Privacy Notice I Recruitment
Introduction
The Kry Livi group’s (“we”, “us”) mission is to help provide the best and most available health services. When applying for a job at Kry Livi, we want to be transparent about our data protection practices so that you as an individual always feel comfortable entrusting us with your personal data. This privacy notice (the “Privacy Notice”) describes which data we collect about you when you apply for a position with us, how it’s used, with whom it’s shared, what rights you have related to your information and how you can control how your data is used.
Who’s responsible for processing your personal data?
Kry International AB, which is a part of the Kry/Livi group, owns and makes this platform available and is responsible for the processing of your personal information in the context of recruitment. This includes for example to allow you to submit an application and to provide us with information about you such as a resumé or test results.
When and from where do we collect information about you?
We collect information directly from you, for example when you submit an application, upload documents or conduct tests.
When you’re using the candidate platform we will also collect information about you. For example, we automatically collect information about how users interact with the platform so that we can understand how it's performing, fix issues and make it better. We also collect device information to ensure that the platform is secure for you to use.
Which categories of personal information do we collect and for which purposes?
We will process the following information about you:
Personal details
When you create an account or submit information to your personal profile we will collect some basic personal details about you. This can include your name, contact information, age and address.
Technical and platform usage details
When you are using our candidate platform, we will automatically collect some additional information about you, including type of operating system, device and browser, IP address, your mobile provider, information about how you have used our platform, e.g. time and date of visits and features and functionality you have used and yoursettings, e.g. consent status or opt-in/opt-out status.
Credentials, test results, resumé and similar
If you submit an application for a job, we will process any documentation you choose to submit or create, such as your resumé, your credentials, your personal letter or your test results.
Messages and communication
If you communicate with us using the candidate platform, we will process that communication.
We will use your information for the following purposes:
Recruitment process which includes activities such as allowing you to create a profile, adjust your settings and preferences, apply for a job, upload documents and carry out different tests related to the recruitment process.
Technical support and communication which includes activities such as helping you to access and use the platform, sending you important security or service updates and otherwise communicating with you.
Analytics and product development which includes activities such as analysing how our users use the platform to better understand how we can improve and develop user experience and features.
To safeguard legal interests in proceedings or disputes, and to investigate illegal, fraudulent or other misuse of the website or services.
Administration in relation to mergers, acquisitions or other corporate restructuring of Kry International.
With which third parties is your information shared?
Service providers
We engage other companies to help us e.g. provide the candidate platform and website to you. For example, hosting and maintenance services or services which enable us to reach out to you via email. We may share your personal data with them so that they can process it to provide these services.
We have contracts in place with these service providers which only allows them to use personal data on our behalf and based on our instructions and not for their own purposes. Before engaging any such service providers, we review their practices to make sure they are lawful and that appropriate security measures are in place to protect personal data.
Other data controllers
In some situations we share your personal data with third parties that will process your personal data for their own purposes as independent data controllers. We can transfer your personal data to other Kry/Livi group companies for example to facilitate company re-structures.
Please note that this Privacy Notice does not apply to personal data processing performed by third parties which are not part of the Kry/Livi group of companies. For more information on how these third parties process your personal data, we refer you to the party in question.
International transfers
Your personal data will as a rule only be processed within the EU/European Economic Area (EEA). However, sometimes we may work with suppliers outside the EU/EEA to help us deliver the Services to you in the best way possible. If these suppliers process personal data that will entail a transfer outside the EU/EEA.
Transfers of personal data take place to countries outside the UK and EU/EEA only if the transfer is lawful according to the applicable data protection legislation regarding the protection of your privacy in the recipient country with reference to: (i) the EU Commission’s decision regarding adequate levels of protection; (ii) application of the EU Commission’s standard contract clauses for transfers to third parties and appropriate supplementary measures where necessary; or (iii) other applicable safeguards in order to fulfil applicable data protection legislation
How long is your personal data stored?
Your personal data is stored only as long as necessary to fulfil the purposes for processing or as required by law.
For the recruitment process, we save your data for as long as you choose to have a candidate profile with us but no longer than 6 months in Germany and 1 year for all other markets, after which we will ask for your renewed consent to save the data for longer.
For technical support and communication, we save your data up to 6 months for device information and usage information and up to 5 years for communication you have with us
For analytics and product development, we save your data up to 1 year.
To safeguard legal interests in proceedings or disputes, and to investigate illegal, fraudulent or other misuse of the website or services, we save your data up to 5 years.
For administration in relation to mergers, acquisitions or other corporate restructuring of Kry International, the data will be saved for as long as needed to fulfil the purposes of processing. If we are acquired by an acquiring company or split in connection with a restructuring, the acquiring company will continue to save and use your personal information in accordance with the terms of this privacy policy, unless you receive other information in connection with the transfer.
Your rights
As an individual, you have certain rights in relation to your personal data as further described below. However, note that these rights are not unconditional and may sometimes not apply to our processing of your personal data. If you wish to exercise any of these rights, please get in touch with us at privacy@kry.se.
We are obliged to respond to your request to exercise your rights within one month of hearing from you. If your request is complicated or if a large number of requests have been received, we have the right to extend the period by another month. If we believe that we cannot do what you want us to do, we will notify you within one month of receiving your request why we cannot comply with your request.
All information, communication and all measures we carry out are free of charge for you. If, on the other hand, what you request due to your rights is clearly unfounded or unreasonable, we have the right to charge an administrative fee to provide you with the information or carry out the requested action, or refuse to comply with your request.
Please find below a list of your rights:
Right of access - the right to be informed of, and request access to, the personal data we process about you;
Right to rectification - the right to request that we amend or update your personal data where it is inaccurate or incomplete;
Right to erasure - the right to request that we delete your personal data, please note however that Kry will not delete personal data it is legally obliged to keep, or which it otherwise needs to retain for a purpose described in this privacy policy;
Right to restrict - the right to request that we temporarily or permanently stop processing all or some of your personal data;
Right to object - the right to object to processing of your personal data in some situations;
Right to data portability - the right to request a copy of your personal data in electronic format and the right to transmit that personal data for use in another party's service; and
Right not to be subject to automated decision-making - the right to not be subject to a decision based solely on automated decision making, including profiling, where the decision would have a legal effect on you or produce a similarly significant effect.
How do we protect your personal data?
You should always be able to feel safe when you entrust us with your personal data. We have therefore taken appropriate security measures to protect your personal data against unauthorised access, alteration and deletion. If there are security incidents that may affect you or your personal data in a more significant way, e.g. when there is a risk of fraud or identity theft, we will contact you and tell you what you can do to reduce the risk.
What about cookies?
We use cookies, please read more in our [Cookie policy].
How to get in touch with us?
We hope that this Privacy Notice has answered most of your questions. However, if you have questions or comments or if you want to exercise any of your rights described herein, you’re always welcome to contact us or our data protection officer by emailing privacy@kry.se.
We're regulated by the Swedish Data Protection Authority
(Integritetsskyddsmyndigheten). If you're not happy with any aspect of our data processing, you can complain to Integritetsskyddsmyndigheten directly. You can find their contact details at their website, www.imy.se.
Changes
We may update this Privacy Notice from time to time. If we make material changes we will always notify you in advance and give you a chance to review. If you do not agree to the changes, you can choose to exercise your right to erasure as described above.