Introduction
This Recruitment Privacy Notice explains the type of information we process, why we are processing it and how that processing may affect you.
What do we mean by "personal data" and "processing"?
"Personal data" is information relating to you (or from which you may be identified) which is processed by automatic means, or which is (or is intended to be) part of a structured manual filing system. It includes not only facts about you, but also intentions and opinions about you.
"Processing" means doing anything with the data. For example, it includes collecting it, holding it, using it, disclosing it and deleting it.
Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health, sexual orientation, sex life, trade union membership and genetic and biometric data are subject to special protection and considered by privacy law applicable to the EGX Securities Ltd group to be "sensitive personal data".
Your Personal Data
We process your data for the purposes of our recruitment practices. Some of the personal data that we process about you comes from you. For example, when you tell us your contact details or participate in our applicant assessment during our recruitment process where we may collect personal data about you and generate inferences from that information regarding specific skills or abilities (the "Task-Based Assessment"). Other personal data about you is generated from references and third-party companies such as recruitment agencies. Your personal data will be seen internally by managers, administrators and HR.
Assessment Data
We provide a Task-Based Assessment through our recruitment process to assess and screen candidate abilities. Personal data collected through the Task-Based Assessment includes:
- • Contact identifiers, such as your name, physical address, email address, and phone number.
- • Account information including information regarding your candidate profile information. This may include information you choose to disclose regarding an existing disability to ensure you receive appropriate adjustments in the Task-Based Assessment. Disclosure of disability is optional for the Task-Based Assessment.
The Task-Based Assessment will also include games and activities designed to evaluate specific personality and cognitive traits including memory, risk tolerance, learning ability, impulsivity, pattern recognition, focus, problem solving abilities, decision making skills, teamwork, cognitive processing, drive, emotional intelligence, information processing, and numerical reasoning. This information is collected and processed by our service provider(s).
We will only use the data collected through the Task-Based Assessment, and any related analysis, for recruitment purposes including to contribute to hiring decisions.
Retention & International Transfers
How long do we keep your personal data?
We retain each category of personal data in accordance with our records retention policies for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. If you are successful in your application your data will be kept on your personnel file. If you are unsuccessful, your data will normally be destroyed twenty-four months after you have been informed that you were unsuccessful.
International Transfers of personal data
We may transfer your personal data throughout the world to members of our group and other processors who provide us services in connection with the recruitment process. This may involve service providers and members of the EGX Securities Ltd group situated in the UK, the Netherlands, the USA, Hong Kong, Singapore and Australia. Where necessary such transfers are covered by an intra-group transfer agreement.
Contact details
In processing your personal data, we act as a data controller. Our contact details are: info@egxltd.com
Legal Grounds for Processing
In certain jurisdictions, like the EEA, there are grounds on which we must rely when processing your personal data. We rely on the following key legal grounds:
Contract
Processing necessary for the performance of a contract with you or to take steps at your request to enter a contract (e.g. carrying out recruitment duties).
Legal Obligation
Processing necessary to comply with legal/regulatory obligations (e.g. ensuring non-discrimination, verifying right to work permits).
Legitimate Interests
Processing necessary for our or a third party's legitimate business interests, provided they do not override your own rights and freedoms.
Consent
In specific cases where you provide explicit consent (e.g. voluntary equal opportunities demographic details or disability status for adjustments).
Processing Sensitive Personal Data
If we process sensitive personal data about you, we make sure that one or more specific legal exceptions apply under the law:
- • Obligations and rights in relation to employment.
- • Data that you have explicitly made public.
- • Necessary to establish, exercise, or defend legal claims.
- • Equality and diversity purposes to the extent permitted by law.
Examples of Data & Purpose
| Category | Examples of Data | EEA Legal Grounds |
|---|---|---|
| Recruitment | CVs, screening checks, sound recordings, NI/social security number, work history, background checks. | Contract, Legal obligation, Legitimate interests |
| Contacting You | Address, phone number, emergency contacts, next of kin. | Contract, Legitimate interests |
| Security | CCTV images, building access control logs. | Legitimate interests |
| Diversity Monitoring | Racial/ethnic origin, gender, sexual orientation, religion, disability. | Legal obligation, Legitimate interests, Consent |
California – Notice at Collection
For residents of California, you have the right to receive notice of our data practices in accordance with the California Consumer Privacy Act as amended ("CCPA").
Categories of Personal Data Collected
- Identifiers (Name, email, IP address, etc.)
- Internet or electronic network activity
- Non-precise geolocation data
- Professional or employment-related history
- Education history
- Content of communications
- Sensitive identifiers (SSN, Driver's License, Passport)
- Health and protected class details
We do not "sell" or "share" your personal data as defined by the CCPA. We collect, use, and disclose sensitive personal data only for permissible CCPA business purposes.
Regulators & Complaints
If you have complaints relating to our processing of your personal data, you should raise these with HR in the first instance, or email our privacy team at info@egxltd.com.
Statutory Regulators
This notice does not form part of any contractual relationship between the Company and a job applicant. This notice can be changed at any time.