Date updated: 2018-06-11
In order to apply for a position within the NCC Group ("NCC", "we" or "us"), you will be required to provide NCC with information relating to you ("Personal data"). As a controller of your Personal data, we are committed to safeguarding the privacy of our applicants ("you" or "applicant(s)"). This notice will inform you about the processing we undertake with your Personal data during your application.
Throughout this Privacy Notice the term "processing" is used to cover all activities involving your Personal data, including collecting, handling, storing, sharing, accessing, using, transferring and disposing of information.
"Applicable Data Privacy Laws" means data protection laws and regulations implementing the Data Protection Directive 95/46/EC and as of 25 May 2018 the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the "GDPR").
"Personal data" is defined as any information relating to an identified or identifiable natural person.
This notice will outline for you:
- what Personal data we collect;
- for what purposes we use your Personal data;
- which legal basis we rely on for processing your Personal data;
- to whom we provide your Personal data;
- how long we store your Personal data;
- the rights you have in relation to your Personal data;
- where you can ask questions and make remarks.
Information submitted by you will be used to identify and evaluate you for the position you applied for.
We may in some instances collect your name, basic professional experience and contact details from yourself, research companies or business related social media accounts such as LinkedIn, for contact purposes in headhunting situations. Our legal basis for the processing of such Personal data is to fulfil our legitimate interest in finding suitable candidates for an open or a future position within NCC.
As part of the hiring process we may also perform background checks on you in order to further evaluate and validate your application. Such background checks may include criminal records, credit reports, reference checks etc. If background checks are performed, NCC will at all times ensure that Applicable Data Privacy Laws are complied with. As a result of this, NCC will not retain criminal records if not permitted by Applicable Data Privacy Laws.
We will not use information submitted by you for any other purpose and neither will we disclose your Personal data to third parties which would not process your Personal data for evaluating your candidacy for NCC.
The processing of your Personal data is necessary for performing our evaluation of your candidacy. We will ask your consent in case we would need to process Personal data of a sensitive nature. If such information is not specifically required by us in the individual case, we ask you to avoid submitting information which may qualify as sensitive Personal data (such as health information, political opinions, religious beliefs or other beliefs of a similar nature, membership of a trade union, physical or mental health or condition or sexual life)
If you are hired as a result of your application some of the Personal data collected as part of this recruitment process may be transferred to your personnel file.
We will only request information from you which is necessary for your identification and the evaluation of your candidacy.
The Personal data we may collect in this context include:
Our legal basis for the processing of your personal data is to fulfil our legitimate interest of identifying and evaluating you for the position you applied for (article 6.1 f) GDPR) and in order to take necessary steps at your request prior to entering into a contract with you (article 6.1 b) GDPR).
You will have provided us directly with your Personal data through your application but we may also receive further Personal data in an indirect manner (e.g. through your interaction with third party recruitment agencies, or subject to your consent (article 6.1 a) GDPR), references from former employers as well as, when applicable, financial information such as credit reports from background research companies). Personal data relating to credit reports and social media profiles will only be processed when necessary due to the hiring for a leading position or a position with a certain financial responsibility within NCC and only if allowed under Applicable Data Privacy Law.
If you are hired at NCC as a result of your application we may process some of your Personal data necessary for the performance of the employment contract, article 6.1 b) GDPR.
There may be positions in which the Personal data that you will need to provide to us in the context of your recruitment is considered sensitive Personal data under Applicable Data Privacy Laws. Sensitive Personal data for example include Personal data from which we can determine or infer an individual's racial or ethnic origin, political opinions, religious beliefs or other beliefs of a similar nature, membership of a trade union, physical or mental health or condition or sexual life. Note that in the recruitment process for certain positions, the collection of such Personal data may be essential for our evaluation and we will therefore ask you to explicitly consent if applicable(article 9.2 a) GDPR).
Future opportunities Pool
If you agree and give your consent (article 6.1 a) GDPR) we will keep your Personal data mentioned above (except notes from interviews and references) for up to one year in a pool for future opportunities to evaluate you for other positions which may become vacant within the mentioned time period.
Access within NCC
We strive to strictly limit the access to your Personal data and to protect your Personal data. Only persons who have a specific need to know within the context of their function within NCC will have access to your Personal data. The following functions may be able to access your Personal data:
- human resources functions and managers responsible for positions for the purposes of evaluation;
- Group Risk Management;
- in certain cases, IT-staff may also gain access to your data, but only to the extent necessary to ensure the proper functioning of our position website.
NCC group companies
With your agreement and consent (article 6.1 a) GDPR) we may for up to one year share your Personal data mentioned above (except notes from interviews and references) with other NCC group companies for the purpose of evaluating you for other positions in the NCC group which is or may become vacant within the mentioned time period.
Data processors acting on behalf of NCC
Moreover, NCC may transfer Personal data to external parties, such as vendors and service providers which process Personal data under the instructions of NCC (for example IT-service providers). Where such disclosure entails transfers of Personal data outside the EU/EEA, NCC will ensure that standard contract clauses have been entered into between the transferring NCC entity and the receiving external party. Alternatively, other safe guards will be put in place prior to such transfers.
Appropriate Safe Guards to countries outside the EU/EEA-area
You are according to Applicable Data Privacy Law upon request entitled to receive a copy of any documentation demonstrating that appropriate safeguards have been taken in order to protect your Personal data during a transfer outside the EU/EEA.
If you would like know more about the processing of your Personal data and whether your Personal data is transferred outside the EU/EEA, please contact us on the contact details as set out below under section 9.
Other recipients
When you share your Personal data with us through the recruitment and assessment agencies, you are deemed to have read and accepted this privacy notice and we will instruct our recruitment agencies to inform you thereof. We will ask these third parties to only use your Personal data in the context of the recruitment and selection services for us but we are not responsible for the processing activities that they undertake for their own purposes with your Personal data. Hence for these activities, we will ask you to check their privacy notices.