Privacy Policy



Introduction

In this Privacy Policy, primasystems ("we", "our" or "the Company") sets out its practices regarding the data collected from users who access our website at www.primasystems.pk ("Website") or provide us with personal data through the application form (collectively, "Users").

Controller 

Contact details of the controllers according to Art. 4 No. 7 GDPR:

PRIMASYSTEMS (SMC-PRIVATE) LIMITED 
3td Floor, Rafi Centre, near Nawai e Waqt Building, G-7/1 G-7, 44000 Islamabad

E-mail: info@primasystems.pk

Managing Director: Mr. Syed Ali Hasnain Rizvi
 

What data is collected?

When you visit our website and use the Cookie-E banner, certain technical information is automatically processed. This includes, in particular, referrer (previously visited website), requested website or file, browser type and browser version, operating system used, device type used, time of access, IP address in anonymized form (used to determine the location of access). This data is necessary for the operation of the website and system security. Our website is hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur). The hosting provider provides the technical infrastructure to operate the website. The data generated in this process (e.g., server log files) is processed by IONOS as a processor in accordance with Art. 28 GDPR on the basis of a data processing agreement.

In addition, we only collect personal data that you actively provide to us as part of the application process (hereinafter: applicant data). This includes, in particular: first name, last name, date of birth, e-mail address, telephone number and the application documents you have uploaded (e.g. curriculum vitae, certificates, certificates).

Processing purposes and legal basis

1.    Provision and technical security of the website

Purpose of processing: Processing of technical website data (e.g. IP address, log files) in order to provide the website, ensure its security and ensure stable functioning.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and functional operation of the website)

2.    Implementation of the application process and contact

Purpose of processing: Processing of application data for the purpose of carrying out pre-contractual measures, in particular for the purpose of reviewing your application, contacting us and passing on your application data to Primaholding GmbH, which processes this data as a processor in accordance with Art. 28 GDPR exclusively in accordance with our instructions and carries out applicant management on our behalf.

Legal basis: Art. 6 para. 1 lit. b GDPR (processing for the implementation of pre-contractual measures in the context of the application process)

The data entered in the application form will first be processed by us as part of the application process. Your applicant data will then be transmitted to a company based in Germany (hereinafter: processor). The processor does not process the applicant data as an independent controller, but exclusively on the basis of a data processing agreement in accordance with Art. 28 GDPR and strictly in accordance with our instructions.

The processor is Primaholding GmbH, Großbeerenstraße 2–10, 12107 Berlin, Germany. Primaholding GmbH supports us in the context of application management, in particular through the technical operation of the application tool used.

Germany is a member state of the European Union, so the full application of the GDPR is guaranteed. The purpose of the transfer is the technical processing of the application process carried out by our processor on our behalf via the application tool provided by Primaholding GmbH.

Storage

We only store personal data for as long as is necessary to fulfil the purposes or due to legal requirements. We only store the personal data processed in the context of the application process for as long as is necessary for the decision on the establishment of an employment relationship. If no employment relationship is established, we will delete your data six months after completion of the application process in order to be able to defend against any claims. The legal basis for this is Art. 6 (1) (f) GDPR.  If a person is hired, the relevant data will be transferred to our personnel administration and processed in accordance with the statutory retention periods applicable there.

Origin of the data

We receive data exclusively through your entries in the application form and through technical system entries.

Cookies and log files

We use cookies (small text files with configuration information) on our website to determine the frequency of use and the number of visitors, to improve the ease of use and to optimize our website according to your preferences. Technically necessary cookies are used for the basic functionality of the website and are automatically deleted at the end of the session. In principle, it is also possible to use our website without cookies; You can configure your browser to disable cookies or to notify you before saving. The processing of technically necessary cookies is carried out on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR, in particular to ensure the proper operation of our website.

When you visit and use our website, our web server stores certain log information in a file via this process. We only evaluate these data sets for statistical purposes, to improve the website, for system security reasons (e.g. to prevent misuse) and to diagnose errors.

Data security

If we collect personal data, we store your personal data on specially protected servers. Access to it is only possible for a few specially authorised persons who are involved in technical, commercial or editorial support. We take extensive technical and operational safety precautions, which are regularly reviewed and adapted to technological progress. However, we would like to point out that unencrypted data transmitted on the Internet can be viewed by third parties. Therefore, please protect your data yourself by taking appropriate measures.

Minors

Our website is not directed to children. We do not knowingly process personal data of minors. The use of our services by minors is only permitted with the consent of the parent or guardian.
If we become aware that personal data of a minor has been transmitted without such consent, we will delete it immediately. Parents or guardians can contact us at info@primasystems.pk in such cases.

Profiling in accordance with Art. 22 GDPR

Automated decision-making, including profiling in accordance with Art. 22 GDPR, does not take place in the context of the processing of applicant data or through the use of cookies. In particular, there is no automated evaluation of personal data or the creation of user profiles on the basis of user behaviour or application documents. The processing of your data and the decision on your application are carried out exclusively by natural persons.

In accordance with Art. 15–22 GDPR, you have the following rights with regard to personal data concerning you:

• Right to information (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to revoke consent given (Art. 7 para. 3 GDPR)

To exercise these rights, you can contact us at any time at info@primasystems.pk. In addition, you have the right to lodge a complaint with a data protection supervisory authority. The competent data protection supervisory authority under the Personal Data Protection Bill 2023 is the National Commission for Personal Data Protection (NCPDP).
Official contact information has not yet been published by the government.

Changes to this Privacy Policy

We reserve the right to update this Privacy Policy from time to time.