Recruitment Privacy Policy for Provident in Europe
Date of publication: 07-29-2025
We at Provident in Europe manage our employer branding and recruitment process through our career site (the “Career Site”), and by using a related applicant tracking system powered by Teamtailor.
This Privacy Policy also serves as our Privacy Notice to job applicants, candidates and referees and explains how we collect, use, and protect your personal data in connection with our recruitment activities across Europe.
Provident entity in Europe that acts as data controller (hereinafter referred to as “Provident”, “we”, “us”, etc.) is the company that originally collects information from or about you for recruitment purposes. This is typically the company you contact or to submit your information to in connection with a job opportunity. Depending on your location and interaction, the following Provident companies may act as data controllers:
In Poland à Provident Polska SA: ul. Inflancka 4A Warsaw, 00-189 Poland
In Hungary à Provident Pénzügyi Zrt: HU-1095 Budapest, Lechner Ödön fasor 10/B, Hungary
In Romania à Provident Financial Romania IFN SA: Calea Serban Voda nr. 133, Central Business Park, 1st floor, Building D-E, District 4, Bucharest, Romania
In Czech Republic à Provident Financial SRO: Olbrachtova 2006/9, Postal Code 140 00, Prague 4, Czech Republic
In the United Kingdom à International Personal Finance plc: 26 Whitehall Road, Leeds, LS12 1BE
More information and contact details for Provident in Europe group companies can be found here.
It is important that the persons using the Career Site ("Users”, “Visitor”, "you") feel safe with, and are informed about, how we handle User's personal data in the recruitment process. We strive to maintain the highest possible standard regarding the protection of personal data. We process, manage, use, and protect User's Personal Data in accordance with applicable legislation and this Privacy Policy (“Privacy Policy” or “Policy").
In this Privacy Policy, we explain how we process your personal data if:
- You visit our Career Site (you being a “Visitor” or a “User”)
- You connect with us via our Career Site, to create an account and a profile with us and receive information about current or future vacancies with us (you being a “Connecting Candidate”)
- You apply for a position with us, via our Career Site or a third party service (you being an ”Applying Candidate”)
- We collect information about you from other parties, sites and services, since we believe your profile is of interest for our current or future vacancies (you being a “Sourced Candidate”)
- We receive information about you from our employees or partners, since they believe your profile is of interest for our current or future vacancies (you being a “Referred Candidate”)
- We receive information about you from a Candidate, who lists you as their reference (you being a “Reference”).
This Privacy Policy also describes what rights you have when we process your personal data, and how you can exercise these rights.
When we use the term “Candidate” in this Privacy Policy, we are referring to each of Connecting Candidates; Applying Candidates; Sourced Candidates; and Referred Candidates, unless it’s stated otherwise.
1. About processing of personal data
Personal data is any information that can be used to identify you. Only data that is relevant for the recruitment process is collected and processed.
We are the data controller when we process your personal data as described in this Privacy Policy. Your personal data is processed with the purpose of managing and facilitating recruitment of employees to our business.
2. What personal data do we process about you?
To enable you to use the Career Site, we process the following categories and other categories of your personal data you have provided to us:
Information you give us - you submit data to us in an application through the Service or use the Service to connect with our staff either personally or by using a third-party source such as Facebook or LinkedIn. Also, if you submit data on other forms when communicating with us by phone, e-mail, chat (provided through the website that uses the Services) or another communication channel and such data is of relevance to the application procedure.
- Personal details – such as name, surname, personal identification number, photo.
- Contact information – such as e-mail, telephone number, address, language of communication.
- Document data – such as data regarding identification of the data subject.
- Data about professional life – such as education, professional career and duration, job title, licenses, training certificates.
- Data from interviews, assessments and other information from the recruitment process - such as notes from interviews with you, assessments and tests made, salary requirements
- Information in your application - such as your CV, cover letter, work samples, references, letters of recommendation and education.
- Information in your public profile - meaning the information we collect about you from public sources related to your professional experience, such as LinkedIn or the website of your current employer.
