Recruitment

Purpose
The purpose is to recruit, including process and assess applicants in relation to a current or future position with CURIA.

Data Subject
The applicant.

Category of Personal Data
Personal data, including name, address, telephone number, e-mail address, educational background, professional experience and any other personal data that the applicant provides, as well as references. 

Personal data about criminal convictions and offences, including the applicant’s criminal record where the applicant is offered a position at CURIA. In some cases, we process special categories of personal data, including data concerning health, which will be of great importance to the applicant’s ability to perform the position.

Legal Basis
Processing of personal data is necessary in order for CURIA to pursue its legitimate interests in being able to recruit an applicant to a position at CURIA, cf. General Data Protection Regulation article 6, paragraph 1, point f. Note, that the data subject has the right to object against the processing, cf. General Data Protection Regulation article 21, paragraph 4. 

We process personal data that is collected from references provided that the applicant has consented to this, cf. General Data Protection Regulation article 6, paragraph 1, point a.

Further, we process personal data which are manifestly made public by the applicant, cf. General Data Protection Regulation article 9, paragraph 2, point e and article 6, paragraph 1, point f. CURIA pursue its legitimate interests in being able to recruit an applicant to a position at CURIA. Note, that the data subject has the right to object, against the processing, cf. General Data Protection Regulation article 21, paragraph 4. 

We process personal data on criminal records if it is necessary for the purpose of a legitimate interest in ensuring that the applicant is suited for the position at CURIA that is being recruited for, cf. General Data Protection Regulation, article 10, cf. the Data Protection Act section 8, paragraph 3. This is applicable in relation, for example, to CURIA’s compliance with the Anti-Money Laundering Act section 8. The processing of  special categories of personal data is necessary for the purposes of meeting and respecting our or the applicant’s labour law obligations and specific rights, including section 2 of the Act On The Use Of Health Information, etc. on the labour market section 2, cf. the Data Protection Act article 12, paragraph 1.

Source
The applicant and any references (if the applicant has given his/her consent) and data that is otherwise publicly available.

Retention Period
Personal data about an applicant who are not offered a position is deleted after 3 months, calculated from the time on which the applicant has received notice that it’s application has been rejected, unless the applicant has given his/her consent for a longer storage period or specific circumstances require a shorter or a longer storage period.

Categories of recipients
We may transfer personal data to our professional advisors in certain cases so that we can receive professional advice.

We also use external suppliers, such as IT suppliers, accountants, etc. which may receive personal data in connection with the assistance they provide to us. CURIA enters into data processing agreements with external suppliers which process personal data on behalf of CURIA in order to ensure that all necessary security measures are adopted.