Privacy Statement for Employees and Candidates
Who is the data controller?
The data controller for the underlying personal information is Evidi AS, organization number: 927 119 781.
What is the purpose?
The purpose of processing your personal information as a job seeker/candidate for a advertised position at Evidi AS is to assess your skills and qualifications in relation to the position you are applying for. Evidi AS would also like to retain your application documents and CV for a period afterward to assess them against future needs for new positions at Evidi AS. The purpose of processing your personal information as an employee of Evidi AS is to fulfill our obligations as an employer and to make the employment relationship as optimal as possible for both parties.
What is the legal basis?
The legal basis for handling personal information is consent.
The legal basis for handling personal information is the employment contract and fulfilling our responsibilities as an employer to the authorities.
What personal information is processed?
CV, application, certificates, references, background check, internal assessments/interview records, personality tests and ability tests, presentation videos (submitted by the applicant), diplomas, credit check, name, phone number, address, and email.
Name, address, phone number, social security number, bank account number, relatives, salary and deductions information, absence information, position, education and work experience, ownership interests in the company, union membership, and enforcement deductions.
Where is personal information obtained from?
Recruitment agencies, websites, social media, from you as a job seeker, and your references.
From you as an employee, from recruitment agencies, and public authorities.
Is it voluntary to provide the information?
It is voluntary to provide your personal information to Evidi AS, but to conduct a recruitment process and an employment relationship with our employees, we find it necessary to handle the above-mentioned personal information.
Are the details disclosed to third parties and are they processed by processors outside the EU/EEA or international organizations?
In cases where we use subcontractors who process personal information on our behalf, we enter into separate data processing agreements, and you can be assured that your information will only be used for the purpose agreed upon. This means that those who provide solutions and services for accounting and payroll to us should only use the information they receive from us to deliver these services, nothing else. We use subcontractors to assist with the technical and administrative operation of our services, such as the operation of the IT platform, relationship management, and marketing. We will not otherwise share your information with third parties unless the disclosure of personal information occurs:
- With the consent of the individual to whom the information pertains,
- Under the authority of law or regulation enacted under the authority of law,
- Pursuant to an order from a court or other authority, or
- As part of debt collection, etc. where there are legitimate reasons. Our project/time tracking system stores all data in the EU/EEA. Evidi AS also uses Microsoft's cloud services for processing your personal information. According to the data processing agreement with Microsoft, this data is located in Europe. Microsoft is an international company.
How are the details deleted and archived?
Personal information should be deleted when there is no longer a purpose and a legal basis for processing it. We ensure that the information is deleted according to best practices and also follow up on this with any subcontractors. The information that needs to be archived has limited access, and access is restricted to those who need it.
What rights does the data subject have, and which country's laws apply?
As a registered individual with us, you have the right to access your personal information. You can also correct, delete, and limit the processing of information about yourself if Evidi AS is not required to process it through legal obligations. You also have the right to object and protest the processing. Any information you have given your consent to can also be taken to another company.
You can withdraw your consent at any time and have the right to complain to the supervisory authority. If your personal information is to be used for a purpose other than what has been agreed upon, you will be informed, and you can object to the processing if you wish.
Norwegian law applies.
How are the details secured?
Your information is secured through internal control with clear procedures and security instructions for handling personal information, as well as technical solutions to ensure confidentiality, integrity, and availability. Everyone working at Evidi AS has undergone training and is held accountable through confidentiality agreements and security instructions. Only those who need to process your personal information have access and/or authorization to do so.
If you, as a registered job seeker, want to exercise your rights, you can contact us directly at firstname.lastname@example.org. This applies, for example, to your right to access, correction, deletion, correction, data portability, limitation, or objection. Employees should contact their immediate supervisor or HR.