- Information provided by references - meaning the information we receive from our employees or partners who refer you to us, or by the persons you have listed as your references.
- Data about relationships with other legal entities as relevant.
- Financial data – such as offered salary, salary expectation, etc.
- Data about trustworthiness, such as data about regarding possible conflicts of interest, incl. data about Visitor’s business activities, data related to anti-money laundering, counter terrorist financing or financial sanctions or organized crime, damage caused to Provident or any third party.
- Demographic data such as country of residence, citizenship.
- Data about habits, preferences and satisfaction, such as User satisfaction, psychometric test.
- Sensitive data such as special categories of personal data, for example, data concerning health, if the case.
- Communications and technical data - we will collect and store your communication with us, including the information you provided in the communication. This may include technical data such as information about your use of the Career site, the URLs you visit with us or the emails, visual images, video and/or audio recordings, messages on social media, the information you add to your account with us, surveys, etc.
3. Where do we receive your personal data from?
All individuals
- From the Career Site. If you visit our Career Site, we collect communication, technical data and statistical information about how you use the Career Site, and information from your device.
- Directly from you. Most of the information we process about you, we receive directly from you, for example when you apply for a position with us or connect with us. You can always choose not to provide us with certain information. However, we automatically collect certain data when you interact with us as some personal data is necessary in order for us to process your application or provide you the information you request to get from us.
References
- From the person for whom you are a reference. If a Candidate lists you as their reference, we will collect your contact details from the candidate to be able to contact you.
Candidates
- From third-party sources. We may collect personal data about you from third-party sources, such as Facebook or LinkedIn, the website of your current employer or public and private external registries (such as recruitment portals).
- From our references. We may receive information about you from our employees or partners (such as recruitment service providers), when they believe your profile is of interest for our current or future vacancies.
- From your references. If you provide us with references, we may collect information about you from them.
- Data we create ourselves or in cooperation with you. Information about your application and profile is usually created by us, or by us in cooperation with you, during the recruitment process. This may for example include notes from interviews with you, assessments and tests made.
4. For what purposes do we process your personal data?
We process your personal data for the following purposes, based on the legal grounds listed below:
- To make an account in the Career Site or to connect to Provident’s recruitment department or hiring team, adding personal data either from you personally or, if the case, by using third-party source such as Facebook or LinkedIn based on User’s consent.
- To assess your suitability for certain roles, which may involve psychometric testing or limited profiling. This processing supports fair and effective hiring, is not carried out solely by automated means entailing a broader recruitment process involving human review and interaction, and is made based on your consent for participating in recruiting process or our legitimate interest in ensuring fair and effective recruitment, depending on the nature of the role, the type of assessment, and applicable legal requirements in the relevant jurisdiction .
- To save your data and consider you for future job opportunities, based on your consent.
- To record interviews, when applicable and subject to your permission.
- To conclude an employment contract, based on the necessity to perform pre-contractual measures, and to comply with legal obligations applicable to certain roles or jurisdictions.
- To collect information about you and your professional background from public sources or employee referrals, where relevant for recruitment based on your consent.
- To contact your references and evaluate the information they provide about you based on our legitimate interest in verifying candidate qualifications.
- To contact you for feedback on the recruitment process, including surveys, based on our legitimate interest in improving our recruitment services or consent for more detailed surveys.
- To operate, maintain, and secure the Career Site, including collecting technical and usage data based on our legitimate interest in ensuring the functionality and security of our systems.
- To use cookies and similar technologies on the Career Site, as described in our Cookie Policy.
- To comply with legal obligations, such as employment laws, anti-money laundering rules, or data retention rules.
- To establish, exercise, or defend legal claims, protect and enforce your rights or manage complaints, if the case, based on our legitimate interest and legal obligations.
Your consent is voluntary and limited to specific purposes as defined in the consent. You can withdraw your consent at any time free of charge by changing your profile preferences in the Career Site account or by contacting us using the contact details listed under section 11. Using this right may however, mean that the User can not apply for a specific job or receive information about job opportunities or otherwise use some the Career Site functionalities. Please note the withdrawal of your consent does not affect the legality of processing your personal data prior to the withdrawal of your consent.
