When you apply for a job at CEGO A/S or Spilnu.dk A/S (hereinafter "we" or "us"), we process personal data about you. We will always process your personal data in a safe and confidential manner in accordance with applicable data protection legislation, and we have implemented appropriate measures to protect the data against the risks involved in the processing. Below are further details about our processing of personal data about you as a job applicant.

If you have any questions in relation to the processing of your personal data as an applicant, or if you want to exercise your rights as described below, or if you want to complain or object to our processing then please do not hesitate to contact the responsible for our data protection policies at compliance@cego.dk.

The company you apply to is data controller

That means: if you apply for a job at CEGO A/S, CEGO A/S is responsible for processing your personal data (and is therefore data controller). And if you apply for a job at Spilnu.dk A/S, Spilnu.dk A/S is data controller.

If you apply at both our companies, CEGO A/S will be data controller for the application directed at CEGO A/S, and Spilnu.dk will be data controller for the application directed at Spilnu.dk A/S. When exercising your rights or lodging a complaint in these cases, the responsible for our data protection policy as stated above will take care of your request regarding your application to both companies.

Purpose

We collect, record and process personal data about you when you apply for a position with us - whether your application is solicited or unsolicited. This is necessary in order to

• assess and find the best-suited candidates for current or future openings;
• communicate with you;
• draft and conclude a contract of employment with you, if you are the successful applicant; or to
• document the recruitment process in case of any claim or dispute brought against us.

Types of personal data and legal basis for processing

We will process various types of personal data provided by you during the recruitment process. In some cases, we may also collect information from elsewhere, e.g. asking former employers for references or checking social media (where this possibility is in accordance with the data protection legislation).

We process ordinary personal data such as your name, date of birth, address, email, phone number, educational and job history, profile picture, examination certificates, etc. (i.e. ordinary CV information). The legal basis for such processing is:

• Our legitimate interest in recruiting new employees for our business, including to ensure documentation of the recruitment process to defend against any subsequent claims or disputes brought against us (GDPR article 6(1)(f)), and
• Performance of contract in relation to a potential contract of employment with you (GDPR article 6(1)(b)).
• We may also retain your application for a period of up to six months after the recruitment process has ended or after your filing of an unsolicited application, provided you have provided your consent (GDPR article 6(1)(a)). Please note that you may withdraw your consent at any time by simply contacting us (see contact details above). If you choose to do so, we will not process personal data about you unless we have other lawful reason to do so, e.g. where continued processing is necessary for the establishment, exercise or defence of a legal claim (GDPR article 6(1)(f) or article 9(2)(f)).

We process personal data on criminal offences, such as criminal records may be processed if relevant and necessary taking the nature of the job position into consideration. We usually ask for criminal records when hiring personnel handling trusted funds, like a bookkeeper, and only late in the hiring process when down to only a few, relevant candidates. Such processing is based on the applicant's prior explicit consent or when necessary to pursue a legitimate interest which clearly overrides the interests of the applicant (section 8, subsection 3 of the Danish Data Protection Act).

We only process sensitive personal data, such as data concerning your health, in connection with special recruitment processes (reimbursement agreements or other employment relations eligible for reimbursement) where it is required for the purposes of complying with statutory obligations (GDPR article 9(2)(b) and (h)). In such case we may process sensitive personal data if strictly necessary to handle the specific process. 

Storage period

We will retain your application for a period of up to six months after the recruitment process has ended or after your filing of an unsolicited application, if you have provided your consent. If you do not want us to retain your application, you are free to contact us and have us delete it.

Recipients

Your personal data will be accessible only to relevant employees, i.e. those handling recruitment matters and senior employees that the job applicant are to report to. The data will be disclosed only to the persons who need them for the purposes stated above or where disclosure is required by law.

We have engaged data processors to perform work on our behalf. These data processors will get access to your personal data only on our specific instructions. 

Updating of your personal data 

We always seek to ensure that your personal data are accurate and updated. In case of changes to your personal data, we kindly ask you to let us know by using the above contact details. If you inform us of any inaccuracies in your personal data, or if we notice such inaccuracies, we will have them rectified or deleted as soon as possible.

Your rights under the data protection legislation

As a data subject you have a number of rights which you may exercise by contacting us, using the above contact details.

You have the right to request information about which personal data we process and to receive a copy of the data. You also have the right to object to our processing of your personal data and to request rectification or erasure of any data which you believe are incorrect, outdated, etc. Further, you may request a restriction of the processing of your personal data. For some of these rights, e.g. the right to erasure, exercising them requires satisfaction of certain concrete conditions set by data protection legislation.

Complaints

If you disagree with the way in which we process your personal data, you may file a complaint, using the above contact details. If you disagree with a decision made in any complaint proceedings (or do not wish to complain directly to us), you may also file a complaint with the Danish Data Protection Agency which can be contacted through their website at https://www.datatilsynet.dk/borger/klage/saadan-klager-du, via e-mail: dt@datatilsynet.dk or by phone +45 33 19 32 00.