Rigzone General Data Protection Regulation Overview

20 Feb 2018

What is the General Data Protection Regulation (GDPR)?

The GDPR develops consistent data protection rules across the EU, and becomes effective on May 25, 2018. The new rules apply to companies based in the EU as well as companies elsewhere who provide or offer goods or services, and who process data from or about, people in the EU.

Who is affected by the GDPR?

In relation to Rigzone, persons affected by the GDPR are those EU citizens whose personal data is being collected and utilized in our business. Parties include job-seeking candidates who registered themselves on our service, active and inactive employers who use or have used Rigzone services, prospective employers who have not previously used our services but may do so in the future, and our EU based employees.

What types of information are defined as “personal data”?

“Personal data” is defined as any information relating to an identified or identifiable natural person (also called a “data subject”). Such data may include personal identifiers like a name, location, links to online presence, contact information such as phone numbers or email addresses, or photos.

What is Rigzone’s commitment to GDPR?

Rigzone views data privacy as fundamental to the provision of its services. We fully welcome the EU’s General Data Protection Regulation (GDPR) and its aims to provide greater control to users over their personal data, along with clearer transparency as to how this information is used. Over the coming months, Rigzone will enhance how we operate, and will accordingly be amending our processes, systems and policies to reflect these beneficial changes. We invite you to review the information below and return to this page for ongoing updates on our GDPR compliance.

What is Rigzone’s’ data minimization policy?

We will only hold personal data that is necessary to provide the services found on Rigzone. Any personal data that is not required will either be anonymised to make it non-personal or it will be deleted.

What is Rigzone’s data retention policy?

We are updating the periods for which we hold data. Once any personal data reaches the appropriate data retention period it will either be deleted or made non-personal via anonymization. For candidates who registered themselves on Rigzone, personal data is kept for ten years and then deleted. For employers on Rigzone, personal data is kept for ten years, and efforts are made to delete as much information as possible while still maintaining sufficient data for audit, legal, and tax requirements.

How does Rigzone share my personal data?

We will only share personal data when we have the necessary right to do so. For candidates, most typically this refers to your CV profile which contains information you have provided to Rigzone including your contact information, work history, skills, references, or other employment data related to yourself. Your CV profile may be shared with registered employers on Rigzone. This may occur when an employer finds your CV profile while searching our candidate database.

Similarly, if you apply for a job posting listed by one of our registered employers, your personal information may be shared.

If as a candidate you have opted-in to receiving promotional materials from third parties, information you have made available to us may be made available to these third parties who provide goods or services that we believe may be of interest to you. For employers, any information you choose to share on your company that is displayed on your job postings is shared with prospective candidates. Personal data from employers beyond what is seen on job postings is not shared, and only used internally.

How does Rigzone protect my personal data?

We have firewalls around the database and access controls in place. Access to the data is protected by a combination of access controls and network layer protection such as multi-factor authentication, joiner/mover/leaver processes, password policies, logging, and monitoring. The network layer includes a combination of hardware firewalls and cloud security.

How can I check the status of my personal data on Rigzone?

Presently, individuals who believe they have personal data on Rigzone can contact us at gdpr@rigzone.com with inquiries.