Candidate Privacy Notice

Last Updated: [13.7.2025]

1. Who is Responsible for Your Data?

Qedma is the data controller of your personal data collected during the recruitment process. Comeet acts as our data processor, providing recruitment and applicant tracking services in accordance with our instructions and data protection requirements.

2. What Personal Data We Collect

We may collect the following categories of personal data about you:

– Contact details: Name, email address, phone number, address

– Professional background: Resume/CV, LinkedIn and other public profiles, cover letters, employment history, education

– Application details: Position applied for, source of referral (e.g., recruiting agency, employee), interview notes, evaluations

– Communication records: Emails and messages with Qedma or third-party recruiters

– References and background: Feedback from referees, screening results (if applicable)

– Preferences: Availability, salary expectations, location preferences

Data may be provided by you, generated during the recruitment process, or obtained from third parties (e.g., LinkedIn, recruiters, referrals, or references).

3. How We Use Your Personal Data

We use your personal data for the following purposes:

– To assess your qualifications and suitability for a role

– To contact you about your application status

– To schedule interviews and manage recruitment workflows

– To communicate with third parties you authorize (e.g., recruiters or references)

– To comply with applicable laws and employment regulations

– To improve our recruitment and hiring practices

4. Legal Bases for Processing

We process your personal data under the following legal bases, as permitted under applicable law:

– Consent – where you provide information voluntarily or participate in optional stages

– Contractual necessity – to evaluate and respond to your application

– Legitimate interests – to manage and improve our recruitment processes

– Legal obligation – where necessary to comply with laws or regulatory requirements

5. Who We Share Your Data With

Your personal data may be shared with:

– Comeet, our applicant tracking platform provider

– Technical service providers who support our recruitment infrastructure

– Affiliates within the Qedma corporate structure (if any)

– Recruiters or referrers, who may receive updates on the status of your application

– Government or legal authorities, where required by law

– Acquiring or merging entities, in the event of a business transfer Comeet’s privacy policy is available here

All data recipients are contractually obligated to protect your personal information and use it solely for authorized purposes.

6. International Data Transfers

Your personal data may be stored and processed in:

– The European Economic Area (EEA)

– The United States

– Israel (where Qedma is headquartered)

– Other jurisdictions deemed to offer adequate protection under applicable law

When we transfer personal data outside the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions under the GDPR.

7. Data Security and Retention

We implement technical and organizational security measures to protect your personal data against unauthorized access, loss, misuse, or alteration.

We retain personal data only for as long as necessary to complete the recruitment process and for a limited period thereafter to comply with legal obligations or to consider you for future opportunities. If required by law, we may retain certain records for longer periods.

8. Your Rights

Subject to applicable data protection laws (e.g., GDPR), you may have the right to:

– Access a copy of your personal data

– Correct or update inaccurate data

– Request deletion of your data

– Restrict or object to certain processing

– Receive your data in a portable format

– Withdraw consent where applicable

– Lodge a complaint with a data protection authority

To exercise any of these rights, please contact us using the information below. We will process your request in accordance with applicable law and timelines.

Qedma does not use automated decision-making during the recruitment process.

9. Children’s Data

Qedma’s recruitment process is not intended for individuals under the age of 18 (or as defined by local law). We do not knowingly collect data from minors. If you believe a minor’s data has been collected, please contact us immediately.

10. Updates to This Notice

We may update this Notice from time to time. If material changes are made, we will notify you through the Platform or other appropriate channels. Please review this Notice periodically for any updates.

11. Contact Us

If you have any questions about this Notice or your personal data, you may contact: Qedma Ltd. info@qedma.com

Rokach Blvd 101, Tel Aviv, Israel

If you are located in the EEA or UK, and your inquiry relates to our representative or Data Protection Officer (DPO), we will route your request accordingly.