Recruitment Privacy Notice
Last updated:
1. Who We Are & Our Commitment to Your Privacy
Fusion Integrated Solutions (“we”, “us”, or “our”) is the data controller responsible for the personal data you provide during the recruitment process. We are committed to protecting your privacy and handling your data in an ethical and transparent manner, in accordance with applicable data protection laws.
As a company operating in Qatar, our primary legal framework for data protection is Qatar Law No. 13 of 2016 on the Protection of Personal Data Privacy (the “PDPPL”). We also recognise the rights of individuals under other global regulations, such as the European Union’s General Data Protection Regulation (GDPR), if you are applying from that region.
| Detail | Information |
|---|---|
| Data Controller | Fusion Integrated Solutions, 6th Floor, Amara Building, Ibn Mahmoud Street, Doha, Qatar |
| Company Registration No. | 140534 |
| Data Protection Contact | privacy@fis-qa.com |
| Recruitment Contact | careers@fis-qa.com |
2. Personal Data We Collect
| Category | Examples |
|---|---|
| Identity & Contact Information | Full name, email address, telephone number, postal address |
| Professional Qualifications | CV/resume, cover letter, education history, professional certifications, work experience |
| Right-to-Work Information | Nationality, passport details, visa or work permit status (collected only where legally required by Qatar Labour Law) |
| Assessment Data | Interview notes, technical assessment results, references |
| Technical Data | IP address, browser type, and device information when you use our careers page (see our Cookie Policy) |
Sensitive Personal Data: The PDPPL places special protections on sensitive data (e.g., health, religious beliefs, criminal records). We will never ask for such data unless it is strictly required for the role and permitted by law, in which case we will obtain your separate, explicit consent.
3. How & Why We Process Your Data (Lawful Basis)
Under the PDPPL, our processing of your personal data is primarily based on your explicit consent, which you provide when you submit your application. In certain situations, we may also process your data where it is necessary to achieve a “Lawful Purpose” as defined in the PDPPL.
| Lawful Basis (under PDPPL) | When We Use It |
|---|---|
| Consent | This is our primary basis for collecting, reviewing, and storing your application data. You provide this consent when you agree to this notice and submit your application. |
| Necessary for a Contract | Processing data that is necessary to take steps at your request before entering into an employment contract (e.g., preparing an offer letter). |
| Compliance with a Legal Obligation | Processing data to comply with our legal duties under Qatar Labour Law, such as verifying your identity and right to work in Qatar. |
| Legitimate Interests of the Controller | In limited cases, such as for internal reporting or improving our recruitment process, where our interests do not override your fundamental rights to privacy. |
4. Who We Share Your Data With & Cross-Border Transfers
Access to your personal data is strictly limited to authorised personnel within Fusion Integrated Solutions who are involved in the recruitment process. To facilitate our recruitment activities, we use global cloud productivity services, including Microsoft 365. As a result, your personal data is shared with and processed by Microsoft, which acts as a Data Processor on our behalf.
Cross-Border Data Transfers (Use of Microsoft 365)
The use of Microsoft 365 for processing your application means that your personal data will be transferred and stored on servers that may be located outside of Qatar. This constitutes a data transfer under Qatar Law No. 13 of 2016 (the PDPPL).
We are providing this notice to be fully transparent about this transfer and to obtain your explicit, informed consent for it, which is a requirement under the PDPPL. We have taken the following steps to ensure your data remains protected:
- We have a legally binding Data Processing Addendum (DPA) with Microsoft, which includes their commitments to data privacy and security.
- Microsoft contractually commits to robust data protection standards, including the use of Standard Contractual Clauses (SCCs) for transfers of data from regions like the European Union, which provides a strong framework for protecting data globally.
Your Consent is Required: By submitting an application, you will be asked to explicitly consent to this cross-border transfer of your personal data to Microsoft's global infrastructure for the purpose of processing your application. If you do not consent, we will be unable to process your application through our standard systems.
5. How Long We Keep Your Data
| Scenario | Retention Period |
|---|---|
| Unsuccessful application | We retain your data for 6 months after the conclusion of the recruitment process, after which it is securely deleted. This allows us to manage our recruitment records and defend against potential legal claims. |
| Talent pool (with your explicit consent) | If you consent to join our talent pool, we retain your data for up to 12 months. We will contact you before this period expires to ask if you wish to renew your consent. |
| Successful application | Your recruitment data will be transferred to your employee file and retained in accordance with our Employee Privacy Notice and Qatar Labour Law. |
6. Your Rights Under the PDPPL
| Right | Description |
|---|---|
| Right to Withdraw Consent | You can withdraw your consent to processing at any time. |
| Right of Access | You can request a copy of the personal data we hold about you. |
| Right to Rectification | You can ask us to correct any inaccurate or incomplete data. |
| Right to Erasure | You can request that we delete your personal data. |
| Right to Object | You can object to processing that you believe harms you or is based on inaccurate data. |
For EU Applicants: If you are applying from the EU, you also have the Right to Restrict Processing and the Right to Data Portability under the GDPR. We will honour these rights upon request.
7. How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in line with the PDPPL. These measures include data encryption, access controls, and regular security assessments.
8. How to Make a Complaint
We are committed to resolving any concerns you may have. Please contact our Data Protection Manager at privacy@fis-qa.com in the first instance.
If you are not satisfied with our response, you have the right to lodge a complaint with the competent authority in Qatar, the National Cyber Security Agency (NCSA).
9. Changes to This Notice
We may update this Privacy Notice from time to time. Any changes will be posted on this page with an updated revision date.
