With respect to personal data of ‘external contacts’
Personal data is any information about an identifiable individual, other than the person’s business title or business contact information when used or disclosed for the purpose of business communications. Personal information does not include anonymous or non-personal information (i.e., information that cannot be associated with or tracked back to a specific individual).
In our business operation we process different types of personal data of our external contacts, including, but not limited to, the personal data contained in:
In addition to the examples listed above, personal data also includes information such as gender, date of birth, education and/or training details, bank details and any other information necessary to achieve Refresco’s business purposes, which is disclosed in the context of having contact or doing business with, or applying for a job at, Refresco.
As a general rule, Refresco processes personal data directly provided by external contacts. From time to time, we may utilize the services of third parties in our business and may also receive personal data collected by those third parties in the course of the performance of their services for us or otherwise. Where this is applicable, we will take reasonable steps to ensure that such third parties have represented to us that they have the right to disclose the personal data of external contacts to us.
Where permitted or required by applicable law or regulatory requirements, we may process information about external contacts without their knowledge or consent.
Refresco processes personal data of external contacts for its business purposes only. We can inter alia process personal data of external contacts for the following purposes:
Please note that personal data of external contacts may be exchanged with, or made available to our subsidiaries for the aforementioned purposes.
In connection with your application for work with us, we will use the personal data we collect about you to:
We also need to process your personal data to decide whether to enter into a contract of employment with you. Having received you CV, covering letter or your application form and the results from the test, which you took, if applicable, we will then process that information to decide whether you meet the basic requirements to be shortlisted for the role.
If we decide to call you for an interview, we will use the information you provide to us at the interview, to decide whether to offer you the role.
If we decide the offer you the role, we might than take up references before confirming your appointment.
If we wish to retain your personal information on file, on the basis that a further opportunity may arise in future and we may wish to consider you for that, we will write to you separately, seeking your explicit consent to retain your personal information for a fixed period on that basis.
If you fail to provide information when requested, which is necessary for us to consider your application, we will not be able to process your application successfully.
We may use your personal data:
We may use your personal data without your knowledge or consent where we are permitted or required by applicable law or regulatory requirements to do so.
As a principle, we do not disclose personal data to third parties. However, disclosing personal data of external contacts to third parties might be necessary in the performance of an agreement between Refresco and the external contact. At all times, any third party must act on the instructions of Refresco and ensure personal data is adequately protected.
Refresco will take all reasonable precautions to keep your personal information secure, appropriate to our business and the amount of personal data that we own or maintain and identified risks.
Except as otherwise permitted or required by applicable law or regulatory requirements, Refresco endeavors to retain personal data of external contacts only for as long as it believes is necessary to fulfill the purposes for which the personal information was collected (including, for the purpose of meeting any legal, accounting or other reporting requirements or obligations). We may, instead of destroying or erasing personal data of the external contact(s) make it anonymous such that it cannot be associated with or tracked back to the external contact(s).
It is important that all personal data in our records is both accurate and up-to-date. You can exercise your rights with respect to your personal data, such as the right of access, rectification, erasure and objection. Please use the contact information provided below. We strive to respond to your request within four (4) weeks. Occasionally it may takes us longer than four (4) weeks if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.