In connection with the recruitment process, 9Lives or relevant associated entity collects and processes as data controller certain personal data about the applicants and potential employees.
Information and Purpose
We collect and process the following types of personal information about you:
- Name, address, e-mail address and telephone number
- Identity information, such as employee number, social security number or similar
- Date of employment, place of employment and job title
- Salaries and pensions, wage subsidies, information relevant to payroll (eg tax debt, etc.)
- Personnel administrative information, such as education and qualifications, courses, competence profile, job wishes, employment, trusts.
- Criminal records, child certificates and safety approval information.
- Personality test.
We collect and process personal data for the following purposes:
- To ensure necessary and relevant information in relation to the recruitment process, including evaluation of the candidate.
- To comply with any law, rule, regulation, lawful and binding determination, decision or direction of a regulator, or in co-operation with any governmental authority of any country (eg. EU Data Protection Regulation), e.g., including:
- Documentation requirements.
- Compliance with basic principles for processing of personal data and legal basis for processing.
- Implementation and maintenance of technical and organisational security measures, including but not limited to prevent unauthorised access to systems and information, prevent receipt or distribution of malicious code, termination of denial-of-service-attacks and damage to computer systems and electronical communication systems.
- Investigation of a suspected or known security breaches and reporting of such breach to individuals and authorities
- To process and respond to requests and complaints from data subjects and others.
- Handling of inspections and requests from authorities.
o Management of disputes with data subjects and third parties.
Automated, individual decision making
Personal data is not used for automated, individual decision making or profiling.
The Legal Basis for Processing the Personal Information
The legal basis for processing of general and sensitive personal data as outlined above is the potential employment contract.
The legal basis for processing potential personality tests is consent.
When we collect personal information directly from you for the recruitment, it is necessary in order for us to enter into a contract with you. You are not obligated to provide the personal information to us. If you do not provide us with the personal information described above, you will not be able to be employed with 9Lives.
If the processing is based on a consent you have a right to withdraw such consent, which means that the information can no longer be processed by 9Lives, unless the processing can be based on another legal basis. The withdrawal of the consent, will not affect the processing already incurred prior to withdrawal of the consent.
Disclosure of Personal Information
Personal information will be disclosed to and shared with the following recipients:
- The 9Lives Group's parent company
- Tax authorities relating to taxable benefits
- 9Lives´s external and internal audit
- Pension funds, banks and insurance companies
- Employee representatives and professional organizations
Transfer of Personal Information to Data Processors
We transfer your personal data to certain suppliers, e.g. IT suppliers, who process the information on behalf of 9Lives.
Transfer of personal data to recipients in countries outside EU/EEA
We do not transfer your data to recipients in countries outside EU/EEA.
We retain your personal data as long as necessary in order to fulfill the above stated purpose. Personal data related to a recruitment process will be deleted after 6 months, unless you consent to prolong the retention period. If you are employed, a different retention period will apply, however personal data will not be retained longer than 5 years after resignation unless there are other requirements in applicable legislation, such as the bookkeeping act.
You have – with the limitations of the legislation – among other things right to access in personal data, right to rectify incorrect information, right to deletion of information, right to limit information, right to data portability and right to object to the processing of personal data, including automated, individual decisions.
Security and Access to Employee Information
9Lives, as a data controller, has a duty to protect the personal data we process about our employees. You can read more about the framework for processing personal data in 9Lives's Personal Data Protection Policy and Information Security Policy.
Policies and Procedures etc.
We also refer to 9Lives's Personal Data Protection Policy, as well as related policies and procedures.