Privacy policy for recruitment using Teamtailor
The service for handling recruitments and simplifying the hiring process is powered by Teamtailor on behalf of Bluestep Bank. We strive to maintain the highest possible standard regarding the protection of personal data. We process, manage, use, and protect User's Personal Data in accordance with this Privacy Policy.
Definitions
Data Controller
Bluestep Bank AB (publ)
Organisation number: 556717–5129
Address: Box 23138, 104 35 Stockholm
Job applicant: refers to the person who has applied to or been contacted regarding an employment at Bluestep.
Third party: Refers to person or persons who may be a part of a recruitment process without being a Job applicant, for example reference persons, recruitment agency or existent Bluestep employees who recommend a Job applicant.
Data subject: refers to the Job applicant and/or the Third party
Processing of personal data
Receiving of a job application
Personal data that is processed
Personal data and contact information, for example name, birth date, sex, photo, e-mail, address, phone number.
Qualifications and skills, job history, languages, specific skills, certifications, work permits, etc, if applicable.
Other personal data that is provided by the Job applicant in connection with the job application.
Source of the personal data
Data is provided by the Job applicant
Lawful ground for processing of personal data
Consent
Storage duration
If the job application does not lead to an employment, the personal data is erased after 2 years.
If the job application leads to an employment, the personal data is retained through the employment term and erased seven years after the employment is ended due to bookkeeping regulations.
Job applicant referred by a Bluestep employee
Personal data that is processed
Personal data and contact information, for example name, birth date, sex, photo, e-mail, address, phone number.
Qualifications and skills, job history, languages, specific skills, certifications, work permits, etc, if applicable.
Other personal data that is provided by the Third Party.
Source of the personal data
Data is provided by a Third party, which is an existent Bluestep employee who has recommended a Job applicant
Lawful ground for processing of personal data
Weighing of interests
Storage duration
As soon as the Job applicant’s personal data is received, the Job applicant will receive an e-mail where they can provide the consent to store personal data. If consent is provided, the data will be erased after 2 years.
If no consent is provided within 10 days, the personal data will be erased.
Evaluation of the job application
Personal data that is processed
Personal data and contact information, for example name, birth date, sex, photo, e-mail, address, phone number.
Qualifications and skills, job history, languages, specific skills, certifications, work permits, recruitment assessment results, such as skills tests, if applicable.
Other personal data that is provided by the Job applicant or any Third parties in connection to the job application.
Source of the personal data
Data is provided by the Job applicant and Third parties
Lawful ground for processing of personal data
Consent
Storage duration
If the job application does not lead to an employment, the personal data is erased after 2 years.
If the job application leads to an employment, the personal data is retained through the employment term and is erased seven years after the employment is ended due to bookkeeping regulations.
Entering into the employment contract
Personal data that is processed
Personal data and contact information, for example name, birth date, e-mail, address, phone number.
Information about the employment.
Source of the personal data
Data is provided by the Job applicant
Lawful ground for processing of personal data
Contract
Storage duration
If the job application leads to an employment, the personal data is retained through the employment term and is erased seven years after the employment is ended due to bookkeeping regulations.
Processing of special categories of personal data
Personal data that is processed
During the application process, the Job Applicant may provide Bluestep with personal information that concerns special categories of personal data.
Special categories of personal data may consist of racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, data concerning health or data concerning a natural person's sex life or sexual orientation.
Source of the personal data
Data is provided by the Job applicant.
Lawful ground for processing of personal data
Consent
Storage duration
Information that concerns special categories of personal data is only processed in the documentation provided by the Job applicant. Bluestep does not store this data in its employment management systems.
If the job application does not lead to an employment, the personal data is erased after 2 years.
If the job application leads to an employment, the personal data is retained through the employment term and is erased seven years after the employment is ended due to bookkeeping regulations.
Processing of privacy-sensitive personal data
Personal data that is processed
During the recruitment process, privacy-sensitive personal data may be processed.
Privacy-sensitive personal data may consist of criminal convictions and offences or related security measures and information about overdue debts from the Enforcement Agency
Source of the personal data
Data is provided by the Job applicant and relevant authorities
Lawful ground for processing of personal data
Weighing of interests
Storage duration
Privacy-sensitive data is destroyed or returned to the Job Applicant immediately after review.
Processing of personal data by third party entities
Recruitment agencies
Reason for transferring
Job applicant’s personal data may be transferred to or by Bluestep if any recruitment agencies were used during the application process in order to give necessary feedback regarding the application.
Personal data that is transferred
Personal data and contact information, for example name, birth date, sex, photo, e-mail, address, phone number.
Qualifications and skills, job history, languages, specific skills, certifications, work permits, etc, if applicable.
Other personal data that is provided by the Job applicant in connection to the job application.
