Applicant privacy notice

Sandvik collects and processes the information that you submit when you apply for a position at Sandvik (“Personal Data”). This applicant privacy notice (“Privacy Notice”) sets out which personal data that we collect and for which purposes it is processed, as well as your rights connected to the processing of your personal data.

Applicant Privacy Notice – Sandvik Group

The Sandvik Group (“we” or “Sandvik”) respects your data privacy. This Privacy Notice describes how we use your personal data when you apply for a job at Sandvik. We also explain your rights under the GDPR and how to exercise them. The Sandvik company to which you applied for the job position is responsible for your personal data and considered the “Controller” of your personal data.

We collect personal data from several sources

You submit information about yourself to us, and we collect information about you from several other sources. Here is a description of those sources:

References

We normally collect opinions from references in the final phase of the recruitment process. In such case, we collect the personal data that the reference provides about you.

Recruitment company

If we engage a recruitment agency to support us in recruitment, we collect the personal data that the recruitment company provides to us.

Publicly available sources of information

We may also search for information that is publicly available, e.g. on LinkedIn or, if relevant, other Internet sources, such as social media.

The types of personal data we process, why and on what legal basis

1. Managing the application process, assessment of your qualifications, capabilities and interests, and verification of information

We will process your personal data in order to find suitable applicants for positions within the Sandvik Group, administer and manage the recruiting process, verify that information provided is accurate (e.g. through reference checks), evaluate and choose the most suitable person for the open job position, and pre-board a chosen applicant. For these purposes, we process the following personal data:

• Contact information (such as name, address, e-mail address and telephone number, and eventually your social security number for the pre-boarding process if you are selected and have accepted an offer)
• Data you submit to create an candidate account
• Demographic data
• Position applied for and job preferences, how you heard about the position, and your willingness to travel, if applicable
• Current employment
• Job experience
• Salary information
• Education
• Qualifications (such as language skills, computer knowledge and special skills)
• Evaluation notes and decisions
• Other information provided by you in your CV and/or personal letter
• Photographs as may be included in your CV or personal letter
• Publicly available profiles, such as LinkedIn
• Results and your responses from personality and aptitude assessments (logic problem-solving tests), administered in the last phases of the recruitment process
• References
• Correspondence with Sandvik during the recruitment process
• If selected for the position, personal data needed to complete the employment contract

We rely on “legitimate interests” as our legal basis to manage the recruiting process in a way that helps us find the most suitable person for the job position.

2. Background checks

If the position you apply for requires background checks based on risk-classified positions, we will process your personal data to conduct these checks, but only as permitted by local law. For this purpose, we may process the following personal data:

• Contact information (such as name, address, e-mail address, telephone number)
• Public records
• Public certifications and licenses (e.g., driver’s license, licenses, etc., as relevant for the position)
• Criminal record(s)
• Social security number
• Financial information (e.g. credit checks)
• References

We rely on “legitimate interests” as our legal basis, where legally permitted, to confirm that an applicant does not have a criminal offence which is incompatible with the nature of the position offered or present a high level of risk for the interests or safety of our customers or staff.

3. Our retention policy and defending against legal claims

For the purpose described in Section 1 above (Managing the application process, assessment of your qualifications and interests, and verification of information), we will store your personal data after the recruitment process has closed solely for the purposes of establishing, exercising and defending potential legal claims. We will store the data for as long as the statute of limitations exists in the applicable jurisdiction for bringing unlawful hiring claims. If you have questions regarding the retention period for your particular application, please contact the Sandvik company to which you applied.

We rely on “legitimate interests” as our legal basis to exercise our rights in bringing or defending against legal claims.

4. Disclosure and transfer of Personal Data

We may disclose your personal data to other companies in the Sandvik Group and to recipients outside the Sandvik Group that support Sandvik in the recruiting process, to ultimately select the most suitable candidate. For example, we use third party suppliers to administer the personality and logic aptitude tests and to conduct background checks, and as such, personal data processed for these purposes shall be shared with the relevant suppliers. Additionally, in completing an employment agreement with you, we will need to transfer personal data to public authorities according to local law, such as the tax authority.

Some recipients may be located outside the EEA. To make these transfers, Sandvik has in a compliant manner, Sandvik will or has entered contracts with the relevant suppliers, incorporating the European Commission´s Standard Contractual Clauses (SCCs) as described in GDPR Article 46(2) or Sandvik has or will comply with a legal safeguard described in Article 45. Within the Sandvik Group, all companies have entered into Sandvik’s intra-group data transfer agreement, which incorporates the SCCs.

You are entitled to receive a copy of any documentation demonstrating that appropriate safeguards have been taken in order to protect your personal data during a transfer outside the EEA, regardless of whether it is an intra-group transfer or a transfer to an external party. To request such a confirmation, please send your request to privacy@sandvik.com.

5. Your rights

You have the below listed rights under the GDPR. All requests should be made to Personal Data Request. You may:

1. Require correction of inaccurate data about you;
2. Request confirmation on whether personal data is processed about you. And if so, the right to know what personal data is being processed and additional information such as the purpose of processing. You are also entitled to have access to this personal data;
3. For data processed on legitimate interests grounds, we have performed a legitimate interest balancing test and concluded that our interest (e.g., finding and hiring suitable applicants) outweighs applicants’ interests. You may obtain further information about this general balancing test and pose any objections or concerns, based on your individual circumstances.
4. Have your personal data deleted, under certain circumstances;
5. Restrict the processing of your personal data, under certain circumstances;
6. When data portability requirements apply, receive a machine-readable copy of the personal data processed based on your consent or on the basis that the processing is necessary to perform your employment contract.

6. Complaints to the supervisory authority

You have the right to file a complaint regarding the processing of your personal data to the data protection authority in the country where you live, where you are working or where you believe a violation of the GDPR occurred.

7. Contact information

The controller of your personal data is the Sandvik company with the job opening that you are applying to. If you have any questions about who the controller of your personal data, please contact us at privacy@sandvik.com.