RHEA Inc, hereinafter referred to as ‘RHEA’, is a company incorporated under Canadian law.
RHEA ensures processing of Personal Data in accordance with, but not limited to the Personal Information Protection and Electronic Documents Act (PIPEDA) (S.C. 2000, c. 5), the Privacy Act (R.S.C., 1985, c. P-21), as well as Bill 64, An Act to modernize legislative provisions as regards the protection of personal information (Province of Quebec) (2021, c.25).
Candidates are students or professionals searching for a job within RHEA and they may be attained from the following sources:
This Candidate Privacy Notice (hereinafter referred to as ‘Privacy Notice’) applies in relevant countries throughout RHEA’s Canadian network.
RHEA Inc. is the Data Controller of Personal Data, and the RHEA Data Protection Officer can be contacted at privacy@rheacanada.com.
This Privacy Notice applies to the processing of Candidates’ Personal Data by RHEA Inc through recruiting activities, job applications and job vacancy advertisements.
This Privacy Notice does not apply to the processing of applicants’ data after they are hired and during their employment.
This Privacy Notice applies to any and all forms of use of Personal Data by RHEA for a current, former or prospective Candidate.
In order to manage Candidates at RHEA premises, RHEA processes the following categories of Personal Data:
| Type | Personal Data | Purpose |
| Identification data | Name, first name, date of birth, sex/gender, copy of ID or passport, nationality.
Name and surname of referred person for professional checks. |
Process open application
Verify claimed identity Prepare for and enter into a contractual employment relationship Get a reference check on a Candidate’s past job roles |
| Contact data | Personal phone number, personal email, personal mailing address
Email and phone number of referred person for professional checks |
Process open application
Determine the suitability of a Candidate’s qualifications Prepare for and enter into a contractual employment relationship Get anonymous feedback on RHEA’s recruitment process Get reference check on a Candidate’s past job roles Communicate in the future with the Candidate about any potential job vacancy |
| Professional data | Employer, job title, professional phone number, professional email, performance at work, notice period, need of relocation, contact details of referees provided | Process open application
Determine the suitability of a Candidate’s qualifications Prepare for and enter into a contractual employment relationship |
| Education data | Training, certifications, degrees | Determine the suitability of a Candidate’s qualifications
Comply with any legal or regulatory obligations imposed on RHEA in relation to its recruitment practices |
| Financial data | Current and expected renumeration package, other advantages | Determine the suitability of a Candidate’s qualifications
Comply with any legal or regulatory obligations imposed on RHEA in relation to its recruitment practices |
| Security data | Security clearances in possession, self-declarations on good conduct, criminal records | Determine the suitability of a Candidate’s qualifications
As permitted by law, to establish whether an applicant has committed an unlawful act or been involved in dishonesty, malpractice or other seriously improper conduct Comply with government and public sector security clearance requirements Comply with any legal or regulatory obligations imposed on RHEA in relation to its recruitment practices. |
| Family data | Family members’ description, declaration of family members working at the end client or at RHEA | Determine the suitability of a Candidate’s eligibility
Prepare for and enter into a contractual employment relationship Determine the relocation package Comply with any legal or regulatory obligations imposed on RHEA in relation to its recruitment practices. |
RHEA will not require you to provide sensitive Personal Data, except to the extent that the collection of such information is required under applicable law. Sensitive Personal Data, also known as special categories of data, means Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation, and criminal acts.
When processing an application, RHEA does not use automated decisions based on Personal Data. When RHEA verifies a Candidate’s professional data by contacting the Candidate’s references or other third parties, the Candidate is responsible for making sure that before providing Personal Data about other individuals to RHEA, they let them know that they will be sharing their identification and contact data with RHEA.
The legal grounds for processing the collected Personal Data applicable to Candidates are:
| Purpose | Legal basis |
| Legitimate interest | Verify claimed identity
Determine the suitability of a Candidate’s qualifications Get anonymous feedback on RHEA’s recruitment process Get reference check on Candidate’s past job roles. |
| Legal obligation | As permitted by law, to establish whether an applicant has committed an unlawful act or been involved in dishonesty, malpractice or other seriously improper conduct
Comply with government and public sector security clearance requirements Prepare for and enter into a contractual employment relationship Comply with any legal or regulatory obligations imposed on RHEA in relation to its recruitment practices. |
| Consent | Subscribe to RHEA Group careers newsletter
Process open application Communicate in the future with the Candidate about any potential job vacancy. |
Personal Data collected by RHEA is processed internally only by duly authorized and informed persons, within the scope of the recruitment process.
