Updated: 01.11.2024

Privacy Notice

Folks Rocks is a recruiting agency dedicated to connecting top talent with leading employers. To ensure the best matches, we carefully analyse, evaluate, and interview candidates, which involves handling Personal Data.

We understand the importance of privacy and security, and we want you to feel confident that your data is handled carefully. Folks Rocks collects, processes, transfers, and stores your Personal Data in full compliance with GDPR, the European Union standard for secure and lawful data management.

This notice explains in detail how we manage, protect, and respect your personal information throughout the recruitment process and also describes rights you have in connection with your Personal Data.

1. Definitions

1.1 “Candidate” refers to any individual who engages with Folks Rocks, is contacted by Folks Rocks, provides Personal Data to Folks Rocks, or accesses the Folks Rocks website in the context of potential recruitment opportunities.

1.2 “Client” or “you” means any third party that engages Folks Rocks to provide recruitment services, including employers seeking candidates for open positions.

1.3 “Folks Rocks” or “we” refer to Folks Rocks EODD, a limited liability company registered under the laws of Bulgaria, company number 207982916, with registered address at 30 Pozitano Blvd., 1000 Sofia, Bulgaria.

1.4 “GDPR” refers to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC.

1.5 “Personal Data” refers to any information relating to an identified or identifiable natural person.

1.6 “Services” refers to the recruitment services offered by Folks Rocks, including but not limited to candidate sourcing, evaluation, and placement, which are provided to support our clients’ hiring needs.

2. Personal Data Processing 

2.1 When we process your Personal Data:

• When you visit and interact with our website.
• When you apply for roles or submit your CV or other information to Folks Rocks.
• When we identify you as a potential fit based on publicly available data.
• When our employees or partners refer you as a potential candidate.
• When you’re listed as a reference by another Candidate.
  

2.2 Where we may get Personal Data:

• Directly from you.
• From public sources such as LinkedIn profiles.
• From our employees, partners, or your references.
• From people and companies you reference in your CVs, cover letters and applications.
  

2.3 What Personal Data we process:

• Contact information, such as your name, email address, phone number, and physical address.
• Your IP address, browser type, session behavour, language, location, and operating system.
• Activity on our website, pages visited, and other statistical data.
• Your communications and correspondence with us, such as emails, video calls, and messages on social media.
• Application details, such as your resume, cover letter, references, education, experience and skills.
• Notes from interviews, assessments, and test results.
• Publicly available information about you.
• Reference data provided by people listed as your referees.

2.4 For what Purposes we process Personal Data:

• To protect and enforce our rights, interests, and those of others, including in connection with legal claims.
• To share your Personal Data with clients, employees, agents, and other recipients involved in the recruitment process.
• To collect information about your use of our website through cookies and tracking technologies to enhance user experience.
• To maintain, develop, test, and ensure the security of the website, including gathering analytics to improve site operations.
• To analyse the usage and performance of the website and its content for operational improvements.
• To provide updates about current and future vacancies with us, including recruitment communications regarding application status and potential roles.
• To review profiles and applications, including communication regarding your application and status.
• To evaluate your professional suitability, including conducting interviews and gathering feedback from references.
• To contact you directly about specific future vacancies that match your profile.
• To record interviews for quality assurance and evaluation purposes.
• To request your participation in surveys to improve our recruitment processes and services.
• To gather feedback and information regarding candidates you refer or provide information about.
• To manage the recruitment process, including scheduling interviews, conducting assessments, and facilitating communication between candidates and clients.
• To keep clients informed about candidate progress and suitability based on our evaluations.
• To comply with legal obligations and regulatory requirements related to recruitment and employment.

3. Sharing Personal Data

3.1 Why we may share Personal Data within or outside the EU with:

• Service providers, to support functions like applicant tracking and site management.
• Group companies, for essential recruitment processes and software.
• Cookie providers, when you have consented to this in our Cookie Policy.
• Authorities and legal entities, when required to meet legal obligations.
• Business partners in mergers and acquisitions, if relevant to a sale or merger of the company.
• Clients, for the purposes of fulfilling recruitment requests and providing candidate information.
• Employees and agents, to coordinate recruitment efforts and manage applications.
• Professional assessors and test providers, for candidate evaluations and skills assessments.
• Background check providers, for conducting necessary background verifications.
• External advisors, for legal, financial, or compliance-related matters.
• Marketing partners, to inform candidates about relevant job opportunities, with consent.
• Third-party referrers, to update individuals who referred candidates about their recruitment status.
• Industry networks and associations, for networking purposes, particularly in specialised fields.

