Whether you are a candidate interested in sharing your CV with us or applying for a specific job, or whether you are a referring 3rd party submitting the CV on behalf of a candidate, you should read and understand this document detailing GO’s recruitment process and how all candidates’ data is processed by us.

Any reference to ‘GO’, ‘we’, ‘us’ or ‘our’ in this document refers to GO p.l.c and also includes any affiliate company meaning any other entity that, directly or indirectly, controls, is controlled by or is under common control with GO p.l.c. “Control,” for the purposes of this paragraph only, refers to any person or entity with the right to exercise or cause the exercise of at least fifty per cent (50%) or more of the voting rights in such person or entity

For the purposes of data protection legislation and the personal data you submit on this portal, GO is the Controller of such personal data as defined in applicable legislation, in particular the General Data Protection Regulation (Regulation (EU) 2016/679) and the Data Protection Act, (Cap. 568 of the Laws of Malta), and shall process personal data in a fair, lawful and transparent manner in accordance with its legal obligations as contained therein in order to safeguard all rights and protections due to a data subject.

How to show your interest in working for GO:

An application for the filling of a vacancy with GO can only be processed once GO has received a CV or public professional profile of an interested candidate. CVs and/or public professional profiles can only be accepted when uploaded onto the GO Careers online portal following the creation of a profile for the candidate via this portal. No CVs are accepted or received by ordinary mail or email. Should GO receive any CVs through such means, such candidates shall be referred to the GO Careers portal and their CVs immediately deleted or destroyed.

CVs and/or public professional profiles are received either directly by the candidates or via 3rd Party referrals such as recruitment agencies or current GO employees. If you are a referring 3rd party, it is your responsibility to ensure that you have sought the consent of the candidate you are referring prior to sharing his/her CV and/or public professional profile with GO.

GO may also create a recruitment profile for a candidate on the GO Careers portal if specifically and legitimately requested to do so.

How GO accesses and manages Public Professional Profiles and CVs:

All CVs or public professional profiles received are placed on a 3rd Party recruitment platform (currently Talexio – more info available here www.talexio.com) via the GO Careers portal and stored, accessed and processed there. Talexio is a processor of that information which GO receives via this portal and only processes such personal data upon GO’s written instructions and in accordance with Talexio’s own legal obligations and its contractual obligations towards GO.

Once a candidate’s public professional profile has been created, such candidate would receive an automated email confirmation that such a profile has been created.

Once created, GO has access to all candidate profiles and all the information uploaded to or saved in such a profile such as CVs and the candidate’s own notes or comments. Access to this information is granted to relevant GO staff on a strict need-to-know basis.

CVs will only be shared internally and on a need-to-know basis if considered relevant to the recruitment process for the filling of a known or potential vacancy. Such sharing will only take place using industry standard methods to ensure that your personal data is kept as safe as possible from external interference at all times. Further information can be found below in “How we conduct the recruitment process”.

Unless specifically requested by the candidate in writing or by any other reliable means, GO does not modify, in any manner, any profile once uploaded.

How you can access and manage your Public Professional Profile:

Once created, the candidate shall have access to all the information which he/she has included and uploaded into his/her public professional profile and can update it accordingly. The candidate will receive an automated email notification that such a profile has been modified together with instructions to follow should the candidate disagree with such modification or wish to delete or modify his/her profile once more.

In every email automatically sent by the 3rd party recruitment platform, profile-owners will always be reminded of their right to access, object to, suspend, rectify and erase any personal data contained in their profile.

With respect to your right to erase your personal data, please refer to the section on Request the erasure of your personal data for more details.

Retention of CVs and Public Profiles:

Unless recruited – in which case the Employee Privacy Policy shall apply– all candidates shall have their CV kept on the 3rd party recruitment platform for a minimum period of five years in order to contact candidates about any future positions should we believe that their profile is relevant and matches any new roles. However, this period of five years may start running from the date that the candidate (or anyone authorized to do so on his/her behalf) shall have last updated his or her profile. For this reason, you need to know that we too will know when your profile has been accessed or altered by you (or anyone else on your behalf).

We consider that it is in our legitimate interest to retain your CV and profile for such period of time as, when you access your profile without deleting it, we understand that you are still interested in working for GO, despite not having been our preferred candidate up until then. Given that most positions carry a probationary period of one year, your continued interest would mean that, should the position you were interested in becoming vacant once again during the probationary period, you may be invited by us to take on the role should you still be interested in doing so.

This amount of time will also allow us to contact you throughout that period in connection with other vacancies of potential interest to you.

During this time, only HR personnel will have access to your profile on behalf of GO on a strict need-to-know basis. When the five-year period has lapsed from your last date of access, your profile and all its contents will automatically be deleted.

How we conduct the recruitment process:

All public professional profiles and CVs specifically received and considered suitable, for any given vacancy will be filtered by a human resources officer assigned to that particular recruitment process. Access to those CVs which are deemed acceptable by the human resources officer at this initial stage shall be shared in a secure manner with the interviewing panel and to any other required GO personnel on a strict need-to-know basis. Access to such personal data to non-HR personnel shall only remain active and available until the recruitment process for that vacancy has been satisfactorily filled.

