In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter: GDPR), we inform you of the following:
1. Data Controller
The controller of your personal data is RSD Services Ltd, registered at Troodous 4, Office No. 4, 7100 Aradippou Industrial Area, Cyprus, registered in the Companies House of the Republic of Cyprus under company number HE416463.
2. Contact Details
You may contact the Data Controller in all matters related to the processing of your personal data by sending an e-mail to: [email protected]
3. Purposes and Legal Bases for Processing
Your personal data will be processed for the following purposes:
- Recruitment for the position indicated in your application — on the basis of Art. 6(1)(b) GDPR (processing necessary to take steps at your request prior to entering into a contract) and Art. 6(1)(a) GDPR (your consent), in the scope of: name, surname, contact details, education, professional qualifications, and employment history.
- Data included voluntarily in your CV beyond the above scope — on the basis of Art. 6(1)(a) GDPR (your consent).
- Establishment, exercise, or defence of legal claims connected with the recruitment process — on the basis of Art. 6(1)(f) GDPR (legitimate interest of the Controller).
4. Retention Period
Your personal data will be stored for a period of 12 months from the date of receiving your application. If you provide separate consent to be considered for future recruitment processes, your data will be stored for a period of 24 months from the date of your application.
5. Recipients of Personal Data
Your personal data may be disclosed to the following categories of recipients: providers of IT systems, recruitment and HR tools, and communication or cloud platforms acting as processors on behalf of the Controller under data processing agreements.
Your personal data will not be transferred to any third country outside the European Economic Area.
6. Your Rights
You have the right to:
- access your personal data and obtain a copy thereof;
- rectify inaccurate or incomplete personal data;
- erasure of personal data (“right to be forgotten”);
- restriction of processing;
- data portability;
- object to processing based on legitimate interests (Art. 6(1)(f) GDPR);
- withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please contact us at: [email protected]
7. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. The lead supervisory authority for the Controller is the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy). If you are located in another EU/EEA member state, you may also lodge a complaint with the supervisory authority competent for your country of residence.
8. Voluntary Provision of Data
Providing the personal data specified in Section 3 (first indent) is voluntary, but necessary to participate in the recruitment process. Providing data beyond that scope is entirely optional and will not affect your ability to participate.
9. Automated Decision-Making
Your personal data will not be subject to automated decision-making, including profiling, that produces legal or similarly significant effects.
Last updated: April 2026
