Definitions
To make the policy actionable, we define core terms used throughout. These definitions align with common recruitment practice and are illustrated by short candidate scenarios where appropriate.
Personal data: any information that identifies or can reasonably identify an individual, such as name, contact details, CV content, employment history or qualifications. Example scenario: candidate CV data used to match to a client role and then anonymized for an initial shortlist.
Processing: any operation performed on personal data, including collection, storage, analysis, disclosure and deletion. For example, processing includes screening CVs against a client job specification and sharing anonymized shortlists with hiring managers.
User: a candidate, client contact, or visitor who interacts with evolixix services or the evolixix.digital website for recruitment-related activities.
Service: recruitment, advisory and candidate management services provided by evolixix to clients and candidates, including interview coordination and skill-gap analysis focused on oil & gas managerial roles.
Cookies: small data files placed on a device to help the website remember preferences, provide analytics and tailor candidate experience. Cookies support practical scenarios like preserving a partially completed application form.
What data we collect
We collect candidate data required to evaluate suitability for roles, support communications and comply with legal obligations. Collection methods include forms, email CV submissions, public professional profiles and third-party screening services. Below are grouped lists to make review straightforward.
Data you provide directly
When you apply, register or contact us, you supply information used to assess fit and communicate next steps. Examples are drawn from typical placement cases.
- Full name and preferred contact details (email, phone)
- Resume/CV, employment history, roles and responsibilities
- Education, certifications and professional licenses related to oil & gas
- Assessment results, interview notes and recruiter feedback where relevant
- Location and eligibility to work in Thailand; case scenario: assessing relocation feasibility for a regional manager role
- Candidate preferences and consent choices (communication preferences, role types of interest)
Data collected automatically
When you use the evolixix.digital website, we automatically collect technical and usage data to support functionality and improve recruitment workflows. Practical use: analytics showing which role pages attract senior operations managers from Thailand.
- IP address and approximate geographic information
- Device and browser information
- Pages visited and navigation paths on evolixix.digital
- Referrer and campaign data (how you arrived at the site)
- Form interaction data (time to complete an application, dropped forms)
- Cookies and similar identifiers
Data from third parties
We may supplement candidate profiles with data from trusted partners, publicly available professional networks, and client referrals to form a fuller assessment where needed for a role scenario.
- Client-provided candidate information for role-specific shortlists
- Background screening and verification providers (where candidate consent is provided)
- Professional networks and job boards when profiles are publicly shared
Purposes for which we process data
We process personal data to deliver recruitment services, evaluate candidates against client role requirements, and support operational needs. Each purpose is linked to practical recruitment activities and examples to clarify uses.
- Candidate assessment and role matching for oil & gas managerial positions
- Communicating with candidates and arranging interviews or assessments
- Preparing anonymized shortlists and case summaries for clients
- Conducting background checks and verification when consented
- Improving our website and candidate experience using aggregated analytics
- Compliance with legal obligations and recordkeeping for recruitment activities
- Operational administration, billing and client reporting related to placed candidates
- Maintaining candidate records for future suitable role alerts when consented
Legal bases for processing
We process personal data based on lawful grounds appropriate to recruitment services and candidate interactions. Below are the typical legal bases we rely on for different activities.
- Performance of a contract or steps at a candidate's request (e.g., processing an application)
- Legitimate interests (e.g., candidate matching, fraud prevention and improving recruitment processes) where balanced against candidate rights
- Consent (e.g., for sharing sensitive data or conducting certain background checks)
- Legal obligation (e.g., recordkeeping required by law or regulation)
Rights for data subjects in the EEA (if applicable)
If you are located in the European Economic Area, you may have additional rights under EU law. We describe them below and provide practical steps to exercise each right with examples from recruitment cases.
- Right of access — request a copy of your personal data held by evolixix to review what was used in candidate assessments
- Right to rectification — request corrections to inaccurate CV details or contact information
- Right to erasure — request deletion of your data when retention is no longer necessary and no legal reason to retain it exists
- Right to restrict processing — request limited use of data while disputes are resolved
- Right to data portability — where feasible, receive data in a structured, commonly used format for transmission to another recruiter
- Right to object — object to processing based on legitimate interests, for example targeted outreach for certain role types
Cookies and similar technologies
Our site uses cookies to support basic functionality, analytics and preferences. Below we summarize common types and how they support recruitment workflows such as preserving a filled application when you return.
Types include session cookies (temporary, required for form submission), persistent cookies (preferences), and third-party cookies (analytics services). We do not use cookies to infer sensitive personal details without explicit consent.
Categories: essential (site operation), analytics (usage measurement), preferences (saved settings), marketing (optional tracking for role promotion).
