Special Data Processing Information Sheet
Applicants
Information provided to job applicants, in compliance with Articles 12, 13 and 14 of the GDPR, within the selection and recruitment processes of the Borgstena Group.
This Special Sheet describes the processing of personal data of job applicants by the Borgstena Group within selection and recruitment processes, and complements the General Data Processing Information Sheet and the Data Processing Policy in Application Management.
1.Commitment to information and transparency
The Borgstena Group complies with the duty to inform applicants set out in Articles 12 to 14 of the GDPR, providing in this Sheet the information relating to the processing of personal data it collects within selection and recruitment processes.
2.Identification of the controller
| Company name | Dual Borgstena Textile Portugal, Unipessoal, Lda. |
|---|---|
| Identification number | 502355409 |
| Registered office | EN 234 — km 87.7 (Chão do Pisco), Apartado 35, 3521-909 Nelas |
| General telephone | (+351) 232 427 660 |
| General email | info@borgstena.com |
3.Data Protection Officer
For any matter relating to the processing of their personal data, applicants may contact the Borgstena Group's Data Protection Officer at dataprotection@borgstena.com.
4.Data subjects covered
This Sheet applies to applicants for employment with the Borgstena Group, namely those who have submitted a spontaneous application, applied to published opportunities, been identified in professional public sources or been referred by third parties.
5.Processing activities
| Purpose | Categories of data | Lawful basis | Recipients | Retention |
|---|---|---|---|---|
| Receipt and analysis of applications | Identification, contacts, academic background, professional experience, data contained in the CV or application form. | Pre-contractual steps at the applicant's request (Article 6(1)(b) of the GDPR); consent for spontaneous applications (Article 6(1)(a) of the GDPR). | Human resources management services of Borgstena. | For the period necessary to assess the application. |
| Interviews and technical assessment | Identification, contacts, interview records, results of tests and assessments. | Pre-contractual steps (Article 6(1)(b) of the GDPR). | Human resources management services; line managers of the position being recruited; assessment processors, where applicable. | For the period necessary to complete the selection process. |
| Selection decision and communication to the applicant | Identification, contacts, decision and reasoning. | Pre-contractual steps (Article 6(1)(b) of the GDPR); legitimate interest of human resources management (Article 6(1)(f) of the GDPR). | Human resources management services. | For the period necessary to conclude and archive the process. |
| Setting up and managing a recruitment reserve | Identification, contacts, education and professional experience, competency profile. | Applicant's consent (Article 6(1)(a) of the GDPR); legitimate interest of human resources management (Article 6(1)(f) of the GDPR). | Human resources management services. | Two years by default, without prejudice to the applicant's right to erasure. |
6.Categories of personal data processed
Borgstena processes the personal data strictly necessary to assess the application, namely the name, title, role or position, the company where the applicant works and the respective contacts, as well as the data contained in the curriculum vitae or in the application form. Special categories of data are not requested, save in the cases legally admissible and duly justified.
7.Source of the data
Applicants' personal data are collected directly from them, through the submission of the curriculum vitae or the completion of the application form. They may also be collected from publicly accessible sources of information, namely websites, professional networks or media, or on the basis of personal references. Where the data are not collected directly from the applicant, the information set out in Article 14 of the GDPR is provided.
8.Recipients and processors
Applicants' personal data are processed exclusively by Borgstena's human resources management services. Borgstena may engage processors for the operation of the information systems used in application management, concluding with each of them the contracts provided for in Article 28 of the GDPR. Outside these cases, applicants' personal data are not communicated to third parties, save where there is a legal obligation or express authorisation of the data subject.
9.International transfers
Whenever transfers take place to Borgstena Group companies established outside the European Economic Area, namely within Group-wide selection processes, the requirements of Chapter V of the GDPR are observed.
10.Automated decisions and profiling
Borgstena's selection and recruitment processes do not involve automated individual decisions likely to produce legal effects on the applicant, within the meaning of Article 22 of the GDPR. Should such decisions arise in practice, specific information is provided in accordance with the law.
11.Data retention
Applicants' personal data are retained for the period necessary to pursue the purposes of the processing, in compliance with the applicable legal deadlines. The default retention period for the curricula and personal data of applicants processed by the human resources management services is two years. The applicant may, at any time, request their erasure or exercise any other right.
12.Applicants' rights
The applicant may, at any time and free of charge, exercise the rights to withdraw consent, to information, of access, rectification, erasure, restriction of processing, portability and objection, through the Rights Exercise Form or by contacting the Data Protection Officer. A response is provided within one month, extendable by two months in justified cases, under Article 12(3) of the GDPR.
13.Relationship with the Policy and the General Sheet
This Sheet complements the Data Processing Policy in Application Management and the General Data Processing Information Sheet, accessible on the Data Protection Platform.
14.Complaints to the supervisory authority
The applicant has the right to lodge a complaint with the National Data Protection Commission (CNPD), through the contacts available at www.cnpd.pt.
15.Versions of the Sheet
Version of this Sheet: 202605. Date: 26 May 2026. To consult previous versions, the applicant may send a request by email to dataprotection@borgstena.com.