DW&P Dr. Werner & Partner (hereinafter referred to as 'DW&P' and/or 'Service Provider') is the brand under which the member firms of company DW&P Services LTD operate and provide professional services.
These include:
- Joerg Werner - Advocate & Legal Practitioner
- DW&P Services LTD
Together, these firms form the DW&P network.
Kindly note that for other services, such as Audit and Bookkeeping, DW&P works collaboratively with:
- Borg Galea Audit Ltd
- Servox Ltd
This Privacy Notice describes how DW&P collects and processes personal data of candidates (or job applicants), as well as the steps taken to ensure the protection of such information.
We take data privacy seriously and are committed to handling your personal data in a professional manner and in compliance with the applicable data protection and privacy legislation.
This Notice has been drawn up in accordance with the General Data Protection Regulation (EU) 2016/679 (the "GDPR"), the Data Protection Act (Chapter 586 of the Laws of Malta) and any subsidiary legislation as may be amended from time to time.
It is important that you read this Candidate Privacy Notice, so that you are aware of how and why we are using your information when you apply for a position with DW&P.
1. Introduction
As part of the recruitment process, the Company collects and processes personal data relating to candidates. The Company is committed to being transparent and compliant with its data protection obligations.
Data Protection Principles
- Lawful, fair and transparent processing
- Collection only for specified, explicit and legitimate purposes
- Adequate, relevant and limited to what is necessary
- Accurate and kept up to date
- Identifiable data retention
- Not kept longer than necessary
- Confidential and appropriately secured
By submitting your personal data, you declare that:
- You have read, understood and accepted this Notice
- Information provided is complete and truthful to the best of your knowledge
- Incorrect statements may lead to rejection of your application
- Consent was obtained from third parties whose data is included
- You authorise DW&P to verify statements and conduct necessary checks
2. Personal Data Collected
- Name, surname, contact details (phone, email)
- Curriculum Vitae with experience, employment history, qualifications, skills
- Information on entitlement to work in Malta
- Other data requested in connection with employment
Data is stored on directly managed systems including HR management platforms.
3. Purpose of Processing
| Personal Data | Purpose | Legal Basis |
|---|---|---|
| Name, Surname, Contact Details | Identify and communicate with candidate; take steps prior to contractual agreement | Request of data subject |
| Curriculum Vitae | Recruitment and selection purposes | Request of data subject |
| Clean record (where applicable) | Employment purposes | Legitimate interests of data controller |
| Entitlement to work in Malta | Verify employment license for third-country nationals | Legal compliance obligation |
4. Disclosure of Data
Data may be shared internally and externally for:
- Legal and/or contractual obligation compliance
- Court orders, administrative/judicial process response
- Lawful public authority requests
- Company, individual, or third-party interest protection
- Service assignment, reorganization, or transfer
- Litigation establishment, exercise, or defence
Personal data shall not be shared with unrelated third parties without explicit consent.
5. Data Security
Various controls and internal policies protect data against unauthorised access, disclosure, alteration, loss or destruction. Ongoing confidentiality, integrity, availability, and resilience of systems is ensured. Breach notification is carried out per applicable law.
6. Data Retention
- Unsuccessful applications: 6 months retention, or up to 1 year if via recruitment agency
- Successful applications: transferred to personal employee file, retained throughout employment
- Post-onboarding: Data Retention Policy available on request
7. Your Rights
Your rights include: the right to be informed, access, rectification, erasure, restriction of processing, objection, data portability, knowledge of automated decision-making, lodging a complaint with the IDPC, and withdrawal of consent.
Contact: gdprcompliance@drwerner.com or +356 21377700
Response: 1 month, extendable to 3 months for complex requests.
Supervisory Authority: Office of the Data Protection Commissioner (info@idpc.org.mt)
8. Failure to Provide the Information
There is no statutory or contractual obligation to provide data, but failure to do so may prevent the proper processing of your application.
9. Contact Us
Email: krainer@drwerner.com
Mail: DW&P Malta Limited, Phoenix Business Centre, Old Railway Track, Santa Venera SVR 9022, Malta
10. Changes to This Notice
This Notice may be amended from time to time. Material changes will be communicated with notification of your choices.