You can manage cookie preferences via your browser settings or the cookie control provided on evolixix.digital. Disabling non-essential cookies may affect some features such as saved application drafts.
View full cookie policy
When we share your data
We share candidate information with the minimum necessary parties to progress recruitment scenarios, always mindful of confidentiality. Typical sharing partners and purposes are listed below with illustrative examples.
- Client companies and hiring managers during shortlist and interview stages (anonymized initially where requested)
- Background check and verification providers with candidate consent
- Service providers supporting operations (e.g., cloud hosting, analytics) under data processing agreements
- Legal or regulatory authorities when required by law
- Third-party platforms for job posting if you apply through an integrated board
- Subsidiaries or affiliates working on a specific recruitment engagement
International data transfers
Recruitment often requires sharing data with clients or partners outside Thailand. We assess transfers and apply appropriate safeguards. Example: sharing an anonymized management candidate profile with a regional headquarters in another country.
When transferring data internationally, we use standard contractual clauses, data processing agreements, or rely on other lawful transfer mechanisms to ensure an adequate level of protection.
Data retention
We retain candidate data only as long as necessary for recruitment purposes, contractual obligations or legal requirements. Retention periods are designed around typical hiring timelines and case needs.
Account and profile data: retained while you have an active account and for a limited period afterward if you opt in for future role alerts.
Communications and application records: retained for a period appropriate to the recruitment engagement (commonly 12–24 months) to demonstrate compliance and support follow-up.
System logs and analytics data: retained in aggregated or pseudonymized form for operational monitoring and service improvement.
Deletion requests will be assessed and actioned subject to legal or contractual retention requirements. To request deletion or range-limited retention, contact the privacy contact below with relevant case details.
Security of personal data
We implement industry-standard administrative, technical and physical safeguards to protect candidate data. Security measures are applied based on risk and the sensitivity of data involved in a recruitment case.
- Encryption of data in transit and at rest where applicable
- Access controls and role-based permissions for recruiter systems
- Regular security reviews, staff training and restricted physical access to sensitive systems
Your rights and how to exercise them
You can exercise your rights to access, correct or request deletion of your personal data. For recruitment-specific queries or to act on your rights, contact our data protection point of contact. Provide enough detail to locate the relevant candidate record and describe the action you request. We will acknowledge and respond within applicable legal timeframes.
- Right to access personal data we hold about you, including copies of records and categories of processing.
- Right to request correction of inaccurate or incomplete personal information we maintain.
- Right to request deletion of personal data where retention is no longer necessary or lawful.
- Right to restrict or object to certain types of processing, including direct marketing and profiling.
- Right to receive your personal data in a structured, commonly used machine-readable format and to transmit it to another controller where technically feasible.
- Right to withdraw consent at any time for processing activities that rely on consent, without affecting processing prior to withdrawal.
- Right to lodge a complaint with a supervisory authority if you believe your rights under applicable data protection laws have been infringed.
- Right to obtain information about automated decision making and profiling and to request human review where applicable.
How to exercise your data rights
To exercise any privacy right listed above, submit a request describing the specific information or action you want. Include sufficient details to verify your identity and the scope of the request. We will respond with next steps and any clarifying questions. When you submit a curriculum vitae or job application through evolixix.digital, you may update or withdraw your submission following these procedures.
[email protected]
We aim to acknowledge receipt of rights requests within 7 business days and to provide a substantive response or update within 30 calendar days. If more time is needed due to complexity, we will notify you with an estimated timeframe.
Marketing communications and preferences
We may contact candidates and clients about relevant job opportunities, industry updates, event invitations, and service announcements. Communications are tailored using basic profile data and expressed preferences. Marketing messages are only sent where there is a legitimate interest or where consent has been given. Messages reference real recruitment cases and role scenarios to keep information practical and relevant.
You may opt out of marketing at any time by following the unsubscribe link in any marketing email, or by emailing [email protected]. Opting out will not stop transactional messages related to your active applications or recruitment processes.
Children's data
Evolixix does not intentionally collect personal data from children under the age of 16. Job applications and professional profiles must be submitted by persons of legal working age in Thailand and relevant jurisdictions. If we discover we have collected data from a minor without appropriate consent, we will take reasonable steps to delete that information.
Third-party links
Pages on evolixix.digital may link to partner sites, job boards, or employer career pages. We do not control the privacy practices of third parties. Review each linked site's privacy policy before submitting personal information. We include links for candidate convenience and illustrative hiring scenarios.
Changes to this privacy policy
We may update this privacy policy to reflect changes in legal requirements, business practices, or the ways we process candidate and client data. Material changes will be posted on evolixix.digital with an updated effective date. Non-material edits may be shown without direct notice, but we will keep a revision history for transparency.