Privacy Policy
PURPOSE AND SCOPE
This Candidate Privacy Notice (“Notice”) describes the privacy practices of Easa Saleh Al Gurg Group LLC. (referred to as “ESAG”, “we” or “us” or “our”) in relation to the collection, use, and safeguarding of Personal Data of job candidates (“you”, “candidate”) during the recruitment process. It explains how your Personal Data is collected, processed, stored, disclosed, and protected, and outlines your rights in accordance with applicable data protection laws.
This Notice applies to all individuals who apply for employment with ESAG, whether for permanent, temporary, full-time, or part-time roles, and regardless of the method of application (e.g., online through our careers portal, via third-party recruiters, or by email). It covers the processing of your Personal Data from the point of application through to hiring decisions.
By submitting your application to ESAG, you acknowledge that you have read and understood this Notice and consent to the processing of your Personal Data as described herein.
For the purposes of this Notice, “Personal Data” means any information relating to an identified or identifiable natural person, such as your name, contact information, resume, employment history, education, qualifications, references, government-issued identifiers, or any other information collected as part of the recruitment process.
WHAT PERSONAL DATA WE COLLECT
As part of our recruitment process, ESAG collects and processes various categories of Personal Data about candidates to assess their suitability for employment and to fulfill our legal and administrative obligations. The types of Personal Data we may collect include:
●Personal Information – such as your full name, gender, date of birth, nationality, and country of residence.
●Contact Information – including your email address, phone number, and current residential address.
●Employment History – details of your previous roles, employers, industries, responsibilities, and locations of employment.
●Education Details – including institutions attended, fields of study, degrees obtained, and graduation dates.
●Language Skills – languages spoken and level of proficiency.
●Recruitment Information – such as your CV/resume, cover letter, reference details, and other documents you submit as part of your job application.
●Interview and Assessment Information – including any additional information you voluntarily provide to us during interviews, assessments, or other interactions throughout the recruitment process.
In certain circumstances, and where permitted or required by law, we may also process special categories of Personal Data, which could include:
●Information about race or ethnic origin;
●Health-related information, including disabilities or medical conditions relevant to the role;
●Details of dependents, such as name, date of birth, and school level;
●Criminal background information, including convictions or legal proceedings.
HOW WE COLLECT YOUR PERSONAL DATA
We may collect your Personal Data from the following sources:
● Directly from you, through the application process or other communications;
● Through recruitment agencies or headhunters engaged by you or by ESAG;
● From third parties such as current or former employers, background screening providers, or reference contacts.
Please note that if you fail to provide certain information when requested, we may be unable to proceed with your application or fulfill our legal obligations.
HOW WE USE YOUR PERSONAL DATA
ESAG collects, processes, and uses candidate Personal Data for legitimate business purposes related to establishing, managing, or potentially terminating an employment relationship. Your data is used solely for recruitment and related operational activities in accordance with applicable laws. Specifically, we use your Personal Data to:
● Facilitate the creation and management of your candidate profile in our recruitment system.
● Administer your job application, including screening, interviewing, and assessing your qualifications, experience, and suitability for the role.
● Verify the accuracy of information provided, including employment history, qualifications, and references.
● Communicate with you throughout the recruitment process, including interview scheduling, feedback, and final decisions.
● Determine your eligibility for employment, including legal right to work and, where relevant, conduct background or legal checks.
● Comply with applicable labor, employment, immigration, and equal opportunity laws and regulations.
● Assess your profile against current or future job openings and notify you of potential opportunities that may match your skills and experience.
● Support potential employment-related decisions, including preparation for onboarding and contractual arrangements.
● Establish employment benefits based on dependent details, if applicable.
● Improve and report on recruitment processes and outcomes to support operational and strategic HR decision-making.
LEGAL BASES FOR PROCESSING
We rely on the following lawful bases for processing your Personal Data:
●Legitimate interests – to assess your application and make informed hiring decisions, where such interests are not overridden by your privacy rights.
●Consent – where required by law and where legitimate interests do not apply, we will obtain your consent to collect and process your Personal Data.
●Legal obligations – to comply with statutory or regulatory requirements applicable to employment and recruitment.
●Contractual necessity – to take steps prior to entering into an employment or engagement contract with you.
WHO HAS ACCESS TO YOUR DATA WITHIN OUR ORGANIZATION
Within ESAG, access to candidate Personal Data is strictly limited to personnel who require it in order to carry out recruitment-related responsibilities. This includes members of the Human Resources (HR) team, recruitment personnel, hiring managers, and relevant business unit leaders involved in the hiring process.
Access is granted strictly on a need-to-know basis, and only to the extent necessary for assessing your application, communicating with you during the recruitment process, making hiring decisions, or fulfilling legal or regulatory obligations. All personnel are subject to confidentiality obligations and are trained on the importance of protecting Personal Data.
WHO DO WE SHARE YOUR DATA WITH OUTSIDE OUR ORGANIZATION AND WHY
Our Affiliates:
We may share your Personal Data with other entities within the ESAG group of companies where necessary for recruitment purposes, including assessing your application for roles in different entities or locations, and in accordance with applicable data protection laws.
Government Authorities:
Where required by law, we may disclose your Personal Data, including special category data where applicable, to regulatory bodies, law enforcement, or other government agencies in connection with visa processing, legal claims, audits, or compliance with employment regulations.
Service Providers:
We may engage third-party service providers—such as recruitment agencies, human capital management providers, background screening companies, and IT service vendors—to assist us in managing the recruitment process. These service providers act on our behalf and are contractually obligated to use your data solely in accordance with our instructions and applicable data protection requirements.
