ID:Data Protection
Information Requirements
Applicant Data

DS001

Revision:001

Status: Approved
Date: 11 May 2018

Information on processing personal applicant dataper Art. 13, 14 GDPR
Dear applicant,We take the protection of your personal data very seriously. We process your data inaccordance with the EU General Data Protection Regulation (GDPR). The following details
how we process your data per Art. 12 et seq. GDPR.

Who is responsible for data processing? (Art. 13.1a, b GDPR)
Responsible for data processing:Interroll Nordic A/S
Männistönkatu 22, FI-08150 Lohja
Phone: +358 95 49 49 400
Email: tietosuoja@interroll.com
Ask questions about data protection to:Interroll Nordic A/S
GDPR-Coordinator
Männistönkatu 22, FI-08150 Lohja
Phone: +358 95 49 49 400
Email: tietosuoja@interroll.com

For what purposes and on what legal basis do we process your personal data?
(Art. 13.1c, d, Art. 6 GDPR)

We process the data you have made available to us as part of an application for a job postingor on your own initiative or which we have received from generally accessible sources per Art.
6.1b GDPR in order to examine possible recruitment.
We only process your personal data if we have legitimate interest in storing it per Art. 6.1f
GDPR, such as during an internal analysis of an application process.

Who receives your personal data? (Art. 13.1e, f GDPR)
We generally do not pass on personal data to third parties unless you have given your consent
or a legal regulation provides for it.
In our company, only the HR department, the management and possibly your future supervisor
has access to application documents. Various activities in the field of applicant management
are assigned to Interroll Joki A/S, which works as a service provider for Interroll Nordic A/S.
The processing of the data takes place there as order processing according to Art. 28 GDPR.
We process your data in Denmark and Finland and have no intention of processing the data
in other countries.

ID:

Data Protection
Information Requirements
Applicant Data

DS001

Revision:

001

Status: Approved
Date: 11 May 2018

How long is the data stored? (Art. 13.2a GDPR)
If you send us your application documents on your own initiative, we will check whether wecan consider hiring you. If we cannot, the documents will be deleted immediately or, if you
have contacted us by mail, sent back to you. We only save a copy of the rejection letter.
It may be that you apply to our job posting with the application procedure and we include you
in our team. We will then archive or store your data with the HR files in accordance withstatutory provisions. If we do not decide for you, we will store and archive your documents for6 months.
We may not be able to offer you a job at first while still wanting to stay in touch with you. In thiscase, we will only save your application if you have given us your consent.
Data that we process on the basis of your consent will be stored until revoked or for a maximumof two years.
We store data that we process on the basis of legitimate interest for as long as the legitimate
interest exists.

What rights do you have? (Art. 13.2b, c, d, e GDPR)
Every data subject has the following rights:
Art. 15 GDPR: Right of accessArt. 16 GDPR: Right to rectification
Art. 17 GDPR: Right to erasure (‘right to be forgotten’)Art. 18 GDPR: Right to restriction of processing
Art. 20 GDPR: Right to data portability
Art. 21 GDPR: Right to object
Art. 13d GDPR: Right to lodge a complaint with a supervisory authority
Art. 7.3 GDPR: Right to withdraw consent at any time
If you wish to exercise your rights, please contact us in writing (by mail or email) as mentionedabove.

Competent supervisory authority
Tietosuojavaltuutentun toimisto
Address: Ratapihantie 9, 6. krs, FI-00520 Helsinki
Postal address: PL 800, FI-00521 Helsinki
Phone: +358 29 56 66 700
E-mail: tietosuoja@om.fi

Should you make your application available to us voluntarily, there is no legal or contractual
obligation at the time of application. You cannot take part in an applicant selection procedure
without your application documents. Therefore, we cannot offer you an employment contract
without your application documents.
There is no automated decision making or profiling per Art. 22.1 And 4 GDPR.