Privacy Policy – Candidates
Coretura’s privacy notice – candidates
1. Introduction
At Evo Truck SDV AB reg. no. 559479-2094 (“Coretura”, “we”, “us”, our”) one of our main priorities is your privacy. It is important to us that you feel safe when we process your personal data. Here (in this “privacy notice”) you can learn more about what personal data we collect and process about you as a job candidate, as well as why we do it and what rights you have.
“Personal data” is any information that by itself, or together with other information, identifies a specific individual. In other words, it is any piece of information than can be linked to you. “Processing” means any use the personal data, including but not limited to the collection, recording, organization, storing, adaptation, alteration, transferring, deletion or destruction of personal data.
2. Contact information
Coretura is the data controller for the processing of your personal data as specified in this privacy notice and is responsible for ensuring that the processing of personal data is carried out in accordance with applicable data protection legislation, such as the General Data Protection Regulation (“GDPR”). If you have any questions about how your personal data are processed, please contact us by using the contact details below.
Bror Nilssons gata 12,
417 55 Göteborg, Sweden
E-Mail: privacy@coretura.com
The personal data we process, why, based on what legal basis and for how long your personal data are stored
3.1 Recruitment
During the recruitment process, we will process personal data about you in your role as a candidate (you who have applied for a position with us) and about any individual stated as a reference in a candidate’s application. The types of personal data we process about you as a candidate include, e.g., identity information, such as your name and personal identification number/co-ordination number. We also process your contact details, such as your address, email address, and phone number. Additional examples of personal data we process include your education, employment history (CV), information stated in your personal letter, grades, and interview notes. For references, we process name, title, workplace, phone number, email address, and work relationship to the candidate in question.
Primarily, we collect the personal data from you directly. In addition, we may collect information about you from the recruitment service providers we collaborate with, the references you have stated in your application, as well as information from publicly available sources, such as business social media and public registers. We collect references’ personal data from the candidate.
We use your personal data to administer our recruitment process, e.g., to evaluate your application, conduct necessary background checks and tests, and to obtain information about you from your references. We also use your personal data to save your application for future recruitments and to provide information about advertised positions to you, provided you have chosen to subscribe to such information. We also use your personal data in other aspects to comply with the legal obligations imposed on us in relation to our business and our role as a recruiter, e.g., to respond to requests from authorities or handle request from data subjects to exercise any of their rights under the GDPR.
To read more about the personal data we process, for what purposes, based on what legal basis and for how long your personal data are stored, please see more detailed information in the tables at the end of this privacy notice.
3.2 Background checks
In order to assess your suitability for the position you are applying for, we may conduct background checks on you as a candidate. If applicable, we do this with the help of an established provider of such services. We will then examine your financial situation and involvement in legal matters. Our service provider is data controller for the processing of your personal data in connection with the execution of the background check. You will receive information from our service provider about its processing of your personal data.
Background checks can be conducted to a varying extent and scope, and we will conduct them at a level that is appropriate and proportional to the position you are applying for. We only receive a report from our service provider with information that may be perceived as deviant or could pose a risk in the current appointment of the position for which you are a candidate. This procedure ensures that we do not process more personal data than necessary in relation to the purpose of the background check. We always obtain your approval before conducting a background check. If you do not approve, we may need to cancel your recruitment process.
3.3 Automated decision making
In our recruitment system, we may include screening questions to identify whether you have certain predefined minimum competences for our advertised position. Please note that if you provide a negative answer to any of the screening questions you may be removed from the recruitment process through an automatic decision mechanism in the recruitment system. In such case you will receive an automated message that your application has been declined. Please contact us if you are not satisfied with the decision and wish to have it changed. We will then review the information behind the decision as well as any additional information you provide us. The review will be conducted by a person who has the authority to change the decision if it turns out that it was made on incorrect grounds.
4. Who we share your personal data with?
In order to administer the recruitment process and to comply with laws and regulations, we sometimes need to share your personal data with others, including:
- Other companies within our group of companies or the group of one of our owners (together “group companies”).
- Service providers, such as IT service providers who manage the necessary operation, technical support and maintenance of our IT solutions, such as recruitment systems.
- External advisors and consultants who help us in different areas of our business, such as financial advisors, lawyers and auditors.
- Trade unions in the event of consultations or proceedings.
- Courts or arbitrations institutes in the event of a dispute or other proceedings.
- Authorities, such as the Swedish Financial Supervisory Authority (Sw. Finansinspektionen), the Police, the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten) and other authorities when required by law or in the event of a suspected offence/violation or request.
5. Geography
We strive to process your personal data within the EU/EEA area. However, in some situations the personal data may be processed outside the EU/EEA, such as when we share your personal data with our group companies operating outside the EU/EEA.
