Privacy policy for the MR MARVIS employer branding and recruitment

Date of publication: 20-05-2026

We at MR MARVIS manage our employer branding and recruitment process through our career site (the “Career Site”), and by using a related applicant tracking system.

In this privacy policy, we explain how we process your personal data if:

• You visit our Career Site (you being a “Visitor”)
• You connect with us via our Career Site, to create a profile with us and receive information about current or future vacancies with us (you being a “Connecting Candidate”)
• You apply for a position with us, via our Career Site or a third party service (you being an ”Applying Candidate”)
• We collect information about you from other parties, sites and services, since we believe your profile is of interest for our current or future vacancies (you being a “Sourced Candidate”)
• We receive information about you from our employees or partners, since they believe your profile is of interest for our current or future vacancies (you being a “Referred Candidate”)
• We receive information about you from a Candidate, who lists you as their reference (you being a “Reference”).

This privacy policy also describes what rights you have when we process your personal data, and how you can exercise these rights.

When we use the term “Candidate” in this privacy policy, we are referring to each of Connecting Candidates, Applying Candidates, Sourced Candidates, and Referred Candidates, unless stated otherwise.

1. About processing of personal data

Personal data is all information that can be directly or indirectly linked to a living person. Examples include name, email address, telephone number and IP address. Processing of personal data means any automated use of personal data, such as collecting, creating, analysing, sharing, storing and deleting personal data.

Different data protection laws apply depending on the type of processing and location. An example relevant to our processing activities is the EU General Data Protection Regulation (2016/679, “GDPR”).

Under the GDPR, the “data controller” determines why and how personal data is processed. A “data processor” processes personal data only on behalf of the data controller and according to its instructions.

MR MARVIS is the data controller for the processing described in this privacy policy.

2. What personal data do we process?

All individuals

Device information

If you visit our Career Site, we may collect information about your device, such as:

• IP address
• browser type and version
• session behaviour
• traffic source
• screen resolution
• preferred language
• geographic location
• operating system
• device settings and usage

Technical and statistical data

Information about how you use the Career Site, such as:

• pages visited
• URLs accessed
• interactions with the site

Communications data

Information shared when communicating with us, including:

• emails
• messages
• surveys
• video recordings
• chat history
• information added to your account

Contact details

Such as:

• name
• email address
• telephone number
• address

Candidates

Recruitment process information

Such as:

• interview notes
• assessments and test results
• salary expectations
• evaluation feedback

Application information

Such as:

• CV
• cover letter
• portfolio or work samples
• references
• education details
• recommendation letters

Public profile information

Information collected from publicly available professional sources, such as:

• LinkedIn
• employer websites

Reference information

Information received from:

• employees or partners who refer you
• references you provide

3. Where do we receive your personal data from?

All individuals

From the Career Site

We collect technical and statistical information when you use the Career Site.

Directly from you

Most information is received directly from you, for example when you:

• apply for a role
• connect with us
• communicate with us

You may choose not to provide certain information, but some information is necessary for us to process applications or provide requested services.

References

From the Candidate

If a Candidate lists you as a reference, we receive your contact details from that Candidate.

Candidates

From public sources

We may collect information from publicly available professional sources such as LinkedIn.

From referrals

We may receive information from employees, partners or recruitment providers who believe your background may be relevant to our vacancies.

From your references

If you provide references, we may collect information from them.

Information created during recruitment

We may create information during the recruitment process, including:

• interview notes
• assessments
• evaluation comments

4. For what purposes do we process your personal data?

Legal protection and enforcement

To protect and enforce our rights, interests and legal obligations.

Affected individuals:
All categories listed above.

Data categories used:
All categories listed above.

Sharing with recipients

To share personal data with recipients listed in Section 5.

Affected individuals:
Depends on the purpose.

Data categories used:
All categories listed above.

Career Site analytics and functionality

To:

• maintain and secure the Career Site
• analyse usage and performance
• improve operational performance
• manage cookies and tracking technologies

Affected individuals:
Visitors.

Data categories used:

• Device information
• Technical and statistical data

Recruitment and talent management

Provide vacancy updates

Affected individuals:
Connecting Candidates.

Data categories used:

• Contact details
• Communications data

Review applications and profiles

Including communication regarding applications and recruitment processes.

