Processing of personal data in the recruitment process
If you apply for a job in a current recruitment process your personal data will be registered with and processed. The purpose of the registration and processing is to enable us to handle the recruitment in process and to use the data for future recruitment.
When you apply for a job in Dustin Group you are resigned to Jobylon’s online form, where you must fill in your personal data such as contact information, CV, personal letter, a link to your Social Media profile or whatever information you choose to share with us.
Jobylon process data on behalf of Dustin Group since Jobylon helps Dustin gather your information via the recruitment tool. For that reason, Jobylon is a data processor.
Dustin who’s job you apply for is responsible as a data controller and is committed to not disclose it to unauthorized third parties. However, Dustin will share your personal data with relevant personal data processors when needed in relation to the purpose for the processing.
If you have any questions regarding your personal data and Dustin’s processing hereof, please contact us directly on <u>firstname.lastname@example.org</u><u>.</u>You may also contact <u>email@example.com</u>. Jobylon may not, however, be able to answer your question or comply with your request without the approval of the employer.
When receiving your application
In the recruitment process we process the process the personal data that you have provided yourself in your application letter, CV or other documents that you can upload voluntarily. However, Dustin may collect personal data using publicly available sources such as your available Social Media Profiles.
The personal data that Dustin process in the recruitment process is mainly personal data such as: full name, age, birthday, private e-mail address, phone number, education, work experiences, motivation, personal and educational qualities such as education diplomas, driver’s license etc. We process these personal data based on GDPR article 6 (1) f (legitimate interest). When Dustin process your data based on legitimate interest we make sure that our legitimate interest does not override your personal freedoms and rights.
Dustin does not collect or process sensitive data such as health information, sexual orientation, religion or alike. However, Dustin has no control over what information you voluntarily provide us with or include in your CV, application letter and other documents that is submitted via Jobylon.
We save your application for an open position in Dustin as follows;
Denmark: 5 years
Norway: 2 years
Sweden: 2 years
Finland: 2 years
We save the information in Jobylon that is a GDPR compliant recruitment tool where only trusted employees in the HR team has access to see the data. See our retention time below in the document.
We do not save unsolicited applications.
If you have already given us contact information for your references in your CV or application letter it is in our legitimate interest to contact the mentioned persons. When we contact your references we only ask general work-related questions. We will under no circumstances ask for sensitive information about you such as personal information on your health, race, family relationship and such.
If we do not have any references on you we might in some cases asks for your explicit and prior consent to obtain references from one or more of your former employers, in accordance with GDPR article 6(b).
In that case you have the right to withdraw your consent at any time by contacting the HR manager in the job add.
If you withdraw your consent it does not affect the legality of our processing prior to the withdrawal of your consent.
When assessing the application
Each application is reviewed and the applicants’ qualified are assessed in relation to the vacancy. After reading and evaluating the applications received a selected group of candidates are invited to a job interview. In that relation we might ask for your consent to obtain references. See above in the document about obtaining references.
Dustin may in some special circumstances conduct personality tests as a part of the recruitment process. We always inform you about the personality test before the interview and make sure you know the purpose of the personality test. In Dustin we use personality tests as a discussion tool so that we can have a more in-debt conversation with you at the job interview and to see how your personality fits in a specific team. The results from personality tests are just one of the many parameters we use to assess you as an employee and not a unique parameter. Our HR employees are trained to interpret these tests and ask you questions based the results.
The personality tests are conducted in GDPR compliant systems.
We conduct personality tests based on our legitimate interest in accordance with GDPR article 6(1) f.
At the interview
During the job interview Dustin might collect more personal data on you based on the information you give at the job interview. That is used in the recruitment process. We save your personal data based on our legitimate interest in accordance with GDPR article 6(1) f. Our legitimate interest will not override your personal rights and freedoms.
We do not collect sensitive data. If you voluntarily share sensitive information with us during the job interview it will not be saved or stored.
When finishing the recruitment process
Whether or not you are hired as our new employee in Dustin, we will store your application in accordance with our retention time as described in this document in the section “retention time.” The reason for that is that Dustin may need to show that the employment procedure was non-discriminatory and for defending legal claims following the statute of limitation for employee related claims.
As an applicant you have several rights in accordance with the GDPR.
Your rights include;
The right to access your data (GDPR article 15)
Right to rectification (GDPR article 16)
Right to erasure/right to be forgotten (GDPR article 17)
Right to restriction of processing (GDPR article 18)
Right to be notified regarding rectification or erasure of personal data or restriction of processing (GDPR article 19)