Your company acts as the data controller for an employee's personal data if you hold the employment contract. If the contract is held by the agency, your company is only a data processor. We recommend consulting a lawyer.
Employee from a staffing agency – how to handle their data
Are we controllers or processors if we hire employees through a staffing agency?
Written by Petr Pech