Personal data that is processed with the purpose of aggregated analysis or market research is always made unidentifiable
5. Whom do we share your personal data with?
Our service providers. We share your personal data with our suppliers who provide services and functionality in our employer branding and recruitment process. For example, this includes recruitment service providers, server and hosting companies, video processing companies, information-sourcing companies and analytical service companies, other contractors and sub-contractors , acting as our processors and sub-processors in accordance with our instructions, and the supplier of our Career Site and related applicant tracking system which is Teamtailor.
Our group companies. We may share your personal data with our group companies which Provident is part of, when they provide us services and functionality to our employer branding- and recruitment process, such as access to particular systems and software or for internal administrative purposes in accordance with legal data transfer requirements.
Companies providing cookies on the Career Site. If you consent to it, cookies are set by other companies than us, who will use the data collected by these cookies in accordance with their own privacy policy. You can find information about which cookies this applies to in our Cookie Policy.
To authorities and other public actors - when we are ordered to do so. We will share your personal data with authorities and other public actors when we have a legal obligation to do so.
To parties involved in legal proceedings. If needed to protect or defend our rights, we share your personal data with public authorities or with other parties involved in a potential or existing legal proceeding such as legal advisors.
Mergers and acquisitions etc. In connection with a potential merger, sale of company assets, financing, or acquisition of all or part of our business to another company, we may share your personal data to other parties involved in the process.
6. When do we transfer your personal data outside of the EU/EEA region, and how do we protect it then?
We always strive to process your personal data within the EU/EEA area.
The personal data collected through the Career Site is stored and processed inside the EU/EEA, or such third country that is considered by the European Commission to have an adequate level of protection, or processed by such suppliers or group companies in which Provident is a part of that have entered into such binding agreements that comply with the lawfulness of third country transfers (such as Privacy Shield should this be valid safeguard) or to other supplies where adequate safeguards are in place to protect the rights of the data subjects whose data is transferred. When your personal data is transferred outside the EU/EEA, we also implement appropriate technical and organizational safeguards, to protect the personal data.
If you want more information about the cases in which your personal data is transferred outside the EU/EEA you can contact us using the contact details in Section 11 below.
7. For how long do we keep your personal data?
We will store and process your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, taking into account the legal basis for each processing activity.
If you are applying for a specific job role, we will keep your data for the duration of the recruitment process (including application, evaluation, and selection), and for a limited period thereafter.
This post-recruitment retention is based on our legitimate interest to protect our legal rights, such as responding to potential complaints or claims regarding the recruitment process. Your personal data may be retained only for this limited purpose and for a typical period of up to 6 months after the recruitment process ends.
If you provide your consent to be contacted for future job opportunities, we may keep your personal data after the current recruitment process ends, for this purpose. We will retain your data for up to 1 (one) year, unless you withdraw your consent earlier. You can withdraw your consent at any time using the contact details provided below.
If you are hired, your data will be retained during your employment, for employment-related purposes which will be separately communicated.
In all cases, we limit the processing and retention of personal data to the minimum necessary and in line with applicable legal requirements.
References
We keep your personal data for as long as we keep the personal data of the Candidate for whom you acted as a reference. Your data will be used solely to verify the candidate’s qualifications and suitability for the role and will not be used for other purpose.
8. Security
We prioritize the personal data integrity and therefore we work actively so that the personal data of the Users are processed with utmost care. We take the measures that can be reasonably expected to the make sure that the personal data of Users and others are processed safely and in accordance with this Privacy Policy and the applicable legislation, including GDPR.
However, internet and mobile data transmissions are never entirely risk-free. We therefore encourage Users to take personal responsibility for safeguarding their own account credentials.
9. What rights do you have, and how can you exercise them?
To exercise any of your rights listed here, we suggest that you:
- Visit the Data & Privacy page on our Career Site, where we offer features to let you exercise your rights;
- Log in to your account with us, where you can use the settings in the account to exercise your rights; or
- Contact us directly at the contact details mentioned under section 11 below.