Affected individuals:
Connecting Candidates and Applying Candidates.

Data categories used:
All relevant categories above.

Source and evaluate profiles

Including contacting individuals regarding potential opportunities.

Affected individuals:
Sourced Candidates and Referred Candidates.

Data categories used:
All relevant categories above.

Contact regarding future vacancies

Affected individuals:
Candidates.

Data categories used:
All relevant categories above.

Record interviews

Affected individuals:
Candidates.

Data categories used:
Communications data.

Surveys and feedback

Affected individuals:
Candidates.

Data categories used:
All relevant categories above.

Reference checks

Affected individuals:
References.

Data categories used:

• Contact details
• Communications data

5. Whom do we share your personal data with?

Service providers

We share personal data with suppliers supporting our recruitment and employer branding activities, including:

• applicant tracking systems
• recruitment service providers
• software providers

Group companies

We may share data internally within MR MARVIS group companies where necessary.

Cookie providers

If consent is provided, third-party cookie providers may process data according to their own privacy policies.

Authorities and public bodies

Where legally required.

Legal proceedings

Where necessary to establish, exercise or defend legal claims.

Corporate transactions

In connection with mergers, acquisitions, financing or business transfers.

6. On what legal bases do we process your personal data?

We process personal data on one or more lawful bases under the GDPR.

In most cases, processing is based on our legitimate interest in:

• recruiting suitable talent,
• managing recruitment processes,
• and maintaining communication regarding employment opportunities.

Where required, we may also rely on your consent. This may apply, for example, when:

• you choose to “Connect” with us,
• we ask permission to retain your data for future opportunities,
• or we request consent to record interviews.

You may withdraw your consent at any time.

For more information regarding our legal basis assessments, you may contact us using the details in Sections 9 and 10.

7. When do we transfer your personal data outside of the EU/EEA, and how do we protect it?

We aim to process personal data within the EU/EEA whenever possible.

However, some service providers or their subcontractors may process personal data outside the EU/EEA.

Where transfers occur, we ensure appropriate safeguards are in place, including:

• EU adequacy decisions,
• the EU-US Data Privacy Framework where applicable,
• and EU Standard Contractual Clauses.

We also implement appropriate technical and organisational security measures.

You may contact us for more information regarding international data transfers.

8. For how long do we keep your personal data?

All individuals

Where personal data is processed for legal protection or claims handling purposes, we retain the data until the matter is fully resolved.

Visitors

We retain device and security-related information for up to one (1) year. Cookie retention periods are described in our Cookie Policy.

Candidates

If you are a Candidate who applied for a position with us or chose to “Connect” with us, we may retain your personal data for recruitment purposes for up to 12 months from the date of your application or consent, unless you renew your permission to remain connected with us.

If your permission expires and is not renewed, your personal data will be scheduled for deletion and removed from our recruitment systems in accordance with our retention and deletion policies.

If you are a Sourced or Referred Candidate, we may retain your personal data for up to 1 month in order to assess whether your background may be relevant for current or future vacancies with us. During this period, we may contact you to request your permission to retain your personal data for recruitment purposes for a longer period. If permission is not granted, your personal data will be deleted from our recruitment systems in accordance with our retention and deletion policies.

If you are hired, your personal data may be retained during employment for employment-related purposes, which will be communicated separately.

References

We retain personal data relating to references for as long as we retain the relevant Candidate’s data.

9. What rights do you have, and how can you exercise them?

You have rights under applicable data protection laws, including the right to:

• access your personal data
• request correction of inaccurate data
• request deletion of your data
• restrict or object to processing
• withdraw consent
• request portability of applicable data
• lodge a complaint with a supervisory authority

To exercise your rights, you may:

• visit the Data & Privacy page on our Career Site,
• manage your preferences through your account,
• or contact us directly at pablo@mrmarvis.com.

If you are located in the EU, you may contact your local data protection authority.

If you are located in the UK, you may contact the Information Commissioner’s Office (ICO).

10. Where can you turn with comments or questions?

If you have any questions regarding this privacy policy or how we process personal data, you may contact us at:

pablo@mrmarvis.com

11. Updates to this privacy policy

We may update this privacy policy from time to time to reflect:

• changes in our processing activities,
• legal requirements,
• or operational improvements.

The latest version will always be available on our Career Site.