deal with legal, tax, accounting or administrative matters, or to provide you with ongoing pensions or other benefits. Your personal data will be retained as documented in our corporate data retention schedule and applicable riders and supplements.
The duration of the processing of your personal data will be done for a limited period, in accordance with the legal requirements, as follows:
Upon expiration of the set retention periods, your personal data will be deleted or anonymised. If, at any time, you wish us to discontinue the use of your personal data, please contact us in the manner described in “How to access, modify, delete or object to the use of your personal data” section.
If your requests to delete your personal data violate our legal or regulatory obligations, or the data related to the request for deletion are necessary to exercise or defense our legal claims, we may not be able to act upon your request and we will notify you of this decision.
We maintain technical, physical, and administrative security measures designed to provide reasonable protection for your Personal Data against loss, misuse, unauthorized access, disclosure, and alteration. The security measures include firewalls, data encryption, physical access controls to our data centres, and information access authorization controls.
Our Data Processor is contractually obligated to provide effective technical and organisational measures to safeguard your Personal Data.
Your personal data will not be profiled, and currently, we do not have automated decision making processes that affect you.
At any given time, you will have the following rights regarding your personal data processed by us. Please note, other than your right to object to us using your information for direct marketing (and profiling for the purposes of direct marketing), your rights are not absolute in case of other applicable laws.
(A) The right to information: you have the right to be provided with information on the identity of the personal data controller, on the reasons for processing you personal data and other relevant information necessary to ensure the correct and transparent processing of your personal data.
(B) The right of access: you have the right to make a request for details of your personal information and a copy of that personal information.
(C) The right of rectification: you have the right to have inaccurate information about you corrected or removed without undue delay.
(D) The right of erasure ("right to be forgotten"): you have the right to have certain personal information about you deleted from our records.
(E) The right to restriction of processing: you have the right to ask us to use your personal information for restricted purposes only.
(F) The right to data portability: you have the right to ask us to transfer the personal information you have given us to you or to someone else in a format that can be read by computer.
(G) The right to object: you have the right to object to us processing (including profiling) your personal information in cases where our processing is based on a task carried out in the public interest or where we have let you know it is necessary to process your information for our or a third party’s legitimate interests. You can object to us using your information for direct marketing and profiling purposes in relation to direct marketing.
(H) The right in relation to automated decisions: you have the right not to have a decision which produces legal effects which concern you or which has a significant effect on you based only on automated processing, unless this is necessary for entering into a contract with you, it is authorised by law or you have given your permission for this.
In order to exercise any of the above rights, you can send a signed and written request to our postal address or in writing to firstname.lastname@example.org Your request will be reviewed and answered within 1 month of receipt, in accordance with the GDPR. If we receive a large number of requests, or particularly complex requests, the deadline can be extended by a maximum of another two months. In certain circumstances as prescribed by data protection law (i.e. excessive requests), we might refuse to act upon your request.
In the event your personal data is processed based on your consent, you have the right to withdraw your consent at any time, without prejudice to the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
You also have the right to lodge a complaint with the National Authority for the Supervision of Personal Data Processing:
Agencija za zaštitu osobnih podataka
Selska cesta 136, 10000 ZAGREB
In order to exercise the Rights mentioned above, you can contact us by emailing email@example.com At any time, you can refuse to share your personal data or object to our processing of your personal data. However, you should understand that if you choose this option in certain situations, we may not be able to fulfill our obligations to you, as stated in "What happens if you do not provide or allow us to use your personal data” section above.
If you have consented to receive marketing communications from us and subsequently decide that you no longer wish to benefit from these, you can stop receiving such communications by unsubscribing any time.
If you have any questions, comments, complaints or suggestions relating to this Statement, or any other concerns about the way in which we process information about you, please contact our Data Protection Officer by emailing firstname.lastname@example.org