PLAYNETIC CANDIDATE PRIVACY NOTICE

Last updated: [11.09.26]

This notice explains how Playnetic collects, uses, shares, and protects the personal data of individuals who apply for a role with us, wherever in our group you apply - including through our careers page, our applicant tracking system (Team Tailor), a recruiter, or a referral. It is written to comply with the EU General Data Protection Regulation (GDPR) and applicable local data protection law.

1. WHO IS RESPONSIBLE FOR YOUR DATA

The data controller for candidate data across Playnetic is Playnetic Ltd, with company number C106542, whose registered in Malta at Elite Business Center, Trejqa ta' Box Box, Msida, Malta. This applies regardless of which of our hubs - Malta, Cyprus, Georgia, Hungary, or Bulgaria - the role you're applying for is based in.

Contact us about your data at hr@playnetic.com

2. WHAT PERSONAL DATA WE COLLECT

- Identity and contact details: name, email, phone, address, LinkedIn/portfolio links.

- Application materials: CV/resume, cover letter, screening question answers.

- Career history: education, qualifications, work experience, skills.

- Recruitment process data: interview notes and feedback, assessment results, scheduling details, correspondence with you.

- References, if you provide them or we contact them with your consent.

- Right-to-work/eligibility information, where required before or at hire.

- Equal opportunities information, only if you choose to provide it, used solely for anonymised diversity monitoring, never in individual hiring decisions.

We collect this directly from you, and sometimes from recruitment agencies, employee referrals, or your public professional profiles.

3. WHY WE PROCESS IT, AND OUR LEGAL BASIS

- Assessing your application and running our hiring process: steps taken at your request before a contract (Art. 6(1)(b)).

- Sourcing and evaluating candidates, keeping recruitment records: our legitimate interest in a fair, effective process (Art. 6(1)(f)).

- Right-to-work checks and other legal requirements: legal obligation (Art. 6(1)(c)).

- Keeping your details for future opportunities beyond our standard retention period: our legitimate interest in maintaining a pool of candidates for future roles, which you can object to at any time (Art. 6(1)(a)).

- Anonymised equal opportunities monitoring: your explicit consent (Art. 9(2)(a)).

- Defending or bringing legal claims: our legitimate interest (Art. 6(1)(f)).

Automated processing: We use Team Tailor, our applicant tracking system, which may include features that help filter, match, or rank applications. [To confirm with whoever administers our Team Tailor account: which of these features are switched on, so this section names them accurately.] Regardless of which tools assist our process, a Playnetic recruiter or hiring manager reviews and decides on every application - we do not make hiring decisions based solely on automated processing without human review.

4. WHO WE SHARE YOUR DATA WITH

- Team Tailor, which processes data on our behalf under a data processing agreement.

- Playnetic colleagues involved in hiring for the role, including hiring managers based in our other hubs (Cyprus, Georgia, Hungary, Bulgaria).

- Service providers and professional advisers who support our recruitment process under confidentiality and data protection terms.

- Regulators or authorities, where legally required.

We do not sell your data or share it for others' marketing.

5. INTERNATIONAL TRANSFERS

Our Georgia hub is outside the EU/EEA. Where your data is accessed by colleagues there, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect it to EU standards. Details are available on request.

6. HOW LONG WE KEEP YOUR DATA

If your application is unsuccessful, we keep your data for 6 months after the role closes, then delete or irreversibly anonymise it - unless you've consented to a longer talent-pool period, or we need to keep it longer to comply with the law or to handle a legal claim.

7. YOUR RIGHTS

You can ask to access, correct, delete, or restrict your data, request a copy in a portable format, and object to or withdraw consent for our processing of it, by emailing [insert privacy/HR contact email]. You can also complain to the supervisory authority in the country where you live or work, or to Malta's Information and Data Protection Commissioner, which supervises us:

Information and Data Protection Commissioner, Malta - idpc.org.mt

8. IS PROVIDING YOUR DATA MANDATORY?

Yes, to the extent needed for us to assess your application - without it, we may not be able to consider you. Optional information (like equal opportunities data) is always your choice and never affects your candidacy either way.

9. OPTING OUT OF FURTHER CONTACT

Reply "Do Not Contact Me" to any of our emails to stop us contacting you about future opportunities. We may still retain minimal records where legally required, as described in Section 6.

10. CHANGES TO THIS NOTICE

We may update this notice from time to time. Updates will be posted here with a revised "last updated" date.