CCP (hereinafter referred to as “CCP”, “we,” “our,” “us”) is committed to maintaining the accuracy, confidentiality and security of all personal data. This Privacy Policy describes CCP’s processing of personal data in the context of our recruitment procedures.

This Privacy Policy applies to the personal data of all individuals who seek to become employed at CCP (collectively, referred to as “applicant” or “you”).

If you are unsure of how this Privacy Policy applies to you, please contact our Data Protection Team for more information using the contact information set out below.

1. Purpose and compliance with law

CCP is committed to comply with applicable data protection legislation at all times. This Privacy Policy is based on the General Data Protection Regulation 2016/679 (“GDPR”).

2. Personal data collected and processed by CCP

We collect and maintain different types of personal data about our applicants, as different jobs may require the processing of different types of personal data.

The following data is collected and further processed from applicants and potential candidates:

personal details, including name, e-mail address, phone number and current location;
comments on job interests at CCP;
portfolio URL, LinkedIn URL, other URL and skype name;
information on work experience;
CV and cover letters; and
other data you elect to provide to CCP (e.g. data on qualifications, languages, professional skills, photograph, hobbies and interests).

For short-listed applicants CCP may also process data collected from interviews and public social media sites.

If applicants consent, we may also process data collected through the use of cookies on our recruitment platforms. Additional information about such processing can be found in the cookie banners.

As a general rule, we collect personal data from applicants, either directly or via social sites, such as LinkedIn. We may however collect personal data from third parties, such as from any references you provide. We will notify you if any further information is collected from third parties.

3. Why do we collect the personal data and on what grounds?

The personal data we collect about you is used to evaluate your application, to assess your capabilities and qualifications for a job with CCP, to conduct reference checks and to communicate with you throughout the recruitment process. This processing is necessary in order to take steps at your request prior to entering into an employment contract, as applicable.

Some data is necessary for us to be able to evaluate your job application, such as name, surname, e-mail and CV. Other personal data is voluntary. If you fail to provide the necessary data we may be unable to consider your job application.

4. To whom is your personal data disclosed?

We may share your personal data with consultants and other third parties who assist us with evaluating and selecting the best candidate for CCP. Access to your personal data may also be provided to third parties which provide CCP with general information technology and data processing services.

These third parties may be established outside the European Economic Area (“EEA”). However, we only transfer your personal data to countries outside the EEA if such transfer is permitted under applicable privacy legislation.

Your personal data may be disclosed as permitted or required by applicable law or regulatory requirements or to comply with valid legal processes such as search warrants, subpoenas or court orders. In addition, personal data may be disclosed or transferred to a third party in the event of a change in ownership of CCP.

5. How do we protect and safeguard your information?

CCP maintains physical, technical and procedural safeguards that are appropriate to the sensitivity of the personal data in question, including access controls. These safeguards are designed to protect your personal data from loss and unauthorized access, copying, use, modification or disclosure.

6. How long does CCP keep your data?

Applications and accounts will be stored for two years from the date you last contacted us. We find it necessary to keep such data for two years, as the candidate pool in the gaming industry is not large and having a good source to refer to for our recruiting is vital for us. You can withdraw your application at any time in the online recruitment system or by sending a withdrawal request to our Data Protection Team.

In case you have plural applications open under the same account, your account details will be retained until your last application has been deleted in accordance with the above.

If you become an employee of CCP, the data we collect about you during the recruitment process may become part of your employee file and used for employment related purposes.

In certain instances, you have the right to have your application data erased, such as if you withdraw your consent.

7. How can you access and verify the accuracy of your personal data and, if necessary, correct it?

The data you submit to us must be true, complete and not misleading. If your personal data happens to change during the application process, please keep us informed of such changes. You can view and rectify some elements of your personal data in the online recruitment system, or request that our Data Protection Team rectify your data.

As an applicant, you have the right to access the personal data CCP has collected about you and to be informed about the purpose of its collection. You may also be entitled to a copy of the personal data undergoing processing. Furthermore, you may under certain circumstances and where technically feasible, have the right to request us to transfer your application data to a third party.

You may also have the right to request us to restrict the processing of your personal data, for example if you object to its processing, but prefer the data not to be erased.

If the processing of your personal data is based on CCP’s legitimate interests, you have the right to object to the processing, following which we must stop the processing unless we demonstrate a compelling legitimate ground for the processing which override your interests.

Your rights to access, erasure, restriction and portability of data are however not absolute. In those instances where we cannot accept your request, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

Please refer all requests concerning your rights to our Data Protection Team.

8. Inquiries or concerns

If you have any questions about this Privacy Policy or how we manage your personal data, please contact our Data Protection Team by sending an email to request@privacy.ccpgames.com. You can also contact our Data Protection Officer at dpo@ccpgames.com.

CCP can also be contacted at the following address:

Bjargargata 1

102 Reykjavik

Iceland

If you are unsatisfied with our response, you are entitled to make a written submission to the respective data protection authorities, including the Icelandic Data Protection Authority (www.personuvernd.is).

9. Revisions to this Privacy Policy

CCP may make changes to this Privacy Policy to reflect changes to our legal or regulatory obligations or to the manner in which we process your personal data.

Any changes to this Privacy Policy will be effective from the time they are posted on our website (ccpgames.com/applicant-privacy-policy).

Effective Date: 16 May 2018.

Last Modified: 25 March 2025.