Lawful ground for transferring
Consent
Recruitment tools
Reason for transferring
Job applicant’s personal data is transferred to a recruitment tool used to coordinate hiring tasks and streamline the recruitment process.
Personal data that is transferred
Personal data and contact information, for example name, birth date, sex, photo, e-mail, address, phone number.
Qualifications and skills, job history, languages, specific skills, certifications, work permits, etc, if applicable.
Other personal data that is provided by the Job applicant in connection to the job application.
Lawful ground for transferring
Consent
Transfer of data to a third country
Bluestep always strives to, if possible, choose suppliers and partners who only process personal data within the EU/EEA. Within the framework of certain agreements between Bluestep and third parties, the Job applicants’ personal data may be transferred to countries outside the EU/EEA, for example the USA. The legal basis for the transfer of personal data is Bluestep's legitimate interest in choosing suppliers and partners who have the best offer in their field. Personal data processing is very limited and necessary to fulfill our purposes. Bluestep has made the assessment that Bluestep's interests in processing the Data subjects’ personal data for these purposes are not less than the Data subjects’ interests or fundamental rights and freedoms.
Third country transfers are normally based on the EU Commission's standard contractual clauses.
Bluestep has assessed that the transfer of personal data to a country outside the EU/EEA is a processing that may entail a high risk for the Job applicants’ freedoms and rights according to the GDPR. Bluestep has therefore performed an impact assessment to ensure that the risks for the individuals are minimised.
The data subject's rights
The data subject has several rights under the GDPR. This section contains information on how these rights can be exercised.
Request erasure of personal data
You have the right to request erasure of your personal data in the following cases:
- If the data is no longer needed for the purposes for which it was collected
- If the personal data has been processed unlawfully
Bluestep Bank has the right to retain personal information despite request for erasure if it is necessary to fulfil a legal obligation, according, e.g., to establish, assert or defend legal claims.
If you want to request erasure of your personal data, send an email to dpo@bluestep.se.
Request rectification of inaccurate or incomplete information
Information that Bluestep Bank processes about you must be accurate and up to date. If you notice inaccurate information, you can request the information to be rectified.
If you want to request rectification of your personal data, please send an email to dataskydd@bluestep.se.
The right of access
You have the right to know if Bluestep Bank processes your personal data. If Bluestep Bank does process your data, you have the right to request a copy of the personal data being processed and information about:
- which categories of personal data are processed,
- how the personal data is used,
- for how long the personal data will be stored,
- who the personal data has been shared with,
- from where the data originates.
If you want to request an extract from the register, you can email dataskydd@bluestep.se.
Please note that there may be information that you are not allowed to access, for example, if it is detrimental to others. You also do not always have the right to receive a copy of the document where your personal information appears.
Right to limitation of processing
In some situations, you can demand that the processing of your personal data is limited, e.g. if you believe that information about you is inaccurate and you have requested rectifying of your information. In case of limitation, the personal data is flagged so that it may only be processed for certain purposes. When a limitation expires you will be informed.
If you want to request limitation of the processing of your data, you can email to till dataskydd@bluestep.se.
Right to object to use of personal data
You have the right to object to processing of your personal data if the lawful ground for the processing is the legitimate interest of the controller.
If you want to object to processing of your personal data, please send an email to dataskydd@bluestep.se.
Right to data portability
You have the right to request the personal data that Bluestep processes about you in a structured, commonly used and machine-readable format or ask this data to be transferred directly to another controller if it is technically possible.
If you want to use the right to data portability you can email to till dataskydd@bluestep.se.
Other
Your request will be processed as soon as possible, but no later than one month after your request was received. If necessary, the time limit may be extended by two months, and we will inform you of the reason for the delay.
Data protection officer
Bluestep has appointed a data protection officer who monitors that Bluestep complies with the rules on the protection of personal data.
The data protection officer shall fulfil his or her assignment in an independent manner in relation to Bluestep.
Bluestep Bank’s data protection officer can be reached via:
Telephone: 08 501 004 00
E-post: dpo@bluestep.se
Address: Sveavägen 163, 113 46 Stockholm
For questions or complaints regarding Bluestep Bank's personal data processing, please contact: dataskydd@bluestep.se.
The data subjects can also contact the Swedish Authority for Privacy Protection regarding questions or complaints concerning the processing of personal data.
Cookies
When Users use the Service, information about the usage may be stored as cookies. Cookies are passive text files that are stored in the internet browser on the User’s device, such as computer, mobile phone or tablet, when using the Service. We use cookies to improve the User’s usage of the Service and to gather information about, for example, statistics about the usage of the Service. This is done to secure, maintain and improve the Service. The information that is collected through the cookies can in some instances be personal data and is, in such instances, regulated by our Cookie Policy.
Users can at any time disable the use of cookies by changing the local settings in their devices. Disabling of cookies can affect the experience of the Service, for example disabling some functions in the Service.
