Job Applicant Privacy Notice - NCC

Your Personal data will be retained as long as necessary to achieve the purpose for which it was collected, namely for evaluating your candidacy or as legally required or permitted by applicable law.

We will retain Personal data collected from candidates whose applications did not result in an employment only for as a long as strictly necessary for the purposes set out above and in accordance with applicable laws. This is normally the maximum statutory period in which a claim arising out of the recruitment process may be brought against us.

If you are hired at NCC as a result of your application some of the Personal data collected as part of this recruitment process may be transferred to your personnel file and maintained for a longer period.

If you agree that we may save your Personal data in the pool for future opportunities, we will maintain your Personal data for a period of one year or until you withdraw your agreement to remain in the pool for future opportunities or if you object to the use of your Personal data for this purpose.

Right of rectification

NCC will take steps in accordance with Applicable Data Privacy Law to keep your Personal data accurate, complete and up-to-date. If you identify that any Personal data related to you is inadequate, incomplete or incorrect, you are entitled to have the Personal data corrected.
Moreover, you also have the right to request access to the Personal data that we process about you.

Further rights as of 25th May 2018

As of 25th May 2018, you are also under Applicable Data Privacy Law in addition to rectification entitled to:

(i) Access

You may request confirmation whether or not Personal data is processed and if that is the case access to your Personal data and additional information such as the purposes of the processing. You are also entitled to receive a copy of the Personal data undergoing processing. If the request is made by electronic means the information will be provided in a commonly used electronic format if you do not request otherwise.

(ii) Object to certain processing

You may object to processing of your Personal data processed on the basis of a legitimate interest, on grounds relating to your particular situation and to processing for direct marketing purposes.

(iii) Erasure

You may have your Personal data erased under certain circumstances such as when your Personal data it is no longer needed for the purposes for which it was collected.

(iv) Restriction of processing
You may ask us to restrict the processing of your Personal data to only comprise storage of your Personal data under certain circumstances such when the processing is unlawful, but you do not want your Personal data erased.

(v) Withdrawal of consent
You have the right to at any time withdraw your consent to processing of Personal data to the extent the processing is based on your consent, for example if you have provided us with sensitive Personal data (such as health information) relevant for the specific position you applied for.

(vi) Data Portability
You may ask to receive a machine-readable copy of the Personal data processed on the basis of your consent or on the basis that the processing is necessary in order to perform an agreement with you, and which Personal data have been provided to NCC by you (data portability) as ask for the information to be transferred to another data controller (where possible).

Complaints to the supervisory authority

You acknowledge that you always have the right to lodge complaints pertaining to the processing of your Personal data to the competent data protection authority if so provided under Applicable Data Privacy Law. The data protection authority can be reached here.

We will ensure that the access to your data is accurately secured by applying appropriate safeguards, depending on the circumstances taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk. In support of this commitment, we have implemented appropriate technical, physical and organizational measures to protect your personal data against: unauthorized or accidental destruction, alteration or disclosure; misuse; damage; theft or accidental loss; or unauthorized access.

If you have any questions or concerns regarding the processing of your Personal data or wish to exercise any of your rights under Applicable Data Privacy Law or withdraw your agreement to stay in the pool for future opportunities, please contact NCC on the contact details set forth below.

The data controller for Personal data is NCC AB org: 556034-5174

Address:
NCC AB
Herrjärva torg 4
Att: NCC GDPR Team
170 80 Solna, Sweden

gdpr@ncc.se

We reserve the right to update this policy, if necessary, for example to comply with legislative changes, regulatory changes, new practices and procedures, or requirements imposed by any authority. The most recent version is always available on this page and the revisions will apply from the date of their publication or via the position page on the website. The date on which this text was last changed can be found in the header of the document.

You are responsible for your own information and for the consequences of their posting. You agree not to submit information infringing on the privacy, publicity, confidentiality, or intellectual property rights of others, including information revealing trade secrets, unless you own the rights or have the owner's permission so to do. For clarity, we will not be responsible or liable for any violation of third party privacy, confidentiality or intellectual property rights arising from the information you submit to our position website.