Please be informed that before exercising your rights, you must be identified to protect your personal data from fraudulent attempts.
Your requests will be generally handled within one month. In some cases, we may take up to 2 additional months, but you will always be notified of these cases.
Right to be informed
You have the right to be informed about how we process your personal data, the purposes of using, data categories and source, recipients and storage periods of your personal data and your rights.
We provide you with such information through this Privacy Policy, through updates on our Career Site, and by answering any questions you may have for us.
Right to access your personal data
You have the right to know if we process personal data about you, and to receive a copy of the data we process about you. You can also exercise access right under section “Data and Privacy”.
Right to portability
You can request a copy of the personal data relating to you that we process for the performance of a contract with you, or based on your consent, in a structured, commonly used, machine-readable format. If technically feasible, you also have the right to request that we transfer your data directly to another recipient.
Right to have your personal data deleted (“right to be forgotten”)
In some cases, you have the right to have us delete personal data about you. This is for example the case if it’s no longer necessary for us to process the data for the purpose for which we collected it; if you withdraw your consent; if you have objected to the processing and there are no legitimate, overriding justifications for the processing, the personal data have to be erased for compliance with a legal obligation or the processing is unlawful. If a basis does not exist, your data will not be erased nor processing restricted. You can also exercise erasure right under section “Data and Privacy”.
Right to object to processing your personal data
You have the right to object to processing of your personal data which is based on our legitimate interest, by referencing your personal circumstances. You also have a right to object to a decision based solely on automated processing of your personal data, including profiling.
Right to restrict processing.
If you believe that the personal data we process about you is inaccurate, that our processing is unlawful, or that we don’t need the information for a specific purpose, you have the right to request that we restrict processing of such personal data. That means your data will be stored, but not used for anything else.
Right to rectification
You have the right to request that we rectify inaccurate information about you, and that we complete information about you.
Right to withdraw your consent
When we process your personal data based on your consent, you have the right to withdraw that consent at any time. If you do so, we will stop processing your data for the purposes you’ve withdrawn your consent for. However, it doesn’t affect the lawfulness of processing that was based on your consent before it was withdrawn. You can contact us for this purpose or you can exercise this right in the Career Site as per available section “Data and Privacy”.
Right to raise a complaint
If you have complaints about our processing of your personal data, you can raise a complaint with the data protection authority or a competent court. You can find data protection authorities contact details here.
We encourage you to contact us first so we can attempt to resolve your concern.
If you are based in the UK, you can lodge a complaint with the Information Commissioner’s Office, here.
10. Do you use cookies?
When Users use the Career Site, information about the usage may be stored as cookies. Cookies are passive text files that are stored in the internet browser on the User’s device, such as computer, mobile phone or tablet, when using the Service. We use cookies to improve the User’s usage of the Service and to gather information about, for example, statistics about the usage of the Service. This is done to secure, maintain and improve the Service. The information that is collected through the cookies can in some instances be personal data and is, in such instances, regulated by our Cookie Policy.
Users can at any time disable the use of cookies by changing the local settings in their devices. Disabling of cookies can affect the experience on the Career Site for example disabling some functions in the site.
11. How can I contact Provident?
If you want to get in touch with us to exercise your rights, or if you have any questions, comments or concerns about how we handle your personal data, please contact us by post at the company address mentioned in the introductory part of this Privacy Policy or use our DPO contact details below:
United Kingdom: gdpo@ipfin.co.uk
Poland: IOD@provident.pl
Hungary: adatvedelem@provident.hu
Romania: datepersonale@provident.ro
Czech Republic: dpo@provident.cz
12. Updates to this Privacy Policy
We keep this Privacy Policy under review and may change it from time to time (mostly to comply with the law and data protection practices). A new version is considered communicated to the Users when the User has either received an email informing the User of the new version (using the e-mail stated by the User in connection to the use of the Service) or when the User is otherwise informed of the new Privacy Policy including through Career Site.
We encourage you to regularly check this page for any changes.
