Privacy Notice for Job Applicants and Recruitment Marketing

To fulfil the purpose above, we collect and process the following types of personal data:

• your name
• date of birthday or social security number/government issued ID number (please do not provide the last four numbers of any Danish CPR-number)
• e-mail address
• home address
• country of residence
• telephone number
• photo
• employment and education details and other information provided by you in your CV, diploma or any other documents disclosed by you to us
• contact details on referees
• test results and internal candidate evaluations carried out in connection with your application process

For applications to Deloitte Statsautoriseret Revisionspartnerskelskab (Deloitte DK) we may also request to see criminal record as part of final recruitment process if offered a position.

In connection with personality tests, logical tests and other tests as part of the recruitment process, profiling (e.g., by automated data treatment) may take place. Please be informed that you are entitled to you are allowed to object to the profiling. If you wish to exercise this right, please note that your application may be withdrawn, and you may no longer be a candidate for the position.

Personal data provided by you to us or to our supplier, or reference given by you to us. Subject to your prior approval, we may also collect personal data from LinkedIn.

We collect and process your data in accordance with applicable data protection laws including the EU’s General Data Protection Regulation (GDPR) based on your consent (Art. 6 paragraph 1 (a)) and our legitimate interest (Art. 6. Paragraph 1 (f)) to provide you with an employment contract and to be able to protect our self in case of litigation related to your application process.

For application to Deloitte Statsautoriseret Revisionspartnerskelskab (Deloitte DK), provision of information about whether or not you have been subject to any criminal conviction will be collected and processed in accordance with GDPR Article 10, cf. Article 6.1 (a), cf. Article 8.3 of the Danish the Data Protection Act (“Databeskyttelsesloven”). 

For the purposes specified above we transfer your personal data to our recruitment system provider SmartRecruiters, with a hosting location in Germany, who process and store your personal data on our behalf as a data processor. 

If you as part of the recruitment process are asked to carry out test(s) we may share such personal data of you with our test provider collaborating parties facilitating such tests subject to your consent. Your test data will be processed and stored as per their privacy notice informed to you prior to the test. 

If you chose to sign an employment contract with us your personal data may be shared with our clients to be able to staff projects.

Your personal data may be transferred or viewable to recipients located in countries outside the EU/EEA (third country) for the purposes listed above, if necessary. This might be the case if our system provider SmartRecruiters utilizes a sub-processor for e.g., IT support located in a country outside EU/EEA or if the client is based outside EU/EEA. In such case, the legal basis for the international transfer is EU’s Commissions latest Standard Contractual Clauses and any export of your personal data only takes place in accordance with data protection law of EU including GDPR and requirements for transfers of data to a third country as applicable to Deloitte.

When you apply for a job at Deloitte, we will retain your personal data in our recruitment system SmartRecruiters for a period of twenty-four (24) months from the date the recruitment process ends.

Subject to the conditions set out in the applicable data protection legislation you have the following rights:

• The right to request access to the personal data, we have registered on you.
• The right to rectification and /or erasure of the personal data.
• The right to restriction of processing.
• The right to data portability.

You also have the right, at any time, to object to the processing of your data, to withdraw your consent and object to profiling of your personal data. If you wish to exercise this right, please note that your application will be withdrawn, and you will no longer be a candidate for the position. You are always welcome to apply for another position in the future. Please be informed that any data processing based on consent that took place before the withdrawal of consent remain lawful. Further, the withdrawal of your consent does not restrict us from processing your personal data to the extent the legal basis is based on legitimate interest. 

If you are not satisfied with our processing of your data, you have the right to lodge a complaint with the competent supervisory authority. Please see the contact details to the supervisory authority corresponding to the country in which you have applied for a job:

Denmark

Datatilsynet
Borgergade 28, 5
1300 København K

E-mail: dt@datatilsynet.dk

---

Finland

Tietosuojavaltuutetun toimisto
Lintulahdenkuja 4
PL 800
00531 Helsinki
Finland

E-mail: tietosuoja@om.fi

---

Iceland

Persónuvernd
Raudararstig 10
105, Reykjavik
Iceland

---

Norway

Datatilsynet
Postboks 458 Sentrum
0105 Oslo
Norway

E-mail: postkasse@datatilsynet.no

---

Sweden

Integritetsskyddsmyndigheten
Box 8114
104 20 Stockholm
Sweden

E-mail: imy@imy.se 

To fulfil the purpose above, we collect and process the following types of personal data:

• your name
• date of birthday or social security number/government issued ID number (please do not provide the last four numbers of any Danish CPR-number)
• e-mail address
• home address
• country of residence
• telephone number
• photo
• employment and education details and other information provided by you in your CV, diploma or any other documents disclosed by you to us
• contact details on referees
• test results and internal candidate evaluations carried out in connection with an application process (if applicable)
  

Deloitte will use profiling in order to ensure that we only communicate information that may be relevant for you. The information that you provide to use, and if applicable, the result of a performed personality tests, logical tests and other tests carried out as part of a recruitment process, will assist us to build a profile of you. Please be informed that you are entitled to you are allowed to object hereto the profiling. 

The personal data are collected from you, or references given by you to us. 

We collect and process your data in accordance with applicable data protection laws including the EU’s General Data Protection Regulation (GDPR) based on your consent (Art. 6 paragraph 1 (a)). 

For the purposes specified above we transfer your personal data to our Recruitment Marketing CRM system provider SmartRecruiters, with a hosting location in Germany, who process and store your personal data on our behalf as a data processor. 

Your personal data may be transferred or viewable to recipients located in countries outside the EU/EEA (third country) for the purposes listed above, if necessary. This might be the case if our system provider SmartRecruiters utilizes a sub-processor for e.g., IT support located in a country outside EU/EEA. In such case, the legal basis for the international transfer is EU’s Commissions latest Standard Contractual Clauses and any export of your personal data only takes place in accordance with data protection law of EU including GDPR and requirements for transfers of data to a third country as applicable to Deloitte.

We will retain your personal data in our Recruitment Marketing CRM system SmartRecruiters for a period of twenty-four (24) months from day you have given your consent. Prior to the expiration of this initial retention period, we may ask for your consent to retain your data for an extended period of time, so that we may consider you for other openings that becomes available. If you choose not to consent to this extended retention period, your personal data will be deleted at the expiration of the initial twenty-four (24) months.

Subject to the conditions set out in the applicable data protection legislation you have the following rights:

• The right to request access to the personal data, we have registered on you,
  
• The right to rectification and /or erasure of the personal data,
• The right to restriction of processing,
• The right to data portability

You also have the right, at any time, to object to the processing of your data, to withdraw your consent and object to profiling of your personal data. Please be informed that any data processing based on consent that took place before the withdrawal of consent remain lawful.

If you are not satisfied with our processing of your data, you have the right to lodge a complaint with the competent supervisory authority. Please see the contact details to the supervisory authority corresponding to the country to which Recruitment Marketing CRM that you have chosen to be a part of:

Denmark

Datatilsynet
Borgergade 28, 5
1300 København K

E-mail: dt@datatilsynet.dk

---

Finland

Tietosuojavaltuutetun toimisto
Lintulahdenkuja 4
PL 800
00531 Helsinki
Finland

E-mail: tietosuoja@om.fi

---

Iceland

Persónuvernd
Raudararstig 10
105, Reykjavik
Iceland

---

Norway

Datatilsynet
Postboks 458 Sentrum
0105 Oslo
Norway

E-mail: postkasse@datatilsynet.no

---

Sweden

Integritetsskyddsmyndigheten
Box 8114
104 20 Stockholm
Sweden

E-mail: imy@imy.se