CANDIDATE PRIVACY NOTICE

“Uklon UB” Foreign enterprise in the form of a Limited Liability Company (hereinafter referred to as “Uklon”, “company”, “us” or “we”) respects your privacy and is committed to protecting your personal data. Uklon is a personal data controller. This means that we are responsible for deciding how we hold and use personal data about you.
This notice is aimed at informing you of how and why your personal data will be used, namely for the purposes of the recruitment exercise, and how long it will be retained for. The notice provides you with certain information that must be provided under the data protection law of the Republic of Uzbekistan (hereinafter – “data protection law”).

DATA PROTECTION PRINCIPLES 
We will comply with data protection law and principles, which means that your data will be:
● Used lawfully, fairly and in a transparent way.● Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.● Relevant to the purposes we have told you about and limited only to those purposes.● Accurate and kept up to date.● Maintained only for as long as necessary for the purposes we have told you about, i.e. in relation to the recruitment exercise.● Kept securely and protected against unauthorised or unlawful processing and/or against loss or destruction using appropriate technical and organisational measures. 
THE KIND OF DATA WE HOLD ABOUT YOU
We will collect, use and store the following categories of personal data about you in connection with your application or the recommendation of your candidacy by your referrers:
● The data you have provided to us in your curriculum vitae (CV) and the personal data contained in your covering letter and/or commentary.● The data you have provided on our application form, including, but not limited to, first name, last name, and personal email address, and any data you provide us during interviews.● Any personal data provided to us about you by your referees [if applicable].
In case if you provide us with recommendation letter, other kind of professional reference or contacts of a referee, you guarantee and ensure that such referee is aware of sharing their data with us and gives consent to processing of their data by the company.

HOW IS YOUR PERSONAL DATA COLLECTED?  
We collect personal data about candidates from the following sources:
● You, the candidate.● Referrers who work for a company and recommend you through a referral program.● Your named referees [if applicable].● From publicly accessible sources, such as LinkedIn.
If you are recommended to us by one of our employees through our referral program, we assume that you have consented to such recommendation and have been made aware of the provisions of this Candidate Privacy Notice.

HOW WILL WE USE DATA ABOUT YOU?
We will use the personal data we collect about you to:
● Assess your skills, qualifications, and suitability for the role.● Carry out background and reference checks, where applicable.● Communicate with you about the recruitment process.● Keep records related to our hiring processes.● Comply with legal or regulatory requirements.
It is in our legitimate interests to decide whether to appoint you to the role since it would be beneficial to our business to appoint a suitable candidate to that role.
We also need to process your personal data to decide whether to enter into a contract (labor agreement) with you.
Having received your CV and covering letter, we will then process that data to decide whether you meet the basic requirements to be shortlisted for the role. If we make a decision in your favor, we may invite you for an interview. If we decide to call you for an interview, we will use the data you provide to us at the interview to decide whether to offer you the role. If we decide to offer you the role, we may then take up references and/or any other check before confirming your appointment.

IF YOU FAIL TO PROVIDE PERSONAL DATA
If you fail to provide personal data when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history), we may not be able to process your application further. For example, if we require references for this role and you fail to provide us with relevant details, we will not be able to take your application further.

HOW DO WE USE SENSITIVE PERSONAL DATA?
We do not require you to provide any sensitive personal data at the hiring stage. However, if you share such data with us (in the CV or in the commentary to the application form) we will use your sensitive personal data only in so far as we are permitted by data protection law to do so.

AUTOMATED DECISION-MAKING 
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.

DATA SHARING  We will only share your personal data within the group of Uklon companies for the purposes of processing your application. All our entities in the group are required to take appropriate security measures to protect your personal data. 
DATA SECURITY
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, and contractors who have a business need-to-know. They will only process your personal data on our specific instructions and they are subject to a duty of confidentiality. 

DATA RETENTION 
We will retain your personal data for a period of two (2) years after last contact date. We retain your personal data for that period so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way. We further retain such personal data in case a similar role becomes vacant for which you will be a fitting candidate. 
RIGHTS OF THE CANDIDATE AS A DATA SUBJECT 
Under certain circumstances, according to the data protection law you have the right to:
● Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.● Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data corrected.● Request erasure of your personal data. This enables you to ask us to delete and/or remove personal data where there is no legal basis for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing.● Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.● Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.● Request the transfer of your personal data to another party.● Other rights provided for in the data protection law.

ADDRESS DATA PROTECTION QUERIES 
If you have any questions about this privacy notice or how we handle your personal data or if you wish to exercise either of the rights entitled to you by the data protection law, please send an email to .ue.nolku%401nolku.zu

Effective date: 17.04.2024