The Charter of Fundamental Rights of the European Union (EU) provides that personal data must be processed fairly for specified purposes and on the basis of the consent of the person concerned. Personal data is defined to mean any information relating to an identified or identifiable natural person. The General Data Protection Regulation 2016/679 (“GDPR”) ensures protection of personal data.
The GDPR requires that data controllers like the Prevue Customer who has invited you to take the Prevue Assessments (“Customer”) must inform data subjects like you about a number of matters relating to the controller and the use of your personal data. Prevue HR Systems Inc. provides its Customers with psychometric assessment and reporting services (the “Services”) and is defined as a data processor under the GDPR. In the course of providing the Services Prevue receives personal data of data subjects from the Customer and in some cases collects Personal Information directly from data subjects.
To support and assist our Customers in fulfilling their obligations under the GDPR and to assure you are informed of your rights under the GDPR, we have outlined the information that is required to be provided to data subjects prior to requesting their consent to the use and processing of their personal data. Any requests you wish to submit regarding the exercise of your data subject rights under the GDPR should be submitted to the Customer. However, if you do not know the name of the Customer who requested that you complete the Prevue Assessments, you may submit the request to us and we will arrange to deliver it to the Customer.
Rectification: If you discover the personal data that either Prevue or the Customer is holding is inaccurate or incomplete you can submit a request for rectification of the errors or omissions.
Erasure of Personal Data: Customers will generally only keep personal data collected through Prevue websites during the period that data subjects are being considered for employment and during the period of their employment with the Customer. You can submit a request for erasure of your personal data if you feel the Customer no longer needs the data for the purpose for which is was collected or where you have sent notice to Customer that you have withdrawn your consent to their use of your Personal Data.
Notice of Data Breach: Should there be a data breach incident at the Prevue websites that affects your personal data and that data breach is likely to result in a high risk to your rights, the Customer will inform you about the breach.
Automated Decision Making: Automated decision making algorithms are not applied to your personal data and are not utilized by Prevue.
Withdraw Consent: You have a right to withdraw the consent to the use of your personal data that you will be asked to provide prior to commencing the Assessments that a Customer has asked you to complete.