1) Government authorities (police, tax authorities, Kronofogden, Official statistic records or
other authorities) if we are required by law or in suspicion of crime.
2) Companies that help us with auditing and migration board processes, such as KPMG and
When your personal data is shared with a company that is personally responsible for personal
data, it is that company’s privacy policy that is applied.
We constantly strive for your personal information to be processed within the EU/EES, our own IT systems are also within EU/EES. However, in case of systematic maintenance and support we may have to transfer the data to a non-EU/EES country. If we share your information with a personal data processor (or through a subcontractor) who is established or stores information in a non-EU/EES country, they are only to share personal information legit to the purpose. With the exception for Name, Username and contact details in case it’s about setting up an account in order to do work.
We never save your personal information longer than what is necessary for each purpose. See more about the specific storage period for each purpose.
Right to access. If you would like to have a deeper insight about what personal information we process about you, you may request access to the information (the information is provided in a registry drawing indicating purpose categories of personal data, categories of recipients, storage periods, information about and where the data has been collected). Please note that if we receive a request for access, we might ask for additional information to ensure efficiency of how the request is handled and that the information is provided to the correct person.
Right to rectification. You may request for your personal information to be corrected if the data is incorrect. Within the stated purpose, you also have the right to complement any incomplete data.
Right to deletion. You may ask to delete your personal information that we process if:
● The information is no longer necessary for the purposes for which they have been collected or processed.
● You oppose an interest deliberation we have based on legitimate interest and your objection is superior to our legitimate interest.
● Personal data is processed illegally.
● Personal data must be erased to comply with a legal obligation we must include.
Keep in mind that we may have the right to deny your request if there is any legal obligations that prevent us from immediately deleting certain personal information. These obligations derive from accounting and tax legislation, banking and labour legislation etc.. It may also be possible that our process is necessary for us to determine, enforce or defend legal claims. If we are prevented to meet a request of erasure, we will instead block the personal data from being used for purposes other than the purpose that prevents the requested deletion.
Right to restriction. You are entitled to request a limited processing of your personal data. If you oppose that the personal data we process is correct, you may request limited treatment during the time we make sure that the information processed is correct. If we no longer need the personal information for the stated purposes, but you need them to determine, enforce or defend legal claims, you may request limited processing of our data. This means that you can request that we do not delete your personal information.
If you oppose to an interest bearing of legitimate interest that we have made as a legal basis for a purpose, you may request limited treatment for the time we need to evaluate whether our legitimate interests overweigh your interest of getting you personal data deleted.
If the usage has been limited in accordance with any of the situations above, we may in addition to the actual storage, process the data to determine, enforce or defend legal claims, to protect someone else’s rights or if you have given your consent.
Right to object to certain treatments. You are always entitled to object to all processing of personal data based on a balance of interest.
Legitimate interest: In cases where we use a legitimate interest as a legal basis for a purpose, you are entitled to object to the usage. In order to continue processing your personal information after such objection, we need to display a compelling legitimate reason for the current usage that overweighs your interest, rights or freedom. Otherwise we may only process the personal data to determine, exercise or defend legal claims.
Right to
you are entitled to request the data relating to you which you have provided to us, to another person responsible for personal information.
How do we protect your personal information?
We use IT-systems to protect the privacy, integrity, and access to personal data. We have made certain security measures to protect personal data against unauthorized or illegal
3
data transfer. If our right to process your personal information is based either on your
consent or of an agreement with you,
treatment such as unauthorized access, loss, destruction or damage. Only those who actually need to process your personal information to fulfil our stated purposes have access to them.
What if we make changes to this policy?
We may make changes to our policy. For updates that are critical to our processing of personal data (such as change of specified purposes or categories of personal information) or updates that are not critical to the treatment but which may be of crucial importance to you, you will receive information by email in good time before the update starts to apply. When we provide information about updates, we will also explain the meaning of the update and how it will affect you.
Treatments that are made with your personal data
1. Recruitment Process - applicantsProcessing that is done:
- ● First Selection of candidates:
As soon as you send in your application, or approve that you want to participate in our process after being contacted, you become a part of our recruitment process. When we have a number of applicants we start our screening after the candidates that are the best match in terms of competence/experience required for that position.
- ● Interview Process:
Should you be selected to move on in the recruitment process, you will be contacted for either a personal meeting or a phone meeting. In this meeting, the interviewer may come to take notes.
Should you move on from that interview, you may come to meet more people from Looklet that will also take notes during the interviews.
As a part of the recruitment process Looklet often makes competence tests in second or third stage (may come to vary). These tests are used to understand how well the candidate is mastering the skills required and can also come to be compared to other candidates results in order to find the best match.
The interviewers can vary, but a typical process is to meet the manager, team members and someone from the Human Resources department.
- ● References
As a final step in the recruitment process we take references from people that you
have worked with in the past.
What kind of personal data do we use in order to do all of that?
- ● Name
- ● Contact Details (Phone number/E-mail)
- ● CV/Resume
- ● Personal letter
- ● Language skills
- ● Interview notes
- ● Test results
4
Sometimes the candidates/applicants chooses to voluntarily provide Looklet with additional information in which cases these are also stored.
Legal ground:
Legitimate interest: In order for us to make sure we have a good recruitment process and make the right choice in our process, we need to understand the experience of the candidate and in order to be able to compare, we also need to take notes during the process.
As it’s important to Looklet work against discrimination and for equal rights and possibilities regardless of gender, gender identity or expression, ethnicity, religion or other belief, disability, sexual orientation or age, we also take notes about working experience and personal fit to make sure that is the only factors that are of value for the process.
Storage duration: 2 years after a recruitment process has ended to be able to prove that no discrimination is taking place in our recruitment processes. This is with reference to fulfilment of the Discrimination act.
1. Saved in our databaseProcessing that is done:
● Future recruitments
Your application will only be processed for the position that you have applied for. Should you want to make your resume available for other open positions at Looklet, please click the consent checkbox when you submit your application.
Should you file a spontaneous application to Looklet, not attached to any open position, your application will be stored automatically for 2 years and be made available to the recruiting manager of the positions that might be a fit.
What kind of personal data do we use in order to do all of that?
- ● Name
- ● Contact Details (Phone number/E-mail)
- ● CV/Resume
- ● Language skills
- ● Interview notes
- ● Test results
Sometimes the candidates/applicants choose to voluntarily provide Looklet with additional information in which cases these are also stored.
Legal ground:
Legitimate interest. In order for us to make sure we have a good recruitment process and make the right choice in our process, we need to understand the experience of the candidate and in order to be able to compare, we also need to take notes during the process.
Storage duration: 2 years after a recruitment process has ended to be able to prove that no discrimination is taking place in our recruitment processes. This is with reference to fulfilment of the Discrimination act.