Shortlisting of candidates is done on the basis of the criteria listed in the job description applied for and following a comparison with other interested candidates.

Interviews are conducted on a strictly confidential basis by an internal interviewing panel bound by contractual obligations of confidentiality. If you are an internal candidate and are applying for a vacancy falling under the collective agreement, all rules relating to the recruitment process under the collective agreement shall also apply. The rules relating to the collective agreement can be found by clicking here.

The interviewing panel may make use of publicly available social media, public professional profiles and search engine results prior to conducting an interview.

Once a candidate is not on the shortlist or selected, the candidate’s CV is deleted from the 3rd party recruitment platform five years after the closing date of the vacancy. This is due to GO’s own contractual obligations with recruitment agencies. This period may be extended if the candidate opts in to keep such CVs and profiles stored indefinitely on the 3rd party recruitment platform via the GO Careers portal. The candidate may, however, access, amend and delete his/her profile at any time at no cost via the GO Careers portal. Each candidate shall be reminded of the contents of this paragraph in any communication from GO informing such a candidate that his/her application has not been successful.

Whether or not a candidate decides to opt in for the retention of his or her profile is entirely his/her choice and shall have no effect on whether or not such candidate is recruited.

Sharing with 3rd Parties:

GO shall treat all CVs, profiles and applications in strict confidence. No CVs or profiles shall be shared at any point in time outside GO except, as explained above, with Talexio which stores, maps and manages your information.

Access and Use of Personal Data:

Throughout the duration that a candidate’s profile exists on the 3rd party recruitment platform, GO shall only use that information to contact the candidate via email or telephony in order to inform him/her of any vacancies that he/she may be interested in in line with his/her profile or as a result of his/her interview. With every such communication, each candidate shall be asked whether he/she wishes to be contacted again and informed that he/she may exercise his/her rights as data subject in accordance with this Privacy Notice and Policy on Recruitment.

Any personnel within GO who would have required access to such CVs or profiles in order to carry out their duties in relation to the recruitment process shall be bound by contractual confidentiality obligations.

Request the correction of your personal data:

This means that if any personal information we hold about you is incomplete or incorrect, you have a right (as well as a duty) to have this corrected. You may access and amend your personal data directly by logging into your public profile from the GO Careers portal. However, should you be unable to do so, you may contact Human Resources at GO for assistance. We may need to verify your identity and, in order to do this, may ask you some questions or for you to provide us with some personal details to make sure that we are receiving instructions from the right person.

Object to the processing of your data:

You may object to the collection, use and/or sharing of your personal data if we rely on our legitimate interests (or those of a third party) to do so and you feel that our processing of your data in such a manner impacts your fundamental rights and freedoms. However, in some cases, we may be able to demonstrate that we have a compelling legitimate ground to process your data which may override your rights and freedoms. You may submit your objections to processing of your personal data on the grounds of the above-mentioned legitimate company interests by contacting our Data Protection Officer. You may do so in writing by email on [email protected] or by ordinary mail at The Data Protection Officer, GO p.l.c., Triq Fra Diegu, Marsa, MRS 1501, Malta.

Request the restriction of the processing of your personal data:

You may ask us to temporarily suspend the processing of your personal data in one of the following scenarios: (a) where you want us to establish the accuracy of the data, (b) where our use of the data is unlawful but you do not wish for us to delete it, (c) where you need us to retain your data even when we no longer need it in order for you to establish, exercise, or defend legal claims, or (d) where you have objected the use of your data but we need to verify whether we have overriding legitimate grounds to use it. You must contact the Data Protection Officer in order for us to process this request. You may do so in writing by email on [email protected], or by ordinary mail at The Data Protection Officer, GO p.l.c., Triq Fra Diegu, Marsa, MRS 1501, Malta.

Request the erasure of your personal data (aka the right to be forgotten):

This means that you may request the erasure of your personal data where we no longer have a legitimate reason to continue using or retaining it. We will not be able to fulfil your request for the first year from creation of your public professional profile due to our contractual obligations with recruitment agencies. We may not be able to accede also if we are under a legal obligation to retain this information, or where the retention of your information is necessary for us to defend ourselves in a legal dispute or to execute a legal title against you. If you are unable to erase your own data yourself by logging into your profile from the GO Careers portal, you must contact the Data Protection Officer in order for us to process this request. You may do so in writing by email on [email protected] or by ordinary mail at The Data Protection Officer, GO p.l.c., Triq Fra Diegu, Marsa, MRS 1501, Malta

Further information:

Should you wish to ask any questions on how GO processes or has processed your data or if you would like to make a request to avail yourself of your rights as outlined above, you may do so by contacting GO’s Data Protection Officer on [email protected] or on Tel: 21246200. You may also contact the Office of the Information and Data Protection Officer to refer any complaints you may have on www.idpc.org.mt or during office hours on Tel 2328 7100.