Privacy Policy

For candidate information and customer and supplier information

1. Protection of your privacy

Coresearch Vision A/S (hereinafter “Coresearch”) takes processing of your personal data seriously. We ensure reasonable and transparent data processing in accordance with current regulations on the processing of personal data.

This privacy policy explains how we process your personal data at Coresearch, where you as a candidate, among other things, have the opportunity to send us your CV with a view to becoming part of our network/database.

In addition, we have described in the privacy policy how information about reference persons is processed.

2. Data responsibility and contact information

Coresearch is the data controller for the processing of the personal data that we have received about you. We can be contacted via the following information:

Coresearch Vision A/S
CVR no. 28 90 11 51
Hovedgaden 43
2970 Hørsholm

Email: job@coresearch.dk
Telephone: 70 26 03 26

If you have any questions about our processing of your personal data, you are welcome to contact us at any time.

3. We process the following information about you

Candidates:

We process the following so-called general information about you, which we have either received from you, your references or found via social media such as LinkedIn or via other relevant searches on the internet:

Name
Workplace
Position
Address
Contact information, including telephone number (landline), mobile number (if provided) and e-mail address
CV and other relevant documents
Your references and contact information about them (name, telephone number and e-mail)
Any notes from conversations with references (who are only contacted after consent)

It is our recommendation that you as a candidate do not enter sensitive information (e.g. ethnic origin, political or religious beliefs, health information, etc.) in the CV that you send to us via the website.

It is voluntary whether you, as a candidate, want to use our service, and thus also whether you want us to register your information.

Reference persons:

We process the following general information about you that we have received from candidates and yourself:

Contact information (name, phone number and e-mail)
Any notes from conversations with references

Customers and suppliers/collaborators and contact persons for these:

We process the following general information received from the customer/supplier/collaborator or contact persons themselves:

Name and Address
Name of one or more contact persons
Contact information, including telephone number and e-mail of the customer/supplier/collaborator and/or contact person
CVR number
Billing Information

4. Purpose and legal basis for processing

The purpose of our processing of your personal data is the following:

Candidates and reference persons:
Recruitment
When we help our customers find the right employee, we solve the task via a combination of headhunting and advertising.
Customers and contact persons at these:
Presentation of potential candidates
Billing
Suppliers/collaborators and contact persons for these:
Ordering and payment for goods and services

We only process your personal data to the extent necessary to fulfill the purposes for which the information was collected.

Legal basis

We must inform you about our legal basis for processing your information. It is the following:

Candidates:

When we receive your CV in connection with your application for one of our specific positions, our legal basis for processing your information is the data protection regulation's article 6, subsection 1, letter f on legitimate interests. The legitimate interests that justify the processing are our necessary processing of your information in connection with the specific recruitment task for which you have applied to be considered. Our processing of your information thus depends on both your interest in being considered for the position and our interest in finding the right candidate for our customer.

When we pass on your information to our customer or save your CV for use in future positions that match your qualifications, our legal basis for processing your information is the data protection regulation article 6, paragraph 1, letter a on consent.

Reference person:

Article 6 of the Data Protection Regulation, subsection 1, letter f, where our legitimate interest is the recruitment of suitable candidates for our customers.

Customers and suppliers/collaborators:

Article 6 of the Data Protection Regulation, subsection 1, letter b on entering into and fulfilling a contract.

Contact persons at customers and suppliers/collaborators:

Article 6 of the Data Protection Regulation, subsection 1, letter f on legitimate interest. The legitimate interests that justify the processing are our necessary processing of your information in order to fulfill our contract with your employer.

5. Collaborative partners

Disclosure

We pass on your personal data to our customers if we have received your consent to this.

In addition, we pass on bookkeeping-relevant information to our accountant for the purpose of preparing accounts, etc. Such passing on is primarily based on the rules on legitimate interests, where our legitimate interest is to fulfill a legal obligation.

Data processors

In order to provide you with the best service, Coresearch uses the following data processors:

Hosting providers

CRM systems

6. Deletion

Candidates:

We will store your CV until the process for the specific position for which you have applied to be considered has been completed.

If we have received your consent, we will store your CV for 18 months thereafter.

Reference persons:

We store your information for as long as we store the information about the candidate for whom you are a reference person.

Customer and contact information:

We store your information for 5 years after the end of the customer relationship, however material relevant to bookkeeping is stored for 5 years as well as the current financial year.

Supplier and contact information:

We store your information for 3 years after the end of the supplier relationship, however material relevant to bookkeeping is stored for 5 years as well as the current financial year.

7. Your rights:

If you wish to make use of the rights below, you must contact us through the contact information listed at the top of the privacy policy.

Your rights are the following:

Right to access (see personal data): You have the right to access the personal data that we process about you, as well as a range of additional information. However, the access to insight must not infringe on the rights and freedoms of others.
Right to rectification (correction): You have the right to have incorrect personal data about yourself corrected.
Right to deletion of personal data: In special cases, you have the right to have information about you deleted before the time of our general general deletion occurs.
Right to restriction of processing: In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may in future only process the information – apart from storage – with your consent, or for the purpose of establishing, asserting or defending legal claims, or to protect a person or important public interests.
Right to transmit information (data portability): When our processing of your personal data is based on consent or a contract and the processing is done automatically, you have the right to data portability. This right implies that you have the right to receive the personal data that we process about you in a structured, commonly used and machine-readable format, which you have the right to transfer to another service provider.
Right to object: In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your data for direct marketing.
Right to withdraw consent: If we base our processing on your consent, you have the right to withdraw your consent to Coresearch's processing of your personal data in whole or in part at any time.

Your withdrawal of your consent does not affect the legality of the processing carried out by Coresearch until your withdrawal of consent. If you revoke your consent, it therefore only takes effect from this point.

You can also read more about your rights in the Data Protection Authority's guidance on the rights of data subjects, which you can find at www.datatilsynet.dk.

8. Complaint

If you wish to complain about Coresearch's processing of your personal data, you have the right to lodge a complaint with the Danish Data Protection Authority, which has the following contact details:

The Norwegian Data Protection Authority

Address: Borgergade 28, 5, 1300 Copenhagen K
Email: dt@datatilsynet.dk
Telephone number: + 45 33 19 32 00
Website: www.datatilsynet.dk

Prepared December 2018. Updated continuously.