GDPR - Questionnaire for HR
01. Do you have processes in place for recruitment (in particular)?
- the recorded purposes of the processing
- legal basis set
- processing of data after receipt
- retention and/or deletion of data for unsuccessful applicants
02. You inform job applicants about the processing of personal data within the meaning of Art. 13 GDPR Regulations?
- are you familiar?
03. You inform employees (and/or their family members) about the processing of personal data within the meaning of Art. 13 / Art. 14 Regulations?
- are you familiar?
04. Do you have provisions on data protection in your employment contract?
- yes, the employee agrees to the processing of personal data
- Yes, the employee acknowledges that we process his/her personal data in the performance of legal/contractual obligations
- No, we have no provisions
05. Do you give instructions to employees who process personal data (authorised persons) on the processing of personal data (authorization / instruction)?
- yes, the employee is authorised in the employment contract
- yes, the employee is authorised by a separate authorisation
- No, the employee is not in charge
06. Do you only process the personal data of employees that you strictly need for the stated purposes of processing?
- have you defined what is part of the personal file?
- have you defined what the necessary data is?
- Do you have defined retention periods for individual personal data?
- delete personal data after the end of the employment relationship, the processing of which is no longer necessary?
07. Do you have processes and procedures in place for the protection of personal data?
- handling requests from data subjects
- notification obligations - security incident reporting
- safety measures by default and by design
08. Do you have identified suppliers as intermediaries?
- do you have contracts of entrustment with the processing of personal data with these suppliers?
- do you have a system in place to control intermediaries?
- do you carry out checks on the processing of personal data by processors?
09. Do you process special categories of personal data, monitor premises with CCTV or process photographs?
- we process special categories of personal data and the processing is sufficiently secure
- we monitor the premises without monitoring the employees and the processing is treated
- we process photographs and we have photo processing treated
10. Do you process personal data via website and/or business profiles on social networks?
- we run a website where job seekers can write to us
- we publish photographs of data subjects (employees, customers) on the website
- we publish photographs of the persons concerned (employees, customers) on social networks
We process your personal data in order to send you the results of the questionnaire. More info here.