INTRODUCTION
In this privacy policy, we at Gruvaktiebolaget Viscaria (publ), reg. no. 556704-4168 (“Viscaria”) want to describe how we, as the data controller, collect, process and share the information we process about you in connection with you applying for a position at one of our companies. We also explain how you can exercise your data protection rights.
If your application is for a position where one of our group companies is the employer, references to Viscaria in this privacy policy will refer to the group company.
PERSONAL DATA PROCESSED BY VISCARIA
We may process the following categories of personal data about you:
- Contact details: address, telephone number, email address and, where applicable, link to LinkedIn profile.
- Identity and permit details: first and last name, age, personal identity number or coordination number, date of birth, gender and, where applicable: passport, ID card, personal photo as well as residence and work permits.
- Qualifications: CV, work and other qualifications such as language skills, grades, driving licence, licences, diplomas and information from external parties (e.g. references).
- Information about the position: salary requirements, workplace, availability, notice period from current employment and preferences regarding the position.
- Application questions, interviews and tests: notes from interviews, free-text answers and answers to multiple-choice questions in the application form, test results and other evaluations.
- Special categories of personal data (“sensitive data”): sensitive data that you provide in your application or in other communications with us, such as information about your health or trade union membership.
HOW WE PROCESS YOUR PERSONAL DATA AND ON WHAT BASIS
We process your personal data for the following purposes and based on the following legal bases:
To carry out and administer the recruitment process
To be able to receive and process your application, communicate with you on an ongoing basis during the process, verify your identity and eligibility to work, and assess your skills, experience and suitability for the position in question. The processing also includes handling information about salary and availability, as well as conducting structured elements such as interviews, tests and other assessments that are part of the recruitment process.
- Categories of personal data: contact details, identity and permit details, qualifications, information about the position, application questions, interviews and tests.
- Legal basis: The processing is based on our legitimate interest in having a functional and effective recruitment process. We need to ensure a correct, objective and fair selection process and be able to recruit staff with the right skills and experience for the position. We may also be required by law to check work permits and identity documents in connection with employment.
Future recruitment processes
If you have given your consent, Viscaria may retain your personal data after a recruitment process has been completed in order to contact you and consider your application for future recruitment needs.
- Categories of personal data: the information you provided in your application, such as contact details, qualifications, application questions, interviews and tests.
- Legal basis: The processing is based on your consent. You may withdraw your consent at any time.
Handling of sensitive personal data
If you voluntarily provide sensitive personal data, such as information about your health or trade union membership, this will only be processed if Viscaria deems it necessary for the recruitment process. Otherwise, the data will be deleted by Viscaria.
- Categories of personal data: special categories of personal data.
- Legal basis: Processing is based on your consent. You may withdraw your consent at any time.
HOW WE COLLECT YOUR PERSONAL DATA
Viscaria collects your personal data from the following sources:
- directly from you when you submit your job application and other application documents to us, or by participating in our job interviews, meetings or tests;
- references you have provided;
- consultants involved in the recruitment process;
- where applicable, third parties in connection with your application or when you fill in a form via a supplier such as LinkedIn; and
- public authority registers and other public sources.
HOW WE SHARE YOUR PERSONAL DATA
Viscaria employees who access your personal data do so only if necessary to perform their duties.
In some cases, we also need to share your personal data with other parties. This may include:
- Our group companies: Your personal data may be shared with our other group companies if necessary for administrative purposes, recruitment support or to provide shared services. Access is only granted to those individuals who need the data to perform their duties.
- Our consultants: We may share your personal data with consultants who assist us, for example in recruitment. Only those consultants who need the data for their work will have access to it. Our consultants have entered into the necessary confidentiality agreements for these purposes.
- Our service providers: We share your personal data with service providers who support our operations, recruitment systems or provide various digital solutions. Our service providers have also entered into the necessary confidentiality agreements for these purposes.
- Authorities and public bodies: We may need to share your personal data with, for example, law enforcement agencies or other authorities when we are required to do so by law. Data may also be shared with such parties if necessary to prevent or detect crime or fraud.
- Parties to legal proceedings: In connection with potential legal proceedings, including in preparation for defending or enforcing any legal claims, your personal data may need to be shared with parties involved in the proceedings, such as lawyers.
PROTECTION OF YOUR PERSONAL DATA WHEN TRANSFERRED TO THIRD COUNTRIES
Viscaria uses suppliers that transfer personal data to countries outside the EU/EEA (so-called "third countries"). These transfers are necessary for us to provide our services. Viscaria has entered into data processing agreements with these suppliers, which contain provisions that adequately protect your personal data in connection with such third country transfers.
Transfers of personal data outside the EU/EEA are processed in accordance with applicable data protection legislation, including the GDPR. The protection of personal data in the context of transfers outside the EU/EEA is ensured e.g., by (i) the European Commission's adequacy decision or (ii) by the procedural safeguards offered by the European Commission's Standard Contractual Clauses (SCC). The protection is supplemented by technical and organisational security measures, including encryption and anonymisation/pseudonymisation.
If you have any questions about Viscaria's transfers of personal data to countries outside the EU/EEA, please contact us using the contact details provided at the end of this privacy policy. You have the right to obtain a copy of any documentation demonstrating that appropriate safeguards have been implemented to protect your personal data in the event of a transfer to a third country.
Click here
to read more about third-country transfers.
HOW LONG WE STORE YOUR PERSONAL DATA
We only store your personal data for as long as is necessary to fulfil the purposes set out herein. How long depends on the type of information and why we process it.
- Recruitment processes: Personal data is stored for up to two (2) years after the recruitment process has been completed, partly so that we can defend ourselves against any legal claims.
- Recommendations and sourcing: If your data has been submitted through a recommendation or because we have sought it out ourselves (known as sourcing), it will be stored for up to two (2) years from the date it was submitted or registered in our recruitment system.
- Future recruitment processes: If you have given your consent for future recruitment processes, your personal data will be stored until you withdraw your consent, or at an earlier date at our initiative.
- Employment: For candidates who are hired, the data will, to the extent that it is still relevant, be included in the personnel file and stored in accordance with our internal policies.
In some cases, your personal data may be stored for a longer period if required by applicable law.
YOUR RIGHTS
You have the right to:
- obtain confirmation as to whether we are processing personal data about you, and if so, to access it in the manner prescribed by applicable data protection legislation;
- request that we correct inaccurate personal data about you;
- request that we erase your personal data if there are no legal grounds for continuing to process it;
- request that we restrict or cease processing your personal data, provided that there is no legal basis for continuing the processing;
- request to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format (portability);
- withdraw your consent; and
- request manual review of a decision made through automated processing, present your position and contest the decision.
In order to confirm that the right person is submitting a request for one of the above actions, Viscaria may perform an identity check.
You also have the right to lodge a complaint with the Swedish Data Protection Authority www.imy.se
regarding our processing of personal data. On the authority's website, you can also find detailed information about your rights under applicable data protection legislation.
CONTACT US
If you have any questions or concerns about the processing of your personal data, please contact us by e-mail at info@viscaria.com.
CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be updated from time to time. You will be notified appropriately when changes are made to this Privacy Policy, unless the changes are non-material or insignificant.
This privacy policy was last updated in November 2025.