As part of our recruitment operations, we use an Applicant Tracking System (ATS) provided by Talentera, operated by Bayt.com, to manage candidate applications, profiles, and communications throughout the recruitment lifecycle. Talentera processes candidate Personal Data on our behalf and in accordance with its own privacy practices.
From time to time, we may engage other trusted service providers for the same purposes. For more information on how Talentera (Bayt.com) handles Personal Data, please refer to their Privacy Policy.
Other Third Parties:
In limited circumstances, we may share your Personal Data with other parties if required to comply with a legal obligation, enforce our rights, or protect the rights, property, or safety of our candidates or the organization. Any such disclosure will be limited to what is strictly necessary and done in compliance with applicable law.
International Transfers:
If your Personal Data is transferred to countries outside your home jurisdiction, we will implement appropriate safeguards, such as entering into Standard Contractual Clauses or other approved transfer mechanisms, and conducting privacy impact assessments, where required by law.
WHY AND FOR HOW LONG DO WE STORE INFORMATION WE COLLECT FROM YOU
ESAG collects and retains the minimum amount of Personal Data necessary to fulfill the recruitment purposes outlined in this Notice. We store candidate Personal Data to:
●Assess your qualifications and suitability for roles within ESAG;
●Communicate with you during the recruitment process;
●Comply with applicable labor, immigration, and employment laws and regulations;
●Respond to legal claims or audits;
●Maintain a record of the recruitment process in accordance with our internal governance requirements;
●Consider you for future opportunities within ESAG, where appropriate.
Candidate Personal Data may be stored and processed in jurisdictions other than the one in which you reside. However, ESAG ensures that appropriate safeguards are in place to protect your data regardless of location, in accordance with applicable privacy laws and internal data governance policies.
We retain your Personal Data for as long as is reasonably necessary to fulfill the recruitment purposes, or as required by applicable law. If there is no activity in relation to your profile or applications for a period of 5 years, we may delete, anonymize, or otherwise render your data inactive in our systems, unless a longer retention period is required by law or needed for legitimate business purposes.
If you wish for us to no longer retain or process your Personal Data, you may contact us using the details provided in the “Contact Us” section of this Notice.
SECURITY
We are committed to protecting your Personal Data and maintaining its confidentiality, integrity, and availability. ESAG implements a range of physical, technical, and organizational safeguards to secure your Personal Data from unauthorized access, misuse, loss, or unlawful disclosure.
As part of our recruitment operations, we use an Applicant Tracking System (ATS) provided by Talentera, operated by Bayt.com, to manage candidate applications, profiles, and communications throughout the recruitment lifecycle. Talentera processes candidate Personal Data on our behalf and in accordance with its own privacy practices. For more information on security measures implemented by Talentera (Bayt.com), please refer to their Privacy Policy.
In addition to the measures taken by our service provider, ESAG implemented following safeguards:
●Restricting access to Personal Data to authorized employees, contractors, and service providers on a strict need-to-know basis;
●Applying physical, electronic, and procedural controls during the collection, storage, processing, and disclosure of Personal Data;
●Encrypting Personal Data in applicable systems and tools that store Sensitive Personal Data;
●Using security tools such as firewalls, antivirus software, and intrusion detection systems;
●Conducting regular security testing, including vulnerability assessments and penetration testing;
●Maintaining internal policies and standards that govern employee access and responsibilities concerning Personal Data;
●Requiring all employees and third parties processing Personal Data on our behalf to comply with confidentiality obligations and follow ESAG’s data protection protocols.
While we take reasonable steps to secure your Personal Data, no system is completely immune to risks. You also play a critical role in keeping your data safe. We urge you to take appropriate steps to protect your devices, login credentials, and other personal information, especially when accessing our Website from public or unsecured networks.
YOUR RIGHTS
Under certain circumstances and under certain applicable data protection laws, you may have the right to
Right to access. This right allows you to obtain a copy of your Personal Data, as well as other supplementary information.
Right to restrict processing. You have the right to restrict the processing of your Personal Data in certain circumstances.
Right to rectification. You have the right to have any incomplete or inaccurate Personal Data we hold about you corrected.
Right to Processing and Automated Processing. You have the right to object to decisions issued with respect to automated Processing that have legal consequences or seriously affect you, including profiling.
Right to object to processing. The right to object allows you to stop or prevent us from processing your Personal Data. This right exists where there are no legitimate reasons for us to continue the processing of your Personal Data. You also have the right to object where we are processing your Personal Data for direct marketing purposes.
Right to Request Personal Data Transfer. You have the right to obtain your Personal Data provided to us for Processing in a structured and machine-readable manner, so long as the Processing is based on your consent or is necessary for the fulfillment of a contractual obligation and is made by automated means. You have the right to request the transfer of your Personal Data to another controller whenever this is technically feasible.
Right to erasure. You have the right to ask us to delete or remove Personal Data when the Personal Data is no longer necessary for the purpose for which we originally collected or processed.
To exercise your right, please visit our privacy webform and select Create Request.
LINKS TO OTHER WEBSITES
Our Website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every website you visit.
Third parties are under no obligation to comply with our Policy with respect to Personal Data that you provide directly to those third parties or that those third parties collect for themselves. We do not control the third-party websites that may be accessible through our Website. Thus, this Policy does not apply to any information you provide to third-party websites or gathered by the third parties that operate them.
CHANGES TO THIS POLICY
We may update our Policy from time to time. We will notify you of any changes by posting the new Policy on the Website. If we make any material change/s to the Policy we will notify you via email, through a notification posted on ESAG Services, or as required by applicable law. You can see the latest version of the Policy by checking the date at the bottom of the Website. You are advised to review this Policy periodically for any changes. Changes to this Privacy Policy are effective from when they are posted on the Website.
CONTACT US
If you have any questions about this Policy, you can contact us at privacy@algurg.ae