If you apply for a job or get in touch through Jobylon’s service, your personal data will be registered with and processed by Santander Consumer Bank AS as the employer. The purpose of the registration and processing is to enable the employer to handle the recruitment process in question and to use the data for future recruitments. The legal basis for such processing is the General Data Protection Regulation art. 6,1(f) as the employer has a legitimate interest in executing recruitment processes where applicable. If you are offered a position with Santander Consumer Bank, the legal basis for processing is the General Data Protection Regulation art. 6,1(b), as processing will be necessary to enter into a contract with you.
Both Santander Consumer Bank and Jobylon will keep your personal information confidential and ensure that no disclosure to unauthorized third parties take place. Santander Consumer Bank will however engage subcontractors to process data on its behalf, for example to provide IT systems. Santander Consumer Bank will ensure that such subcontractors are bound by the same confidentiality undertakings as Santander Consumer Bank. Should any processor of Santander Consumer Bank process personal data outside the EU/EEA, Santander Consumer Bank will ensure that adequate safeguards, such as the EU Model Contract Clauses, are in place before such processing takes place, in accordance with applicable law.
If you have any questions regarding your personal data and the employer’s processing thereof, please contact the employer in question directly at firstname.lastname@example.org. You may also contact email@example.com. Jobylon may not, however, be able to answer your question or comply with your request without the approval of the employer.
Collection of data
Any data collected is used solely for recruitment purposes, including statistical purposes, e.g. demographic analyses of applicants, unless otherwise explicitly stated. Such data is processed only in aggregated and non-identifiable form.
Processing of data
Your personal data is processed in a conventional and regular recruitment-manner. The key steps being collection, storage, evaluation, contacts and deletion. Your application will be stored no more than 12 months after you have submitted your application. The reason for this is that the employer may need to show that the employment procedure was non-discriminatory. The employer does not, however, have any obligation to save the data you provide. If you are offered a position, Santander Consumer Bank will store your application data for 12 months for documentation purposes. If you are not offered employment, your application data will be deleted within 12 months after you have submitted your application.
If personal data is processed based on your consent, you may recall such consent at any time by contacting the employer.
You may contact the employer and request information about which categories of personal data is being processed, for what purpose, who has (or will) receive which data and if any information has been collected from other sources than yourself (and if so, from where).
If you suspect, or consider, your personal data is being processed wrongfully, or that the personal data being processed is inaccurate, you should contact the employer directly at firstname.lastname@example.org and request that the data is rectified, erased or that processing is restricted (as applicable).
You may also contact Jobylon with your request by sending an e-mail to email@example.com, please note that Jobylon will only forward your request to the employer (who is the personal data controller). You also have the right to file a complaint with the supervisory authority in the country where you reside.
In certain situations, you have the right to data portability, meaning that your data is transferred directly (or via yourself) from the employer to another controller in a structured, commonly used and machine-readable format.
You always have the right to request an excerpt of the personal data stored about you and to change the data if it is inaccurate as well as to get it deleted if the processing lacks legal basis. Such demand must however be directed to firstname.lastname@example.org. You can find more information about your rights and also request access to your personal data on https://www.santanderconsumer.no/personvern/dine-rettigheter/. Santander Consumer Bank will normally process your request within 30 days. If more time is needed, you will be informed accordingly.