RHEA will never pass on or sell Personal Data to third parties for their own marketing purposes.
RHEA shares Personal Data externally only in the following cases:
Please note that we and some recipients of your personal information may process your data in any province within Canada or in countries outside of Canada. We will ensure that there are adequate safeguards in place to protect your personal information that comply to our legal obligations.
However, RHEA is under no obligation to safeguard your personal data in instances where that personal data has been published or publicly disclosed on social media websites such as LinkedIn, Facebook, or equivalent websites that allow individuals to promote themselves and post their personal data that is intended for public consumption.
Depending on the situation, these recipients sign a written contract with RHEA distinguishing between different types of roles:
On the basis of specific agreements, RHEA ensures compliance with the instructions and measures put in place for data processing.
If an international transfer of information involving Personal Data is needed, RHEA Inc. ensures that there are appropriate safeguards in place to ensure the safety and integrity of Personal Data through the following measures:
When a Candidate submits an application via the RHEA website, the data is processed by Krystal, one of RHEA’s Data Processors.
The Personal Data of Candidates is securely stored and kept in RHEA servers located in Belgium within the Recruitment private SharePoint site with proper access restrictions. The Personal Data of Candidates is also securely stored and kept in a database provided by Bullhorn, another RHEA Data Processor.
If the application is successful, RHEA retains each Candidate’s Personal Data as part of RHEA’s employee records.
If the application is unsuccessful, RHEA retains each Candidate’s Personal Data until withdrawal of consent or for a reasonable period of time to deal with any matter which may arise in connection with the application, for purposes of contacting the Candidate regarding future employment opportunities and for our legitimate business purposes (for example to make sure we do not contact an individual about a role they have already applied for).
Personal Data submitted for subscription to RHEA’s careers newsletter is held up to the time that a person unsubscribes, i.e. when they withdraw consent to receive weekly updates on open positions.
Personal Data submitted for an open application is held until consent is withdrawn.
The consent to process Personal Data according to this Privacy Notice is collected and recorded either by signing this notice digitally/in paper or by clicking the checkbox of consent in the online job/open application form, declaring to have read and accepted it.
Candidates are made aware of this Privacy Notice on the RHEA website when they directly send their Personal Data to Recruitment Team without completing the website job/open application form.
RHEA employees make Candidates aware of this Privacy Notice when they provide the Recruitment Team with a Candidate’s data via the referral form.
Security of processing is ensured by implementing appropriate technical and organizational measures to ensure an appropriate level of security. In assessing the appropriate level of security, the following shall be taken into consideration:
RHEA has implemented (and is certified to) the ISO 27001 international standard, which describes how to manage information security in a company. The focus of ISO 27001 is to protect the confidentiality, integrity and availability of the information in a company. RHEA maintains its business activities according to the ISO 27001 standard, which ensures the implementation of security measures impacting privacy.
Details of specific technical measures are available by sending an email to privacy@rheacanada.com.
Candidates have the following rights with regard to their Personal Data:
To exercise one or more of the rights listed above, Candidates shall send an email to privacy@rheacanada.com.
We reserve the right to change our Privacy Notice at any time. On the RHEA Candidate Privacy Notice website page you will always find the most recent version. If the new Privacy Notice affects the way in which we process data relating to you that has already been collected, we will notify you by email.
This Privacy Notice was last reviewed and updated in April 2024.
Jurisdiction: Canada
Country-specific legal requirement:
RHEA is entitled to rely on ‘soft opt-in’ consent in respect of certain marketing messages that RHEA wishes to send to website users. In all other e-marketing circumstances, active ‘opt-in’ consent is required by law and RHEA is required to keep records of each specific consent provided by users.
Note: this section will be updated concurrent with updates to jurisdictional law(s).
Website by ELDO™
