privacy policy for job candidates

Introduction

We, at ShonZ Ltd. d.b.a Sett AI (“Sett”, “we”, “us”, “our”) respect your privacy.

This privacy notice (“Notice”) explains your rights concerning the Personal Information we have about you as an applicant for one or more job openings. It also explains the policies and procedures we use regarding Personal Information you provide us, or that we collect and Process, during our recruitment process.  

We are committed to complying with applicable data protection laws, including the Protection of Privacy Law, 1981 (PPL) and the regulations promulgated thereunder, UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

This Notice applies to all Personal Information related to job applicants (“Candidates”) that is Processed by Sett.

This Notice may be amended from time to time. We will post any change to this Notice on our website a reasonable time in advance of the effective date of the change and will make efforts to proactively notify you by email.

Definitions used in this Notice

• “Candidate” – any applicant for a position at Sett as a temporary, full-time or part-time employee, intern, contractor or contingent worker.
• “Personal Information” – Any information relating to you, the Candidate.
• “Processor” – An entity, such as a service provider, that processes Personal Information on behalf of Sett, including without limitation a “holder” under the PPL.
• “Processing” – (and any variant of this term) – Any action taken on Candidate Personal Information such as collecting, recording, storing, organizing, altering, using, disclosing, transmitting or deleting, including if performed by automated means.

Data Controller/Database Controller

With respect to the UK Data Protection Act 2018 and the GDPR, ShonZ Ltd. is the independent controller of the Personal Information. With respect to the PPL, ShonZ Ltd. is the database controller of the Personal Information.

ShonZ Ltd’s address is at Beit Oved 3, Tel Aviv, 6721103, Israel.

Shonz Ltd. can also be contacted through the following email address: [email protected]

How we collect data and why

We will collect and Process Candidate Personal Information for the purpose of administering employment applications and for various necessary recruitment purposes prior to making a hiring decision and, where relevant, entering into an employment agreement. 

Candidate Personal Information that we collect and Process includes, for example, name, contact details, residential address, date of birth, photograph (if you proactively provide it with you CV), details of your qualifications, information you share during interviews, employment history, work permit information, information included in your CV or cover letter, employment references, current and historic salary details (if you’ve shared that information) and salary expectations.

Personal Information may also include names and contact details for references. Please note that it is your responsibility to obtain consent from your references prior to providing us personal information about them. 

The Personal Information we collect and Process originates from you, the Candidate, via hard copy and web-based application forms, email correspondences, verbally through interviews, assessment tests and questionnaires administered by us.

Sett may also collect Personal Information about you from other third parties, such as references you provide us with about former employers, recruiters and recruitment agencies. 

You are not under any legal obligation to provide us Personal Information. However, we do need it to consider your job application and if you do not provide us with Personal Information (and consent to its Processing, if that is the appropriate legal basis under applicable law), we will not be able to consider your job application. You have the right to review the personal information we collect and process about you and request its correction (according to Sections 13 through 14 of the PPL). You may have the right to delete your personal data subject to and in accordance with Article 3 of the Israeli Privacy Protection Regulations (Provisions Regarding Information Transferred to Israel from the European Economic Area), 2023.

Sett processes Personal Information about Candidates mainly through a cloud-based service operated by Comeet Technologies. Should your application be successful, relevant data will be transferred to our HR information system.

Purposes and Legal Basis of Processing Personal Information

Your Personal Information will be Processed for the purposes and on the basis detailed below. We may Process the Personal Information for additional purposes, provided that notice is given to you, and provided that we receive your consent, if required under the law.

Purposes	Illustrative Scenarios	Legal Basis under the GDPR
Recruitment – Reviewing your candidacy for the open position you applied for	Documents such as CV, interviews, assessment tests and questionnaires, references from other parties	Our legitimate interests in properly reviewing your candidacy and making a recruitment decisionSteps necessary before entering into an employment contract with you
Defending or asserting legal claims relating to your candidacy	If you or a third party asserts a legal claim against us about how we handled your candidacy	Our legitimate interests in asserting or defending legal claims that impact the course of our business or reputation.
Retaining your candidacy for future positions beyond the ones you applied for	If we later have a job opening for a similar position that may be relevant to you	Our legitimate business interests in continuing to consider you for other open positions

Sharing Candidate Personal Information

We will share your Candidate Personal Information within our internal HR teams. We may also share some Candidate Personal Information with Processors who help us in the applicant review process. Such Processors operate under our instructions. We aim to ensure that any Processor we use takes adequate measures to protect your Candidate Personal Information, by signing a data processing agreement with them. 

