Privacy Notice for Potential Candidates

This Privacy Notice explains how Nuage Therapeutics, S.L. (“Nuage Tx”) processes the personal data of potential candidates who have applied to an open job posting or submitted a CV, cover letters, application forms and copies of training records/certification to us.

At Nuage Tx, we take great care in processing personal data in compliance with the EU General Data Protection Regulation (GDPR) and national data protection laws. We only collect and use the information necessary to achieve the purposes described below. Your data will be treated in accordance with this Privacy Notice at all times.

 

Who is responsible for processing the data?

The data controller is Nuage Tx, whose registered headquarters are located at Parc Científic de Barcelona, c/ Baldiri Reixac 10, 08028 Barcelona. For GDPR matters, Nuage Tx can be contacted at dataprotection@nuagetx.com

 

What categories of data do we process about you and why do we process them?

Nuage collects and processes the following categories of personal data:

  • Contact details, such as your name, email, telephone number, and address;
  • Professional details, such as your work history, job title, CV, professional qualifications, scientific activities (such as previous clinical trial experience, and participation in past research studies), publication of academic or scientific research and articles, and membership in associations and boards;
  • Information about your current level of remuneration, including benefit entitlements;
  • Proof of identify, e.g. driving license or passport; and/or
  • Right to work documentation, references and other information included in a CV or cover letter or as part of the application process.

 

Under what lawful basis do we process your data?

1. We process your personal data in relation to your application to work at Nuage Tx under our legitimate interests to recruit new employees and for the performance of a contract or in order to take steps prior to entering into a contract;

 

Who do we share your personal data with?

Nuage Tx may share your personal data with others, in connection with the purposes described in this notice. In particular, we may make your personal data available to:

  • Our trusted service providers, such as our HR system provider.
  • We require third parties to respect the security of your data and to treat it in accordance with data protection laws.
  • We may transfer your personal information outside the European Economic Area (“EEA”). There is an adequacy decision by the European Commission in respect of some countries outside the EU. This means that these countries to which we transfer your data are deemed to provide an adequate level of protection for your personal information. However, to ensure that your personal information does receive an adequate level of protection we have put in place adequate measures for data protection to ensure that your personal information is treated by those third parties outside the EEA in a way that is consistent with and which respects the EU laws on data protection.

 

What security measures does Nuage Tx take to protect your personal data?

Nuage Tx will take appropriate technical and organizational security measures to protect your personal data in compliance with applicable data protection and privacy laws, which includes protection against accidental or unlawful destruction, loss, alteration, unauthorized access to, or disclosure of your personal data.

When Nuage Tx contracts a vendor, that vendor will be carefully selected and required to use appropriate measures in accordance with applicable law to protect the confidentiality and security of personal data. That provider will only be permitted to process your data on the written instruction of Nuage.

 

How long do we keep your data?

Your personal data will be stored for no longer than required to fulfil the purpose(s) as described in this notice.

What are your rights and how can you exercise them?

Per GDPR, you have the following rights in relation to your personal data:

  • Right of access, which enables you to request to receive a copy of the personal information we hold about you;
  • Right to rectification, which enables you to request to correct any incomplete or inaccurate information we hold about you;
  • Right to restriction of processing, which allows you to request us to suspend the processing of personal information about you to the extent permitted by applicable laws; and
  • Right to erasure, which enables you to request us to delete or remove your personal information to the extent permitted by applicable laws;
  • Right to data portability, which enables you to receive the personal data that you have provided to us.

To exercise your rights, contact Nuage Tx at the contact details provided above (in the section entitled “who is responsible for processing the data?”).

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that your personal information is not disclosed to any person who has no right to receive it.

You also have the right to lodge a complaint with your national Supervisory Authority if you consider that your personal data has not been processed in accordance with the GDPR. A listing of all Supervisory Authorities can be found here: https://edpb.europa.eu/about-edpb/board/members_en