GDPR Compliance Policy

SCRR Asia Man Power S.R.L (“we,” “our,” or “us”) is committed to ensuring the privacy and protection of personal data in compliance with the General Data Protection Regulation (GDPR). This GDPR Compliance Policy explains how we handle and process personal data, ensuring transparency, accountability, and security.

1. Purpose of Data Processing We process personal data strictly for legitimate business purposes, including:

• Providing recruitment and employment services.

• Verifying candidate qualifications and legal eligibility.

• Facilitating communication with clients and candidates.

• Complying with legal and contractual obligations.

2. Legal Basis for Data Processing We process personal data based on the following legal grounds:

• Consent: When individuals provide explicit consent for the processing of their data.

• Contractual Obligation: To fulfill a contract or take steps prior to entering into a contract.

• Legal Obligation: To comply with laws and regulations.

• Legitimate Interest: To support the operation of our recruitment business and improve our services,

  provided such interests do not override individual rights.

3. Data Subject Rights Under GDPR, you have the following rights regarding your data:

1. Right to Access: Obtain confirmation whether your data is being processed and access your data.

2. Right to Rectification: Request correction of inaccurate or incomplete personal data.

3. Right to Erasure ("Right to Be Forgotten"): Request deletion of personal data, subject to legal or contractual obligations.

4. Right to Restriction of Processing: Limit the processing of your data in certain circumstances.

5. Right to Data Portability: You can receive your data in a structured, commonly used format and transmit it to another controller.

6. Right to Object: Object to processing your data based on legitimate interests, direct marketing, or automated decision-making.

7. Right to Withdraw Consent: Withdraw consent for processing your data at any time.

To exercise these rights, contact us at info@scrrasiamanpower.com.

4. Data Security We implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of data. These include:

• Encryption of sensitive data.

• Secure storage and restricted access to personal data.

• Regular monitoring and auditing of data processing activities.

• Staff training on GDPR compliance and data protection best practices.

5. Data Sharing and Transfers

• Within the EU/EEA: Personal data will only be shared with third parties within the EU/EEA that comply with GDPR.

• Outside the EU/EEA: If personal data is transferred outside the EU/EEA, appropriate safeguards (e.g., Standard Contractual Clauses) will be in place to protect the data.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once data is no longer needed, it is securely deleted or anonymized.

7. Breach Notification

In the event of a data breach, we will notify the relevant supervisory authority within 72 hours, as required by GDPR. If the breach poses a high risk to your rights and freedoms, we will also inform you promptly.

8. Data Protection Officer (DPO) We have appointed a Data Protection Officer to oversee GDPR compliance and address data protection concerns.

You may contact our DPO at:

Email: info@scrrasiamanpower.com

Phone: +40 750 707 422