Legal basis for processing personal data

Answer:

If you refer to which legal basis you should use for processing personal data such as CV of candidates, the most suitable one would be a contractual obligation. In your specific case, the processing is necessary for the performance of a contract with the individual or in order to take steps at the request of the individual prior to entering into a labor agreement/contract. The same legal basis should be used for processing employees personal data after joining the company. For the background check prior to employment, you should use legitimate interest as the legal basis for processing.

If you want to find out more about the legal basis for processing personal data check out this article: Is consent needed? Six legal bases to process data according to GDPR (https://advisera.com/eugdpracademy/knowledgebase/is-consent-needed-six-legal-bases-to-process-data-according-to-gdpr/).