Identification

Data Controller: NH Hotel Rallye Portugal (hereinafter referred to as “NH Hotel Rallye Portugal”)
Tax Identification Number: 506618897
Address: Avenida da Liberdade, No. 185, 1250-141 Lisbon
Data Protection Officer (DPO) can be contacted via email: dpo@nh-hotels.com

Purpose of Personal Data Processing

The personal data provided will be processed by NH Hotel Rallye Portugal for the following purposes:

• To assess the candidate’s profile in recruitment processes.
• To evaluate the suitability of candidates.
• To manage the selection processes for which the candidate would be suited based on their profile.
• To conduct skill tests on candidates to understand their work style.
• To conclude the pre-contractual medical check-up to ensure that candidates are physically fit to perform their duties – only whether the candidate is fit or not for the work.
• To obtain work permission for candidates who need it.
• To check, with the consent of the data subject, the criminal records to ensure that they do not compromise the suitability of the candidates to perform the functions.
• To request references about the candidate, unless the candidate objects.
• To share personal data and profile with entities of the MINOR chain, so that they may contact the candidate in case of another job opportunity.
• To manage the systems implemented for the exercise of the rights of data subjects as provided in the current legislation on personal data protection.

Personal Data that Will be Processed

• Identification data: full name, address.
• Contact data: email address, telephone number.
• Academic and professional data: education, qualifications, CV, professional experience.
• Employment data: position, place of work, work record.

Legal Basis for Data Processing

The legal basis for managing the recruitment process is the pre-contractual relationship between the entity and the candidate. For the verification of references, the legal basis is the pre-contractual relationship and the legitimate interest to confirm that the references given are true.

For the conduct of suitability tests, the legal basis is the pre-contractual relationship.

Data related to the medical fitness of the candidate approved for hiring will be processed based on compliance with the Occupational Safety and Health Law and within the scope of the relationship with the respective occupational doctor.

To obtain work authorization for the candidate, the legal basis is the pre-contractual relationship. Data related to criminal records and the health of the candidate will only be processed based on the consent of the same.

Recipients of Your Personal Data

Your personal data will be communicated to the entity of the MINOR group to which you directed your application. Additionally, if the candidate gives their consent, their personal data will be communicated to all entities of the MINOR group, so that they may contact them in case of vacancy openings. All these entities can be found through the link Companies of NH Hotel Group | NH Hotel Group (nh-hoteles.es)

International Data Transfers

The data may be transmitted to any entities belonging to the Minor Group that are based in foreign countries, so your personal data may be transferred to other Member States of the European Union and also to third countries, that is, those located outside the European Area. Whenever the CV or other data of the candidate is sent to third countries that are not subject to adequacy decisions (for not offering sufficient guarantees of security), this processing will be carried out under general contractual clauses as per the General Data Protection Regulation.

Data Storage

Your personal data will be stored only for the period between the submission of the application/CV and the completion of the recruitment process. If the data controller intends to keep the data beyond the selection process, they must request specific consent from the concerned candidate. In that case, the data will be retained for a period of 24 months.

Exercise of Rights

The data subject may at any time and free of charge contact the Data Controller at the address indicated at the beginning of this Policy, or send an email to dpo@nh-hotels.com, always attaching, when requested, a copy of their identity document or another suitable document for proving their identity. The data subject can exercise any of the following rights:

• Access their personal data.
• Rectify incorrect or incomplete data.
• Revoke the consents granted.
• Request the portability of their data.
• Request the deletion of their data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• Obtain from the Data Controller the limitation of data processing when any of the conditions stipulated in the data protection regulations are not met.
• File a complaint with the competent Data Protection Authority when the data subject considers that the Data Controller has violated the rights recognized by the applicable data protection regulation.