4. Personal Data Transfers 

4.1 We aim to process Personal Data within the EU/EEA whenever possible. However, in instances where we engage with service providers or partners located outside this region, we implement EU-recognized safeguards, such as EU Standard Contractual Clauses, to ensure robust data protection measures are maintained.

4.2 While we strive to process your Personal Data within the EU/EEA, some of our service providers may process data in countries outside this region. We also engage suppliers whose parent companies, or subcontractors’ parent companies, are based outside the EU/EEA. In such cases, we consider the potential risks associated with disclosing Personal Data to jurisdictions beyond the EU/EEA, especially due to possible authority requests.

4.3 When your Personal Data is transferred outside the EU/EEA, we ensure that recognised safeguards compliant with GDPR are in place. These safeguards include:

• We rely on decisions from the EU Commission that confirm certain countries outside the EU/EEA provide an adequate level of data protection.
• We enter into agreements that adhere to the EU Commission’s standard clauses with recipients outside the EU/EEA, ensuring that the protections offered by the GDPR continue to apply, and your rights remain safeguarded.
• In addition, we implement appropriate technical and organisational measures to protect your Personal Data during transfer, tailored to the specific circumstances and feasibility of each transfer.

5. Legal Basis for Processing

5.1 Our primary legal basis for processing Personal Data is our legitimate interest in recruitment, in compliance with GDPR requirements. We need a legal basis to justify the processing of Personal Data under GDPR guidelines.

5.2 When processing your Personal Data, we generally rely on the necessity of the processing to support our legitimate interest in recruiting individuals with the relevant skills and competencies. We believe that our interest in this processing outweighs your right to privacy, as the processing is essential for achieving our recruitment objectives.

5.3 In certain situations, we may seek your consent to process specific Personal Data. For example, we would request your consent if we intend to record an interview with you. If you have any questions about our legal basis for processing your Personal Data or how we reached this conclusion, please feel free to contact us for further clarification. You also have the right to withdraw your consent at any time, and we will provide more information on this process if needed.

6. Storing Personal Data

We will retain your Personal Data to assess your suitability for the relevant vacancy. If you do not succeed in the recruitment process, we will keep your data for as long as necessary to consider you for future job openings.

If you are hired, we will retain your Personal Data for the duration of your employment and inform you of any additional purposes for which it will be used.

7. Your rights and Personal Data

According to GDPR, you have the following rights in connection with your Personal Data:

7.1 Right to be informed: You have the right to know how your Personal Data is being processed and for what purposes.

7.2 Right to access your Personal Data: You can request to see the Personal Data we hold about you and receive a copy of it.

7.3 Right to data portability: You can request your Personal Data in a structured, commonly used, and machine-readable format, allowing you to transfer it to another service if you wish.

7.4 Right to have your Personal Data deleted (right to be forgotten): You have the right to request the deletion of your Personal Data if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.

7.5 Right to object to processing: You can object to the processing of your Personal Data if it is based on our legitimate interests, citing your personal circumstances.

7.6 Right to restrict processing: You can ask us to limit the processing of your Personal Data if you believe it is inaccurate, unlawful, or no longer needed.

7.7 Right to rectification: You have the right to request the correction of inaccurate or incomplete information about you.

7.8 Right to withdraw your consent: If we process your Personal Data based on your consent, you can withdraw that consent at any time, stopping further processing for those purposes.

7.9 Right to raise a complaint: You can lodge a complaint if you feel your rights regarding Personal Data have been violated.

8. Cookies
Cookies are small files placed on your device when you visit our website. They help us remember your preferences and improve your experience. For more information about cookies, visit https://www.aboutcookies.org/.

We use cookies and similar technologies for different purposes, including analytics, marketing, and website functionality. This helps us improve your navigation, remember your preferences, and provide relevant information during your visit.

9. Updates to This Privacy Notice

We may update this Privacy Notice as necessary, for example, if we change how we process your Personal Data, if we aim to clarify the information provided, or to ensure compliance with applicable data protection laws. We recommend that you check this page regularly for any updates. You can always refer to the top of this page to see the date of the most recent update.

10. Contact

If you have any questions or comments about how we handle your Personal Data, or if you want to exercise your rights, please email us at info@folks.rocks. If you have concerns about your rights being violated, you can also contact the Data Protection Inspectorate or a court in your area. However, we encourage you to reach out to us first so we can resolve any issues.