Privacy Notice for Job Applicants
ECARX Europe AB (“ECARX”, “we”, “our” and “us”), reg.no. 559281-7992, is the data controller for the processing of your personal data[1]
that you choose to submit in connection with applying for employment at ECARX.
This Privacy Notice sets out what personal data that we collect and for what purposes we process your personal data, and what rights your have in connection with our processing of your personal data.
Please note, that we only process your personal identification number, when it is clearly motivated in consideration of the purposes of the processing, when it is necessary for us to identify you or when it is necessary according to applicable data protection legislation.
In summary, we process personal data for the following purposes:
to communicate with you as potential job candidates or when you have applied for a job;
to administer and appraise your job application;
to give you access and administer your visits to our premises;
to match your profile to future job openings at ECARX (if you have consented to us doing so);
to defend us in the event of future discrimination claims in relation to your job application process;
to administer your interactions with us on our social media accounts.
Should you have any questions regarding our processing of your personal data, or if you wish to exercise any of your rights under data protection legislation, please contact us via our e-mail address compliance.eu@ecarxgroup.com or our postal address Pumpgatan 1, 417 55 Gothenburg, Sweden.
Below you will find:
1. From where do we collect your personal data? 1
2. Are you required to provide personal data to us? 2
3. Who can gain access to your personal data and why? 2
4. Where are your personal data processed? 2
5. What rights do you have in relation to our processing of your personal data? 2
6. Detailed description on how we process your personal data 3
7. Balancing of interests’ assessments when processing personal data based on the legal basis “legitimate interests” 5
8. If we make changes to this Privacy Notice 5
From where do we collect your personal data?
When you apply for a job via e-mail, you provide us information about yourself, such as your name, contact details and information found in you CV and cover letter. If you choose to connect your application with your Linkedin or Facebook profile, we will also collect your personal data from your social media platform (e.g. LinkedIn/Facebook), such as profil picture, information about your present/former place of work and other information contained under your profil. We will also collect your personal data from other sources as described below:
- In certain instances, we receive your personal data from a recruitment company that we collaborate with. The personal data that we receive is the information that you have decided to include in your job application to the recruitment company.
- If we contact your references, we process personal data about you that your references provide to us.
- If you visit our offices in Gothenburg, we will collect information from our camera surveillance.
Are you required to provide personal data to us?
You are not required to provide your personal data to us. However, if you do not provide us any personal data about yourself we will not be able to administer or evaluate your application and profile.
Who can gain access to your personal data and why?
Your personal data is primarily processed by our HR department and where assessed as necessary shared with the persons in charge for and members at the relevant departments. In certain instances, we may share your personal data with third parties. Examples of third parties to whom your personal data may be shared are:
- recruitment companies for assistance with the recruiting process;
- IP suppliers who will process your personal data on our behalf and on our instructions for security purpose;
- camera sueveillance operators who will process your footage from camera surveillance, if you visit our offices in Gotheburg;
- social media platform that you use will process personal data about you as a user, ff you interact with us or visit our pages on social media (such as LinkedIn).These social media platforms are either processing your personal data on our instructions or controllers in their own right for their processing of your personal data. What role they have in a particular case depends on the specific platform and activity;
- companies within ECARX group of companies to match your profile to future job openings
Where are your personal data processed?
We, as well as our processors, mainly process your personal data within the EU/EEA. In some instances, we will transfer your personal data outside the EU/EEA. However, such transfer only takes place in accordance with applicable data protection legislation meaning that we will transfer your personal data outside the EU/EEA when we can ensure an appropriate level of protection of your personal data.
What rights do you have in relation to our processing of your personal data?
- Right to information and access
You have the right to obtain a confirmation on whether or not we process your personal data. If we process your personal data, you also have a right to receive information about how we process the personal data and to receive a copy of your personal data.
You have a right to have inaccurate personal data corrected and to have incomplete personal data completed.
- Right to erasure (“right to be forgotten”) and restriction of processing
You have the right to have your personal data erased in certain instances. This is the case e.g. when the personal data is no longer necessary for the purposes for which it was processed, or when we process your personal data on the basis of our legitimate interest and we find, following your objection (see below under Right to object), that we do not have an overriding interest in continuing processing it.
You also have a right to request that we restrict our processing of your personal data. For example, when you question the accuracy of the personal data, when you have objected to our processing of your personal data based upon our legitimate interest, or where the processing is unlawful, and you oppose to the erasure of your personal data and instead want us to restrict our processing.
- Right to withdraw consent
At any given time, you have the right to withdraw all or part of a given consent to our processing of your personal data when the legal basis for the processing is your consent. You can withdraw your consent by sending an e-mail to compliance.eu@ecarxgroup.com.
- Right to data portability
You have a right to in certain instances be provided with such personal data (concerning you) that you have provided to us, in a structured, commonly used and machine-readable format. You also have a right to in certain instances have such personal data transferred to another controller, where technically feasible.
