Privacy notice for job applicants
In this privacy notice, we explain how NetNordic processes the personal data of job applicants.
We respect the privacy of our job applicants, and it is important to us that they can rely on their personal data being processed during the recruitment process and for the necessary period thereafter, in accordance with data protection legislation and industry best practice. We take continuous steps to maintain a high level of data protection and to ensure the best possible protection of personal data.
1. For what purpose and on what basis is my data processed?
Job applicants’ data is collected in targeted recruitment and open recruitment for the purpose of recruitment and related activities, such as comparing applicants.
The processing of personal data during the recruitment process is based on pre-contractual measures in accordance with Article 6(1)(b) of the EU General Data Protection Regulation (2016/679).
If the applicant gives his or her consent to the processing of data for purposes other than the actual job applied for, the processing will be based on the consent given in this respect. The retention of applicants' personal data for a limited period after the recruitment process has ended is justified in order to protect the legitimate interests of both parties in the event of a dispute.
2. What information is processed about me?
The primary source of information stored in the recruitment system is the job applicant himself/herself. In addition, the data consists of information generated during the recruitment process and information retrieved from public sources, such as LinkedIn, Facebook etc.
- Name and any other identifying information
- Contact information, such as telephone number, e-mail, and address
- Information related to the job application and CV, such as work experience, educational background and skills
- Information on interviews and other stages of the recruitment process
- Any other information provided by the job applicant himself/herself or retrieved from referees or public sources relevant to the recruitment decision
How long will my data be processed?
The personal data of the job applicant will be kept for 2 years after the end of the recruitment process, considering the action periods defined by the relevant laws.
3. Who processes the personal data?
The data controller is NetNordic Norway AS, www.netnordic.com, and within the organisation data is processed only by the persons who need it to carry out their tasks and the recruitment process.
Our recruitment system is provided and operated by Teamtailor AB (registered with the Swedish Companies Registration Office under registration number 556936-6668). We also use other external service providers, such as aptitude test providers, to process the data if there is a need for such processing in connection with recruitment. We have entered into an agreement on the processing of personal data with all processors in accordance with the GDPR.
No data will be disclosed or transferred outside the EU/EEA.
4. How is my data protected?
The recruitment system is built with the confidentiality, integrity and availability of personal data in mind, and data is protected through firewalls, physical facility protection, access rights, encryption technology and active monitoring, among other things.
Only a limited number of persons have access to the processing of job applicants' data. This right is based on their job functions and their role as part of the recruitment process. All users are authenticated to the system with a personal user ID and all persons processing data are bound by confidentiality.
5. What rights do I have?
Right of access and right to rectification
You have the right to obtain a copy of your personal data stored in NetNordic's registers. If there are any omissions or errors in your data, we will correct them without delay upon your request.
You can also access and edit some of your data by logging in to the system yourself.
The right to erasure and to "be forgotten"
In certain situations, the data subject has the right to request the controller to erase data concerning him or her. This right is also known as the right to be forgotten. You have the right to have your data erased if the processing was based on consent, if the data were processed unlawfully or if the data are no longer needed for the purposes for which they were collected.
This right does not apply if the processing is necessary for NetNordic to comply with a legal obligation, to fulfil a task carried out in the public interest, to exercise public authority or to establish, exercise or defend a legal claim.
Right to restrict the processing of personal data
In certain circumstances, you have the right to restrict the active processing of your data. For example, you can request restriction of processing while you await a decision on a request to rectify or erase your data.
Right to object to the processing of personal data
You have the right to object to the processing of your personal data if the processing is based on a task carried out in the public interest, in the exercise of official authority or for legitimate interests and you have a reason relating to a particular personal situation.
You also always have the right to object to the use of your data for direct marketing.
The right to transfer data from one system to another
You have the right to receive your personal data provided to NetNordic in machine-readable form from us and to transfer it to another organisation, provided that the processing is based on consent or a contract and is carried out automatically.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority if you believe that your personal data is being processed in breach of data protection law or that NetNordic is otherwise acting in breach of its data protection obligations.
6. Who do I contact about data processing or my data protection rights?
Questions about the processing of personal data in the context of recruitment can be addressed to the contact person indicated in the recruitment notice or to hr@netnordic.no
If you wish to exercise any of the data protection rights listed above, please indicate in your message at least which right you wish to exercise and which personal data are concerned by your request.
