Data Protection Notice - Job Applicant

Latest revision of 24 May 2024

MILESTONE ONE entity that directly communicates with you for hiring purposes (MILESTONE ONE, we), is a global site support organization that improve patients’ services and supports sites in their clinical trial delivery.

MILESTONE ONE will act as a data controller responsible to ensure that your personal data are processed in compliance with the applicable data protection laws and policies of MILESTONE ONE. This Data Protection Notice explains how MILESTONE ONE collects, uses, stores, and shares your personal data.

Which of your personal data milestone one needs to collect

When MILESTONE ONE is considering your candidacy, we will review the information you provided to us about yourself, as well as data generated during interviews with you, including questionnaires you completed. We may also collect information about you from other relevant legitimate sources like from the references you provided to us and publicly available media. We may cooperate with a recruitment agency; in which case they may obtain data directly from you and share with us. Normally, we will obtain and process the following data:

Identification and contact: name, surname, sex, postal address, phone number, email address, etc.
Qualification and professional experience: education, work experience, language skills, former employment, certificates, licenses, professional membership, awards, publications, information captured on the CV.

What is the purpose and the legal basis for processing your personal data

MILESTONE ONE will be processing your personal data for considering your candidacy in accordance with the applicable laws. In some countries a data controller should have a legal basis for personal data processing.

MILESTONE ONE relies on the following legal basis:

Making some pre-contractual steps, for example asking you to complete questionnaires, obtaining opinion of your former employer or from other contacts that you provided to us in the references.
Compliance with legal obligations for correcting or erasing your personal data if you submit a request to us to exercise your data protection rights; for disclosing data at the time of inspections to which we may be subject.
Legitimate interest in ensuring physical and digital security, for example we identify you and may log your activities in our computer systems if you are granted access to them, we register you in our visitor log if you come for an interview to a MILESTONE ONE office; we also have a legitimate interest in combining data about your application with data about other candidates to learn more about how MILESTONE ONE can improve staff recruitment.
Your consent to keep your data in our database so that MILESTONE ONE can consider you for other vacancies in case your application is not successful at the time you first applied, provided that you have given your consent.

Who will access your personal data

MILESTONE ONE is a global company, and MILESTONE ONE staff who will view your application may be in countries other than the country in which you applied. MILESTONE ONE will also involve external companies that help us managing the application process, including look for candidates, as well as performing background checks in compliance with the applicable law. MILESTONE ONE may also need to engage external service providers to help MILESTONE ONE analyzing and improving our internal processes.

When the parties with whom we need to share your data are located abroad, your personal data will need to be sent or/and accessed from abroad, including to/from countries where the data protection laws may be less strict as compared to the countries of the European Economic Area (EEA)/Switzerland/the UK. When MILESTONE ONE shares your data with such parties, we ensure that these MILESTONE ONE staff and external recipients, regardless of their location, commit to protect your personal information. You can ask MILESTONE ONE to tell you more about these safeguards, including a review of any applicable protective measures.

How long your personal data will be kept

If MILESTONE ONE engages you, we will keep your personal data as a member of our personnel. If we do not, we shall retain your personal data as the applicable law requires and then delete the data.

How to exercise your rights regarding your personal data

You can request access to your personal data, ask to correct and erase your data. You can also request that we stop processing your personal data or object to some data processing that we described in this Notice. In case we process your personal data based on your consent, as explained above, you can withdraw your consent and claim your right to data portability. We will consider all such requests in accordance with the applicable laws. You may ask for more information, request execution of your rights and send any other enquiries at privacy@milestoneone.com.

If you are based in the EU and UK, you have the right to lodge a complaint to the competent supervisory authority. You may find a list of the EU national data protection authorities and their contact details at https://edpb.europa.eu/about-edpb/board/members_en, and contact the UK Information Commissioner’s Office at https://ico.org.uk/make-a-complaint.

If you are a resident of California, please read PSI’s California-Specific Description of Privacy Rights.