Privacy Policy

Privacy Policy for Candidate

Focal Resource Recruitment Co., Ltd. and its affiliates (hereinafter referred to as the “Company”) respect the privacy right to privacy of applicants and to ensure that the personal data of applicants are protected, this Privacy Policy has been established to request your consent to collect, use and disclose including delete and destroy the personal data of applicants both online and other channels as required by the Personal Data Protection Law as follows:

1. Purpose of personal data processing

The applicant acknowledges, agrees, and consents to the data controller and data processor collecting, using, and disclosing personal data that the applicant submits on the job posting website or information provided to the company’s recruiting professionals, which will be used for the following purposes only:

1.1. Purpose of service in accordance with the terms and conditions

1.2. Purpose of Marketing

1.3. Other Purposes

1.4. Purpose of Legal Compliance


2. Collected Personal Data

To provide you the services, the company will collect your personal data as follows:


3. Request for Consent and Possible Effects Caused by Consent Withdrawal


4. Personal data retention period


5. Disclosure of Personal Data to the Other

5.1 The company discloses and shares applicants’ personal data with the other people and legal entities that are not in the company’s group (“Other Persons”) for the purpose of collecting and processing personal data as set forth in this Privacy Policy, such as service providers in relation to the recruitment and selection process; employment; security; background verification; qualification and competence testing; information systems; financial institutions; partners; information system developers; government authorities; and other persons necessary for the company to conduct business and provide services to applicants, including taking any action for the purposes of collecting and processing personal data as set forth in this Privacy Policy.

5.2 The company will require the person receiving the information to take appropriate measures to protect the applicant’s information and to process such personal data only as necessary and take steps to prevent the unauthorized use or disclosure of personal data.</p


6. Transmission or Transfer of Personal Data Abroad

6.1. The company may transmit or transfer the applicant’s personal data to its affiliates or other foreign parties where it is necessary for the performance of the Agreement to which the Applicant is a party or is an act under a contract between the company and another person or entity for the benefit of the applicant; or to process the applicant’s request prior to agreement execution; to prevent or suppress a danger to the life, body or health of the applicant or any other person, to comply with the law; or it is necessary to carry out missions for the benefit of the public.

6.2. The company may keep the applicant’s data on server or cloud computers provided by other parties and may use third-party programs or applications in the form of software-provided services and in the form of ready-made platform services to process the applicant’s personal data. However, the company will not allow unrelated persons to access personal information and will require those other parties to take appropriate security measures.

6.3. In the event that the applicant’s personal data is sent abroad, the company will comply with the Personal Data Protection Law and take reasonable measures to ensure that the Applicant’s personal data is protected and the Applicant can exercise its rights in connection with the Applicant’s personal data in accordance with the law. In addition, the company will require the person receiving the information to take appropriate measures to protect the applicant’s data and process such personal data only as necessary and take all action to prevent other people from unauthorized use or disclosure of personal data.


7. Persona Data Security Measures

7.1. The security of the applicant’s personal data is important to the company, and the company has adopted appropriate technical and administrative security standards to protect personal data from being lost, unauthorized access, use or disclosure, misuse, modification, and destruction by using security technologies and procedures such as encryption and access restrictions to ensure that only authorized persons have access to the applicant’s personal data and that these individuals are trained to focus on the importance of personal data protection.

7.2. The company has arranged appropriate security measures to prevent the loss, access, use, alteration, amendment, and disclosure of personal data by those who do not have rights or duties related to that personal data. Such measures will be reviewed when necessary or when technology changes in order to ensure appropriate security efficiency.


8. Rights relating to the applicant’s personal data

8.1. The applicant’s rights under the Personal Data Protection Law are summarized as follows:

8.2 Applicants can exercise their legal rights via Request form (the right can be exercised when the Personal Data Protection Law applies to the Data Controller).


9. Information about the Data Controller and Data Protection Officer