GDPR Policy for candidates

Privacy Policy

What is the purpose of this Notice of the candidate regarding the privacy policy?
This Notice regarding the confidentiality offers you information about your personal data that we collect during the recruitment process within the Company, in order to see if the required conditions are met. We also inform you about how and why we use these data and how we fulfill our obligations in relation to the General Data Protection Regulation ("GDPR").
It also contains a summary of the rights related to your personal data. Some terminologies in the current Notice may be unknown to you. At the end of the Notice, you will find a glossary of terms, that you may find useful and that we invite you to consult as often as you need to. If you have any questions, please contact us at any time at
Identity and contact information of the Controllers

AmRest Coffee SRL is a Personal Data Controller that manages the job offer for the country where you apply, operating all personal data listed below.
Registered office: 46  Grigore Cobălcescu st., 2nd floor, 11th room, Sector 1, Bucharest, Romania
Trade Register registration number  J40/21510/2006, Unique registration Code 20119287
Contact address for any quiries about the processing of your personal data :
Responsible Officer for the protection of personal data:
In some particular cases, AmRest SPZOO, established in PLAC GRUNWALDZKI 25-27, 50-365, WROCLAW, POLAND, part of the Amrest Group, may act as an associated operator with the local AmRest affiliated company. For this purpose, during the recruitment process, for them to be able to verify the fulfilment of certain conditions, we may transmit some of the personal data that you provide us with to them.

What personal data does AmRest Coffee process?Name, contact details, educational history, employment history, qualifications, skills, hobbies, personal interests.
Where do we collect personal data from?

Directly from the candidate

Recruitment providers (headhunters or agency)

Former employers

Individuals listed as referents

Public sources (such as recruitment platforms, etc.)

Public Institutions

Social media profiles (Facebook, Instagram, LinkedIn, etc.)

Are there any personal data defined by the GDPR as special personal data?

Not applicable

What is Amrest's purpose of personal data processing? 

Personal data are processed in order to assess competencies and to establish, according to the internal criteria, the extent on which the candidates requesting employment at AmRest are suitable for the job; to decide whether to offer or not a job to a certain candidate; to decide the terms and conditions of such offer; to record all decision making for internal management purposes and for reporting purposes, as well as evidence, should any candidate initiate legal proceedings. 

What is the legal basis AmRest Coffee relies upon in order to process your personal data?

Should AmRest Coffee rely upon a legitimate interest in order to process personal data, which would this legitimate interest invoked by AmRest Coffee or other third party be?

First, the legal basis that we invoke is the conclusion or performance of a contract – what we aim through the recruitment process is to conclude an employment/collaboration contract with individuals fulfilling the conditions for that specific position.

First, the legal basis that we invoke is the conclusion or performance of a contract – what we aim through the recruitment process is to conclude an employment/collaboration contract with individuals fulfilling the conditions for that specific position.

To whom do we transfer your personal data?

AmRest Coffee can transfer your personal data to the affiliated Companies (ie. companies of the AmRest Group), recruitment providers, external software providers, as well as other persons involved in the profiling process, in accordance with the internal criteria.

Will your personal data be transferred to a third country (i.e. countries outside the European Economic Area)?

No. All personal data stored by the e-mailing system and other applications and platforms owned by AmRest Coffee are accessible to the AmRest HQ as these systems are hosted by AmRest in Poland.

AmRest Coffee has signed an Agreement with AmRest HQ regarding the Transfer of Personal Data. In order to obtain a copy of this Agreement, please contact us.

To the extent that, during the recruitment process, we will need to transfer your personal data outside the EEA (i.e. if the Company concludes new service contracts with suppliers outside the EEA), you will be informed about these changes in due time.

For how long will we store your personal data before deleting them?

Your personal data are kept for 12 months starting the date the candidate applies for the vacant job. After this period, all personal data will be deleted.

Rejected candidates can willingly opt for their personal data in the candidate´s profile to be kept by AmRest Coffee for 12 more months, should there any job vacancy occur and that it matches their profile. We only retain data for a limited period of time because we wish to keep our database updated, and, at the same time, because we periodically engage in cross-matching activities with candidates in our database for possible vacancies.

As data subject, you have the following rights in relation to your personal data:
The right to access your personal data

You have the right to request AmRest Coffee confirmation of whether we process your personal data, as well as the right to obtain access to such data and copies thereof.

At the same time, closely linked to the right to information, you can ask us for specific information about how AmRest Coffee processes personal data.

The right to request rectification (correction)

You have the right to request Amrest Coffe the rectification of your personal data if they are inaccurate, as well as the right to supplement your personal data, if incomplete.

Please note that, in order to exercise this right, under the principle of data updating, the Company may ask you to provide copies of the documents that you consider relevant to verify whether your request is reasonable or not (i.e. If you request the addition of a new qualification that you have acquired to the database, you will have to provide us with a copy of the supporting diploma).

Right to obtain the erasure of your personal data (deletion)

You have the right to request Amrest the erasure of your personal data under certain conditions. For more details, please contact us at

The right to obtain restriction on processing of your personal data

You have the right to request AmRest Coffee the restriction of processing your personal data in certain cases. For more details, please contact us at

The right to object to the processing of your personal data

You have the right to object to the processing of your personal data under certain circumstances.

The right to data portability

Not applicable.

The right to withdraw your consent

If the legal basis of the processing of personal data is based on consent, you have the right to withdraw your consent at any time.

The right to complain

If you are not satisfied with the way we process your personal data or consider that we, by any means, have violated any legal provisions, you have the right to file complaints to the supervisory authority:

Even if you choose to do so, we kindly ask you first to write us an e-mail at to identify the issue and try to come to a private understanding.


Data Controller

The Data Controller is an Organization that (alone or in collaboration with other entities, in which case, it is called Controller) determines the data elements to be processed, the purposes and means of processing of personal data.

Data Transfer Agreement

An Agreement (Contract) containing standard data protection clauses adopted by the Commission of the European Union as referred to in article 46 (2) (c) of the GDPR.

Data Subject

The identified or identifiable natural person the personal data relates to.


European Union´s general regulation on Data Protection (679/2016).
Legal basis

The processing of personal data is legal only if and to the extent that at least one legal basis specified in the GDPR applies. The legal bases available, applicable in the context of employment, are, in short, as follows: the consent of the data subject, the processing necessary to sign a contract of employment, for the purposes of its fulfilment, the need to observe legal obligations, processing necessary to protect the vital interests of the data subject or of another natural person, the processing necessary for the legitimate interests pursued by the Controller or a third party, unless such interests are annulled by the best interest or fundamental rights and freedoms of the data subject, requiring the protection of personal information (Legitimate Interests).

Personal Data

Any information relating to an identified or identifiable natural person (Data Subject); The identifiable natural person is that who can be identified, directly or indirectly, especially by reference to an identifier such as name, personal identification code, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the said natural person.


Any operation or set of operations performed upon personal data or personal data sets or by automated means, such as: collection, registration, organization, structuring, storing, adapting or modifying, recovering , consultation, use, disclosure by means of transmitting, disseminating or otherwise making available, aligning or combining, restricting, deleting or destroying.

Special Personal Data

Personal data revealing racial or ethnic origin, political political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

Please note that AmRest Coffee does not process special categories of personal data.

Thank you for patiently reading this document!