Where required by law, we will also disclose your Candidate Personal Information to a governmental authority, in response to legal process or when we believe in good faith that the law requires it. The legal basis for this is a legal obligation we are subject to and our legitimate business interests in complying with binding requests of governmental authorities.

International data transfers

Sett’s headquarters are in Israel and your Candidate Personal Information may be accessed and handled from Israel. However, your Candidate Personal Information will be stored on Comeet Technologies, which is our service provider.

When we transfer your Personal Information outside the UK or the European Economic Area (such as the U.S.), we will aim to do this under the terms of a data transfer agreement with adequate safeguards determined by the EU Commission and the UK Information Commissioner’s Office.

Retention and security

Retention. Candidate Personal Information will not be kept for longer than is necessary for the recruitment process, for handling legal claims and for enabling us to consider you for future open positions. Where the Personal Information is relevant to a successful Candidate’s employment, relevant data will be transferred to our HR information system. 

Where the UK Data Protection Act or the GDPR apply, Personal Information of unsuccessful Candidates will be deleted within 24 months of the decision, unless we decide to retain the information for an additional period of 18 months for the purpose of considering you for other potential job opening. 

Safeguards. We implement measures to reduce the risks of damage, loss of information and unauthorized access or use of Candidate Personal Information. However, although efforts are made to secure Candidate Personal Information, we cannot guarantee its absolute protection.

GDPR Rights

If you are in the European Economic Area or the UK, you have the following rights under the GDPR:

Right to Access and receive a copy of your personal information that we process.

Right to Rectify inaccurate personal information we have concerning you and to have incomplete personal information completed.

Right to Data Portability, that is, to receive the candidate personal information that you provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another person or entity. Where technically feasible, you have the right to have your candidate personal information transmitted directly from us to the person or entity you designate. 

Right to Object to our processing of your candidate personal information based on our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or if we need to process such candidate personal information for the establishment, exercise, or defense of legal claims. 

Right to Restrict us from processing your candidate personal information (except for storing it): (a) if you contest the accuracy of the candidate personal information (in which case the restriction applies only for a period enabling us to determine the accuracy of the candidate personal information); (b) if the processing is unlawful and you prefer to restrict the processing of the candidate personal information rather than requiring the deletion of such data by us; (c) if we no longer need the candidate personal information for the purposes outlined in this Notice, but you require the candidate personal information to establish, exercise or defend legal claims; or (d) if you object to our processing based on our legitimate interest (in which case the restriction applies only for the period enabling us to determine whether our legitimate grounds for processing override yours).

Right to be Forgotten. Under certain circumstances, such as when you object to our processing of your candidate personal information based on our legitimate interest and there are no overriding legitimate grounds for the processing, you have the right to ask us to erase your candidate personal information. However, notwithstanding such request, we may still process your candidate personal information if it is necessary to comply with our legal obligations, or for the establishment, exercise, or defense of legal claims.

Right to withdraw your consent. In cases where you have given consent to the processing of your personal data, you have the right to withdraw this consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of these rights, please contact us through the channels listed in this Notice.

When you contact us, we reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with information that you have asked for, we will explain the reason.

Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, then according to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in the Member State of your residence, place of work or place of alleged infringement of the GDPR. For a list of supervisory authorities in the EU, click here.

If you are in the UK, you can lodge a complaint to Information Commissioner’s Office (ICO) pursuant to the instructions provided here.

Minors

We do not recruit or employ individuals under the age of 18 and we do not knowingly collect Personal Information about individuals under that age.

Contact us

To exercise any of your rights, please contact [email protected]. 

Last updated in August 2025.