1. Types of PII We Collect
We collect only the information necessary for recruitment, including:
-
Full name and contact details
-
Educational background and professional qualifications
-
Employment history
-
Identification documents when required for verification
-
Any other information you voluntarily provide in your resume
We do not collect sensitive personal data unless legally required or explicitly provided by you with consent.
2. Purpose of Processing
Your PII is processed exclusively for:
-
Evaluating your suitability for the position
-
Communicating with you during the selection process
-
Conducting background or reference checks (where applicable)
-
Maintaining records required for lawful employment considerations
Your data will not be used for any unrelated purposes without your explicit consent.
3. Lawful Basis for Processing
We process your PII based on:
-
Your consent to submit an application and provide information
-
YOTTABYTE’s legitimate interest in assessing and selecting qualified candidates
-
Legal obligations, where applicable (e.g., verification checks required by law)
4. Data Sharing
Your PII may be shared only with parties directly involved in the recruitment process, including:
-
Authorized recruitment partners and service providers
-
Internal HR, hiring managers, and relevant decision-makers
All third parties operate under a Data Protection Agreement (DPA) and are obligated to maintain confidentiality, implement appropriate security measures, and process your data solely for the specified recruitment purpose.
5. International Transfers (if applicable)
If PII is transferred outside your region or country, it will be protected using appropriate safeguards (e.g., contractual clauses, adequate protection assessments) in accordance with ISO 27701 controls.
6. Data Security
Your PII is protected using technical and organizational measures aligned with ISO 27001 and ISO 27701, including restricted access, encryption, secure storage, and monitoring to prevent unauthorized use or disclosure.
7. Data Retention
We retain your PII only for as long as necessary to complete the recruitment process, comply with legal requirements, or maintain a talent pool (only with your consent).
After the retention period expires, your data is securely deleted or anonymized.
8. Your Privacy Rights
You have the right to:
-
Request access to your personal data
-
Request corrections or updates
-
Request deletion of your data (“right to erasure”)
-
Withdraw consent at any time (without affecting prior lawful processing)
-
Restrict or object to certain types of processing
-
Request information about third-party data recipients
9. Contact Information
For privacy-related questions or to exercise your rights, please contact:
Data Protection Officer (DPO)
DPO@yottabyte.ae
.png)
