PRIVACT NOTICE FOR RECRUITMENT
The service for handling recruitments and simplifying the hiring process (the "Service") is powered by Teamtailor on behalf of Chromaway AB ("Chromaway", “we” “us”). The information in this Privacy Notice explains how we as a data controller under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) process personal data about users using the Service ("Users”).
2. Collection of personal data
2.1 When and how we collect personal data
We collect personal data directly from Users when they:
- make an application through the Service;
- use the ‘Connect’ function within the Service to subscribe to future job openings;
- provides identifiable data in the chat (provided through the website that uses the Service) and such data is of relevance to the application procedure; and
In addition to information collected directly from the Users, we collect data from third parties, such as via social media plugins from Facebook and Linkedin and through external recruiting agencies. This is referred to as ‘Sourcing’ and be manually performed by our employees or automatically in the Service.
2.2 The types of personal data collected and processed
The categories of personal data that can be collected through the Service can be used to identify natural persons from names, e-mails, pictures and videos, information from Facebook and LinkedIn-accounts, answers to questions asked through the recruiting, titles, education, cookie ID, statistical data regarding how Users use the Service and other information that Users or others have provided through the Service. Only data that is relevant for the recruitment process is collected and processed.
2.3 Purpose and lawfulness of processing
We will process the Users’ personal data based on our legitimate interest to:
- fulfilling and administrating the recruitment process;
- storing information about rejected candidates to defend against potential legal claims under the Swedish discrimination act (2008:567); and
We will process the Users’ personal data if the Users consent to:
- storing recruitment information for the purpose of future job opportunities;
- storing and use of external sourcing-tools to the recruitment process; and
The Users have the right to withdraw his or her consent at any time, by contacting us using the contact details listed under 4.
2.5 Storage and transfers
The personal data collected through the Service is stored and processed inside and outside the EU/EEA through Teamtailor and its sub-processors. For a complete list of the sub-processors used and the location of the transfers of personal data, read more here.
In the case personal data is transferred outside the EU/EEA, we have entered into standard contractual clauses by the EU-commission and conducted adequate transfer impact assessment in accordance with applicable laws and guidelines. To obtain documentation regarding such clauses and assessment, contact us using the contact details listed in 4.
We may transfer personal data to authorities or legal advisors in case criminal or improper behavior is suspected, authorities, legal advisors or other actors, if required by us according to law or authority’s injunction.
2.6 How long the personal data will be processed
If a User does not object, in writing, to the processing of their personal data, the personal data will be stored and processed by us in order to fulfill the recruitment process.
Rejected candidates will be stored up to twenty-four months as we have a legitimate interest to defend against potential legal claims. After this time-period, the relevant personal data will be erased.
Users that have consented to future job opportunities will be stored for up to twenty-four months. After this time-period, we will send out a reminder to keep your personal data for another twenty-four months should you choose to opt-in. In the case you opt-out or do not answer the reminder, the relevant personal data will be erased.
3. Users’ rights
3.1 Users have the right to request information about the personal data that is processed by us using the contact details listed in 4. Users have the right to one (1) copy of the processed personal data which belongs to them without any charge. For further demanded copies, we has a right to charge a reasonable fee on the basis of the administrative costs for such demand.
3.2 Users have the right to, if necessary, rectification of inaccurate personal data concerning that User, via a written request, using the contact details listed in 4.
3.3 The User has the right to demand deletion or restriction of processing, and the right to object to processing based on legitimate interest under certain circumstances.
3.4 The User has the right to revoke any consent to processing that has been given by the User.
3.5 The User has under certain circumstances a right to data portability, which allows the User to obtain and reuse their personal data for their own purposes across different services.
3.6 User has the right to lodge a complaint to the supervisory authority regarding the processing of personal data relating to him or her, if the User considers that the processing of personal data infringes applicable data protection laws.
For questions, further information about our handling of personal data or for contact with us in other matters, please email us at: firstname.lastname@example.org.