Answer:
A company will only process your personal data when they have a legal basis for doing so.
The legal basis to process personal data will one of the following:
1.For the performance of contract: for recruitment process, for human resource management, and to manage those carrying out work on behalf of PI.
2.For legal requirement: to comply with applicable regulatory obligations and employment law.
3.For their legitimate interests: to administer their website, to manage their donations, to carry out research and investigations and to manage volunteer.