Candidate Privacy Notice

Last updated: 20 October 2026

This notice explains how Emma Technologies S.à r.l. uses your personal data when you apply for a job with us or when we consider you for a role. By sending us your application, you acknowledge that you have read this notice.

1. Who we are

Emma Technologies S.à r.l. ("Emma", "we", "us") is the controller of your personal data.

  • Registered address: 2 rue du Nord, L-2229, Luxembourg, Luxembourg.

  • Trade and Companies Register (RCS): B255543

  • Contact for privacy questions, including our Data Protection Officer: security@emma.ms

2. Where we get your data

We get your data:

  • from you, when you send us your application or contact us

  • from people who refer you, such as our employees or contractors

  • from public professional profiles, such as LinkedIn, when we contact you about a role

You can apply through our website, which opens an email to join@emma.ms, or through job platforms where we post our vacancies, such as LinkedIn (Easy Apply).

If we get your data from someone other than you, we'll tell you when we first contact you, and at the latest within one month, and share this notice with you.

3. What data we collect

We collect:

  • Application data: information in your CV and cover letter, such as your name, contact details, work history, education and skills

  • Correspondence: emails and messages we exchange during the hiring process

  • Interview and assessment data: interview notes, feedback from interviewers, and results of any test tasks

4. Why we use your data and our legal basis

Purpose Legal basis
Reviewing your application and deciding whether to make you an offer Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR)
Contacting you about a role when you haven't applied, for example after a referral or from your public profile Our legitimate interest in finding suitable candidates (Art. 6(1)(f) GDPR)
Considering you for other open roles that match your profile while we keep your data Our legitimate interest in finding suitable candidates (Art. 6(1)(f) GDPR)
Keeping your data after the hiring process ends, so we can respond to any legal claims Our legitimate interest in defending legal claims (Art. 6(1)(f) GDPR)

5. Who has access to your data

Only the people involved in hiring for the role can see your data: our hiring team and the relevant hiring managers.

We use Google Workspace (Google Cloud EMEA Limited) to receive and store application data. Google acts as our processor and only handles your data on our instructions.

If you apply through LinkedIn (Easy Apply), your application is collected and stored by LinkedIn Ireland Unlimited Company, which acts as our processor for this purpose. When we contact you via LinkedIn, LinkedIn processes your profile and messages as an independent controller under its own Privacy Policy.

We don't sell your data or share it with third parties for marketing.

6. Transfers outside the EEA

Google may process data outside the European Economic Area, including in the United States. These transfers are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.

LinkedIn may also transfer data outside the EEA. These transfers are covered by Standard Contractual Clauses.

7. How long we keep your data

We keep your data for 6 months after the position is closed, or 6 months after our last contact with you if your data isn't linked to a specific open role. After that, we delete it.

If you're hired, your application data becomes part of your personnel file.

8. Your rights

You can ask us to:

  • send you a copy of the personal data we hold about you

  • correct data that is wrong or incomplete

  • delete your data. We may keep some data if we need it to deal with a legal claim.

  • stop using your data while we check a concern you've raised, for example whether it's accurate

  • send your data to you or another company in a common format

You can also object to us using your data based on our legitimate interests, for example if you don't want us to consider you for other roles.

To make a request, email security@emma.ms.

If you're unhappy with how we handle your data, you can complain to the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), at www.cnpd.lu.

9. Do you have to give us your data?

No, sharing your data is voluntary. However, we can't consider your application without your CV and contact details.

10. Automated decision-making

A person reviews every application. We don't use automated tools to make hiring decisions.

11. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last updated.

Explore now