Vitec Aloc A/S
5000 Odense C
CVR-nr.: 1478 8484
(hereafter 'the Company', 'us', 'we' or 'our')
The Policy is prepared and made available to comply with the (EU) General Data Protection Regulation (2016/679 of 27 April 2016) (the 'GDPR') and the rules included herein on information to be provided to you.
2. Types of personal data we process about you
We process personal data about you when this is necessary and in accordance with the applicable legislation. Depending on the specific circumstances, the processed personal data include the following types of personal data: name, address, phone number, email address, social security number, CV, profile picture, educational documents, references from former employers, date of birth, nationality and personality tests.
We do not process sensitive personal data, i.e. the special category of personal data defined in article 9(1) of the GDPR.
We may process your criminal records in connection with the recruiting process. In such cases, we do this in accordance with applicable laws, such as section 8(3) of the Danish data protection law requiring explicit consent.
As a general rule, we only collect personal data about you from you. If specific circumstances allow or require us to collect personal data about you from someone else than you, we will inform you hereof, which may be done by updating this Policy.
If we need to collect more personal data than what is specified above, we will inform about this. Such information may be provided by updating this Policy.
3. Purposes for processing the personal data
Your personal data collected and processed by us will be processed for the following purposes:
- To process job applications and to recruit the relevant persons.
- To store and process personal data to the extent that it is a requirement underapplicable law, including bookkeeping in accordance with applicable law.
4. Legal basis for processing personal data
We only process your personal data when we have a legal basis to do so in accordance with the GDPR. Depending on the specific circumstances, the processing of personal data is done on the following legal basis:
If we have asked for your consent for the processing of specific personal data, the legal basis for the processing of such personal data is your consent, cf. article 6(1)(a) of the GDPR, as the consent can always be withdrawn by contacting us via the contact details provided in section 9 of this Policy, and, if the consent is withdrawn, the personal data processed on the basis of consent is deleted, unless it can or must be processed, for example, in order to comply with legal obligations.
The processing is necessary for compliance with applicable legislation, cf. the GDPR, article 6(1)(c), including any specific rules on the processing of personal data in the employment context as provided in article 88 of the GDPR such as section 12(1) of the Danish data protection law.
The processing is necessary for the purposes of the legitimate interests where such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, cf. the GDPR, article 6(1)(f), including any specific rules on the processing of personal data in the employment context as provided in article 88 of the GDPR such as section 12(2) of the Danish data protection law.
- The processing is necessary in order to protect the vital interests of the data subject or of another natural person, cf. the GDPR, article 6(1)(d).
5. Disclosure and transfer of personal data
We only pass on personal data to others when the law allows it or requires it. Our company is part of a concern/company group where personal data is shared between the group companies depending on the circumstances.
6. Erasure and retention of personal data
We ensure that the personal data is deleted when it is no longer relevant for the processing purposes as described above. We always retain personal data to the extent that it is an obligation from applicable law, as is the case with for example accounting and bookkeeping materials and records.
When the candidate becomes an employee, the employee’s personal data from the application process are transferred/moved to regular HR management. If the candidate does not become an employee, the general rule is that the personal data is erased after 6 months in accordance with applicable law. Notwithstanding the above, specific reasons related to employment law may necessitate the continuous processing of the personal data. This may have different implications. For example, we may process the applications for a longer period to prove that there has been no unlawful discrimination in the selection process, when we consider this necessary. Similarly, it may be relevant to process the personal data for a limited period if a similar relevant position may become available during this period, or if another existing candidate opts out of the application process.
If you have any questions about our retention of personal data, please contact us at the email mentioned at the bottom of this Policy.
7. Your rights as a data subject
As a data subject under GDPR, you have number of rights that we can assist you with. You can also help yourself on jobsdenmark.vitecsoftware.com/data-privacy, where you are able to request and erase your data yourself.
Your rights include the following:
- The right of access:
You have the right to access the personal data we process about you, to obtain information about for what purposes we process the personal data is processes and whether we disclose or transfer your personal data to others.
- The right to rectification:
You have a right to ask for rectification of inaccurate personal data concerning you.
- The right to erasure:
In certain cases you have a right to obtain the erasure of personal data concerning you before the time when erasure would normally occur.
- The right to restrict processing:
You have, in certain situations, a right to have the processing of your personal data restricted. If so, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest in the European Union or of an European member state.
- The right to object:
You have, in certain situations, a right to object to the otherwise legal processing of your personal data. Objection can also be to the processing of personal data for the purpose of direct marketing when or if this occurs.
- The right to data portability:
You have, in certain situations, a right to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance.
More information about data subject rights can be found in the guidelines of the national data protection authorities.
If you wish to make use of your rights as described above, please use the contact details provided at the end of this Policy.
We strive to do everything to meet wishes regarding our processing of personal data and the rights of data subjects. If you or others despite our endeavours wish to file a complaint, this can be done by contacting the national data protection authorities.
8. Changes to this Policy
We reserve the right to update and amend this Policy. If we do, we correct the date and the version at the top of this Policy. In case of significant changes, we will provide notification in the form of a visible notice, for example on our website or by direct message.
If you have questions or comments to this Policy or if you would like to invoke one or more data subject rights, please contact us at firstname.lastname@example.org.