We always ensure that that your personal data enjoys a high level of protection, even when the personal data is processed outside of the EU/EEA. In most cases, the importing party will reside in a country that has been deemed to offer adequate protection by the EU commission or adheres to the EU-US Data Privacy Framework (GDPR, article 45). If not, we will enter into the EU Standard Contractual Clauses (GPDR, article 46). In addition, we take additional technical and organisational security measures when needed.
6. Do you have to provide your personal data
When we process your personal data, we do so, e.g., to administer the recruitment process in which you are involved and to be able to defend ourselves against any legal claims. If you do not provide the personal data we request, it may result in us being unable to assess your suitability for a position you have applied for, and therefore unable to offer you employment. If you have any doubts or concerns about providing certain personal data to us, please contact us (see section 2 above).
7. Your rights
We are accountable for your personal data being processed in a legal, transparent and open manner in relation to you, and that your personal data are accurate and up to date. You have certain rights when we process your personal data. If you want to exercise any of your rights, you can contact us by using the contact details in section 2 above. We will get back to you as soon as we can, and at the latest within one month of receiving your request. If we cannot answer your request or need more time, we will explain why.
7.1 Right of access
You have the right to know if we process personal data about you or not. If we do, you also have the right to receive information about the personal data we process and why we do it. Further, you have the right to receive a copy of all personal data we have about you. If you are interested in any specific information, please indicate this in your request. For example, you can specify if you are interested in a certain type of information, such as the specific contact details we have about you, or if you want information from a certain time period.
7.2 Right to rectification
If the personal data we hold about you is inaccurate, you have the right to have the personal data corrected. You also have the right to complete incomplete personal data, including by providing supplementary information. Once we have corrected or completed your personal data, we will inform those we have shared your personal data with (when applicable) about the update, if it is not impossible or too cumbersome. If you ask us, we will also tell you who we have shared your personal data with. If you request to have data corrected, you also have the right to request that we restrict our processing during the time we investigate the matter.
7.3 Right to erasure (right to be forgotten)
In certain cases, you have the right to request that your personal data are erased, e.g.:
- If the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, or
- When the personal data have been unlawfully processed.
If we erase the personal data following your request, we will also inform those we have shared your personal data with (when applicable), if it is not impossible or too cumbersome. If you ask us, we will also tell you who we have shared your personal data with.
7.4 Right to request restriction
Restriction means that the personal data are marked so that it may only be used for certain limited purposes in the future. The right to restriction applies:
- When you believe the personal data are inaccurate/incomplete and you have requested rectification. If so, you can also request that we restrict our processing while we investigate if the personal data are accurate/complete or not,
- If the processing is unlawful but you do not want the personal data to be erased,
- When you have objected to the processing and during the time we verify our legitimate grounds, or
- When we no longer need the personal data for the purposes for which we collected it, but you need it to be able to establish, exercise or defend legal claims.
Even if you have requested that we restrict our processing of your personal data, we have the right to use it for storage, to assert or defend legal claims or to protect someone else’s rights. We may also use the personal data for reasons relating to important public interest. We will let you know before the restriction expires.
If we restrict the processing of your personal data, we will also inform those we have shared your personal data with (when applicable), if it is not impossible or too cumbersome. If you ask us, we will also tell you who we have shared your personal data with.
7.5 Right to object
You have the right to object to processing that is based on our legitimate interest. If you object to the use, we will, based on your situation, evaluate if our interests in using the personal data outweigh your interests in the personal data not being used for that purpose. If we are unable to provide compelling legitimate grounds that override yours, we will stop using the personal data you object to – provided we do not have to use the data to establish, exercise or defend legal claims. If you object to the use, you also have the right to request that we restrict our use during the time we investigate the matter.
You always have the right to object to, and unsubscribe from, direct marketing.
7.6 Right to data portability
If the processing is based on your consent or an agreement between us, you have the right to obtain personal data that you have provided to us in a structured, commonly used and machine-readable format and transfer it to another controller (“data portability”). Please note that we seldom use one of these legal bases to justify our processing.
7.7 Right to withdraw consent
You have the right to withdraw your consent for a specific processing at any time. Your withdrawal will not affect processing that has already been carried out. Please note that we seldom use consent to justify our processing.
7.8 How to exercise your rights and right to complain
If you want to exercise any of your rights, please contact us using the below contact information.
If you have any objections or complaints about the way we process your personal data, please let us know and we will do our best to help you. You also have the right to lodge a complaint with the supervisory authority where you live, work or where you believe an infringement has taken place. In Sweden, the supervisory authority is the Swedish Supervisory Authority for Privacy Protection (IMY).
8. Changes to the information
We reserve the right to change this privacy notice from time to time. We will inform you of any changes by posting the updated privacy notice on our website. If we make any material changes, we will send you a notification by e-mail.