How we are processing personal data in our recruitment processes
10. Privacy Policy for Candidates
We process personal data about you who have applied for employment at Lindholmen Science Park AB (“Candidates”).
What personal data do we process?
We process your first and last name, email address, telephone number, address, photo, CV, educational and professional experience, information from references where applicable and other information provided in application documents or in other ways in the recruitment process as well as interview notes where applicable.
We may also process information that is available on e.g LinkedIn.
We also process information about your nationality.
What are the purposes of our processing of your personal data and what legal basis do we base such processing on?
We process your personal data for the following purposes:
- to collect and review applications, CV, personal letters and grades/diplomas etc.;
- to assess and evaluate the Candidate based on the collected information, individually and in relation to other candidates;
- recruitment administration such as the booking of interviews and associated communication;
- to safeguard and exercise our legal rights.
This processing is based upon that the processing is necessary for the purposes of our legitimate interest to recruit employees with the right competence.
We process your personal data as a Candidate based on consent for the following purposes:
- to save your personal data in a candidate pool for possible future available vacancies within Lindholmen Science Park;
We also process your personal data as a Candidate for the following purposes:
- to negotiate with relevant trade unions when applicable;
- to fulfill our legal obligations and to safeguard and exercise legal rights according to the Swedish Discrimination Act (Diskrimineringslagen 2008:567).
This processing is based upon that the processing is necessary for compliance with legal obligations that we are subject to.
We process information about your nationality for the purpose of complying with export control regulations to which we are subject.
From where do we collect your personal data?
We collect the personal data directly from you. In addition to the personal data that you as a Candidate provide us with, we may also collect personal data from the references that you have listed.
We may also retrieve information that is available on e.g LinkedIn.
Who do we share your personal data with?
We share your personal data with third parties that process personal data on our behalf, so called processors, e.g., suppliers of support and maintenance of IT- and cloud services, etc.
We may also transfer personal data to third parties acting as independent controllers or joint controllers with Lindholmen Science Park, if such transfer is required by applicable law, or if we have another legal ground for such transfers.
We may also transfer personal data of Candidates to third parties acting as independent controllers, e.g., trade unions, the Swedish government and third parties for the purpose of protecting and exercising our legal rights, in connection with labor law disputes, etc.
For how long do we process your personal data?
Personal data processed for the purpose of employing you for an announced role will be processed for as long as the recruitment process is ongoing and will thereafter be processed for another twenty-four (24) months, for us to be able to safeguard and exercise our legal rights according to the Discrimination Act (Diskrimineringslagen 2008:567). After this mentioned time period, the personal data will be deleted.
If you as a Candidate have given us your consent to save your personal data for possible future recruitment opportunities, the personal data will be saved for twenty-four (24) months from when the initial recruitment process for which you were a part of ended, after that the personal data will be deleted. The personal data will also be deleted if you withdraw your consent. You can easily withdraw your consent at any time by contacting us through the contact information listed on the main page.
Our processing of your nationality based on our legitimate interest for the purpose of complying with export control regulations to which we are subject will be processed until we have fulfilled our obligations in accordance with relevant regulation.
Transfer of personal data to countries outside the EU/EEA
We strive to only process personal data within the EU/EEA. When we transfer your personal data to third parties acting as our processors, e.g., supplier of the supply-, support and maintenance of IT- and cloud services, these processors may transfer data outside the EU/EEA on our behalf. In cases where our processors are transferring or processing personal data outside the EU/EEA, such processing is based either on a decision from the European Commission establishing that the country in question ensures an adequate level of protection or appropriate safeguards that ensure that your rights are protected such as standard contractual clauses adopted by the European Commission and supplementary security measures to such standard contractual clauses when necessary.
..........