Global Data Protection Policy

For MKGlobalRail and Its Recruitment Services

1. Introduction

MKGlobalRail is committed to protecting the privacy and personal data of all individuals who interact with our services, including job seekers, clients, and employees. This Global Data Protection Policy ensures compliance with applicable data protection laws and outlines how MKGlobalRail collects, uses, and safeguards personal data.

This policy is designed for global use and is fully compliant with international data protection regulations, including the EU General Data Protection Regulation (GDPR), UK Data Protection Act, and other relevant laws worldwide.

2. Scope

This policy applies to:

• All personal data collected, processed, and stored by MKGlobalRail in the course of its recruitment activities.
• Job seekers, candidates, clients, partners, and employees whose data we collect and process.
• All MKGlobalRail offices, agents, and representatives operating globally.

3. Types of Personal Data Collected

To deliver our recruitment services, MKGlobalRail may collect and process the following types of personal data:

• Contact Information: Name, email address, phone number, physical address.
• Professional Information: CVs, employment history, qualifications, references, certifications, and skills.
• Job Preferences: Desired roles, locations, salary expectations, and availability.
• Identification Data: Passport details, work permits, or other legal documentation necessary for employment eligibility.
• Other Relevant Information: Any additional data provided by candidates or requested by employers to facilitate the recruitment process.

4. Purpose of Data Processing

MKGlobalRail collects and processes personal data solely for recruitment and employment purposes, including but not limited to:

1. Identifying suitable job opportunities for candidates.
2. Sharing candidate profiles with potential employers for consideration.
3. Verifying qualifications, references, and eligibility for employment.
4. Facilitating job placement and contractual arrangements.
5. Communicating with candidates and employers during the recruitment process.

MKGlobalRail ensures that all data is used only for lawful and legitimate purposes.

5. Legal Basis for Data Processing

MKGlobalRail processes personal data under the following legal bases:

• Consent: By submitting personal data to MKGlobalRail, individuals provide their explicit consent for the processing of their information for recruitment purposes.
• Contractual Obligation: Processing is necessary for the performance of a contract or pre-contractual arrangements (e.g., job placements).
• Legitimate Interests: MKGlobalRail may process data to pursue legitimate business interests, such as improving recruitment services, provided that such interests do not override individual rights.

6. Data Retention Policy

MKGlobalRail retains personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations.

• Candidate profiles and related data will be stored for up to 2 years unless otherwise requested by the individual.
• Data may be anonymized and retained for statistical or reporting purposes without identifying individuals.

7. Data Sharing and Transfers

MKGlobalRail may share personal data with:

• Potential employers as part of the recruitment process.
• Third-party service providers (e.g., background check agencies) for necessary services.
• MKGlobalRail offices and agents in other countries, subject to international data transfer regulations.

Cross-Border Transfers: For data transfers outside the European Economic Area (EEA) or other jurisdictions with strict data protection laws, MKGlobalRail ensures that appropriate safeguards (e.g., Standard Contractual Clauses) are in place to protect personal data.

8. Data Security

MKGlobalRail implements robust security measures to protect personal data from unauthorized access, loss, alteration, or disclosure. These measures include:

• Encryption of data in transit and at rest.
• Regular security audits and risk assessments.
• Restricted access to personal data based on job roles.
• Secure storage of physical and electronic records.

9. Individual Rights

Under this policy, individuals have the following rights regarding their personal data:

• Right to Access: Request access to the personal data MKGlobalRail holds about them.
• Right to Rectification: Request corrections to inaccurate or incomplete data.
• Right to Erasure: Request deletion of their personal data (“right to be forgotten”).
• Right to Restrict Processing: Request limitations on how their data is processed.
• Right to Data Portability: Receive a copy of their data in a structured, machine-readable format.
• Right to Object: Object to data processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent for data processing at any time.

All requests can be submitted to MKGlobalRail at dataprotection@mkglobalrail.com and will be addressed within the applicable legal timeframes.

10. Consent for Data Use

By engaging with MKGlobalRail, candidates explicitly consent to the processing, storage, and transfer of their personal data as outlined in this policy. Candidates may withdraw consent at any time by contacting MKGlobalRail.

11. Policy Updates

MKGlobalRail reserves the right to update this policy to reflect changes in data protection laws or business practices. Updates will be communicated to relevant stakeholders.

12. Contact Information

For questions or concerns regarding this policy, please contact:
MKGlobalRail Data Protection Team
Email: dataprotection@mkglobalrail.com
Phone: [Insert Contact Number]

This policy ensures MKGlobalRail's commitment to transparency, compliance, and respect for individual privacy, providing a reliable framework for using personal data in global recruitment services.