You have the right to object to our processing of your personal data when the processing is based on legal basis “legitimate interest”. The situations when we base our processing on our legitimate interest are stated in the below charts and you can read more about our balancing of interest assessments in the end of this Privacy Notice. In some instances, we may continue processing your personal data even if you have objected to our processing. This can be the case that when we can show compelling legitimate reasons for the processing that outweigh your interests or if our processing is necessary for the purpose of establishing, exercising or defending against legal claims.
- Right to lodge a complaint to a supervisory authority
You have the right to lodge a complaint to a supervisory authority concerning our processing of your personal data. Such complaint can be filed to the authority in the EU/EEA member state where you live, work or where the alleged infringement of applicable data protection legislation has occurred.
Detailed description on how we process your personal data
The below charts describe in detail why we process your personal data, what personal data we process, the legal basis for our processing and how long we process your personal data.
If we communicate with you before you have applied for a job (you are a potential candidate)
Why do we process your personal data?
What personal data do we process?
What is the legal basis for the processing?
How long do we store your personal data?
To communicate with you
Name, mobile telephone number, e-mail address and other personal data that we get from your social media platform or from a third party
Our legitimate interest to process your personal data to communicate with you
We will store your personal data for as long as we have an ongoing correspondence with you.
If you have applied for a job with us
Why do we process your personal data?
What personal data do we process?
What is the legal basis for the processing?
How long do we store your personal data?
To evaluate your job application and you as a candidate (e.g. through emails exchange, interviews) to be able to make sure that we find the person that is most suitable for the job position
Information you decide to include in your job application, interviews as well as any additional documents that you submit to us (e.g. personal data in your CV, cover letter and certificates). In some instances we conduct personality-tests, in which case we will also process the results from such tests.
Our legitimate interest to process your personal data to evaluate your job application and to find the most suitable person for the job position.
We will store your personal data for six (6) months after receipt of your job application if you send us an open job application.
If you apply for a listed position with us, we will store your personal data for the duration of the recruitment process.
After recruitment process
Why do we process your personal data?
What personal data do we process?
What is the legal basis for the processing?
How long do we store your personal data?
To match your profile with future job positions and to contact you regarding job opportunities
Information from your job application and interviews with you, together with any other information that we have collected from you during the recruitment process
Consent, you have the right to withdraw all or part of your consent at any time
If you consent, we will process your personal data for a period of twelve (12) months from the time that you have given your consent to our processing.
If you withdraw all or part of a given consent, we will stop storing your personal data for this purpose.
To store your personal data after the recruitment process in order to be able to defend us against future discrimination claims, i.e. in order to be able to carry evidence in the matter
Information you have provided during the recruitment process and personal data which is necessary to be able to carry evidence in the matter
Our legitimate interest
to process your personal to be able to defend us against future discrimination claims
We will store your personal data for two (2) years and two (2) months after a completed recruitment process, in accordance with the regulated time to start proceedings under the Swedish Anti-Discrimination Act.
In the event of an unsettled dispute, we process your personal data longer than the above stated time period, however, no longer than until the dispute is finally settled
If you visit our offices in Gothenburg during your recruitment process
Why do we process your personal data?
What personal data do we process?
What is the legal basis for the processing?
How long do we store your personal data?
To maintain security for our property and employees by: identifying you as a visitor to our offices, providing you with a visitor badge and using camera surveillance at our offices.
Camera surveillance footage may also be used to investigate incidents and, if necessary, shared with public authorities
Name, who you are meeting, if applicable information about where you are currently employed and footage from our camera surveillance
Our legitimate interest to process your personal data in order to take security measures to protect our property and employees
In some instances, sharing camera surveillance footage is made to fulfil a legal obligation, i.e. when we have to comply with requests from the police or other law enforcement agency
We store the personal data connected to the visitor’s badge during the day of your visit and one day thereafter.
Any camera surveillance footage will be stored for 14 days from the recording date. However, in some instances (for example if an incident occurs) we store the footage for an extended period of time if necessary to investigate such incident.
If you interact with us on our social media accounts
Why do we process your personal data?
What personal data do we process?
What is the legal basis for the processing?
How long do we store your personal data?
To communicate with you via our social media accounts (such as Facebook and LinkedIn) e.g. if you comment on a post, and to keep records of such communication for reference
Information from your profile on the social media in question (e.g. user name and profil picture) and information which you provide on our page.
Our legitimate interest to process your personal data to communicate with you on our social media platforms.
Your personal data will be removed if you ask us to remove it or if you yourself delete the content, but we will otherwise store the personal data on the social media platform until further notice
Balancing of interests’ assessments when processing personal data based on the legal basis “legitimate interests”
For some purposes mentioned above, we process your personal data based upon our “legitimate interest”. By carrying out a balancing of interests assessment concerning our processing of your personal data, we have concluded that our legitimate interest for the processing outweighs your interests or rights which require the protection of your personal data.
If we make changes to this Privacy Notice
We may update this Privacy Notice from time to time by publishing a new version on this website and you will be notified when material changes that affect you are made. we will update the “last updated” date below.
Last updated: 2022-02-21
[1] Personal data is all information that relates to you, for example your name, e-mail address and information about your qualifications.
