I'm a *** citizen filling out an online employment application with an international company, for a position in the ***. Their website says “We are processing your personal data according to Art. 6 (1) (a) GDPR and Art. 88 GDPR.” It’s the first time I’ve heard about this…
The data in this case would be my resume and possibly a cover letter as well as personal contact information such as address, phone number and e-mail. I searched the company I intend applying to and found out that they have been bought by a multinational company.
I put Art. 6 (1) (a) GDPR and Art. 88 GDPR in my web browser’s search box and was directed to the Advisera website. I read Art. 6 (1) (a) GDPR from your website, which, as I understand it, says the information I supply will be used regarding an employment contract, which sounds reasonable to me.
I read Art. 88 GDPR from your website and I think item 2 says they can share the information I supply across their enterprise with dignity, and transparency. I presume this is on a need-to-know basis similar to how personnel records would be handled here in the United States, am I right?
To do with an application for employment, are there any other parts of the GDPR that I should read? Their website did say “We are processing your personal data according to Art. 6 (1) (a) GDPR and Art. 88 GDPR.” Are there other Articles of the GDPR that I will be bound by?
Art. 88 Item 3 gives the date 25 May 2018, so am I reading the most up to date version of GPR?