The data controller is:  

H2GS AB (under name change to Stegra), org.no 559272-3000
Norra Stationsgatan 93, 113 64 Stockholm

For any data protection queries, or if you wish to exercise any of your rights as set out in Section 7, you can contact us at stegra@talent-community.com.

When you join our talent pool, you are asked to provide the following information about yourself:

• Contact details: Name, phone number, postal address, and email address.

• Qualification information: CV, employment history, education, qualifications, skills, licenses and certificates. 

• Personal information: Date of birth, gender, current country of residence, rate of pay, national insurance number or other national identifiers, immigration status and work permit information, where required.

• Talent pool: Which talent pool you belong to.

Your personal data is collected directly from you when you sign up to our Talent Community or apply directly for a role.

*We have concluded that the processing is necessary to fulfil our legitimate interests and that our interest outweighs your rights not to have your personal data processed for this purpose. You may always leave the talent pool at any time.

We may share your personal data with third parties, including:

• Service providers involved in the recruitment process
  This Talent Community is provided to us by Randstad Sourceright and they process your personal data in the capacity of a data processor. Randstad Sourceright only processes your personal data on the documented instruction of Stegra and the processing is governed by a Data Processing Agreement. 
  
  If you apply for a job opening, your personal data will be transferred to Team Tailor, a service provider we use in the recruitment process. Team Tailor processes your personal data in the capacity of a data processor. Team Tailor only processes your personal data on the documented instruction of Stegra and the processing is governed by a Data Processing Agreement.

• Stegra’s group companies
  We share your personal data with our group companies, when they provide us with services and functionality to our employer branding and recruitment process, such as access to particular systems and software.

• IT service providers
  We share your personal data with IT providers involved in hosting or processing data on our behalf. IT service providers only process your personal data on the documented instruction of Stegra and the processing is governed by a Data Processing Agreement.

 

We may transfer your personal data to countries outside of the European Economic Area (EEA). Where such transfers occur, we will ensure that appropriate safeguards are in place to protect your data. We use the following safeguards:

• A decision by the EU Commission that the country outside the EU/EEA to which your personal data is transferred has an adequate level of protection, which corresponds to the level of protection afforded by the GDPR.

• Entering into the EU Commission’s standard clauses with the recipient of the personal data outside the EU/EEA. This means that the recipient guarantees that the level of protection for your personal data afforded by the GDPR still applies, and that your rights are still protected. 

When your personal data is transferred outside the EU/EEA we also implement appropriate technical and organizational safeguards to protect the personal data in case of disclosure. Exactly which protective measures we implement depends on what is technically feasible, and sufficiently effective, for the particular transfer. 

If you want more information about the cases in which your personal data is transferred outside the EU/EEA, you can contact us using the contact details in Section 1.

In this section, you will find information about the rights you have when we process your personal data. As described below, some of the rights only come into play when we process your personal data under a particular legal basis. 

If you want to exercise any of the rights listed here, you may contact us directly at stegra@talent-community.com. 

Right to be informed 

You have the right to be informed about how we process your personal data. You also have the right to be informed if we plan to process your personal data for any purpose other than that for which it was originally collected. 

We provide you with such information through this privacy notice and by answering any questions you may have for us. 

Right to access your personal data. 

You have the right to know if we process personal data about you, and to receive a copy of the data we process about you. In connection with receiving the copy of your data, you will also receive information about how we process your personal data. 

Right to access and to request a transfer of your personal data to another recipient (“data portability”). 

You can request a copy of the personal data relating to you that we process for the performance of a contract with you, or based on your consent, in a structured, commonly used, machine-readable format. This will allow you to use this data somewhere else, for example to transfer it to another recipient. If technically feasible, you also have the right to request that we transfer your data directly to another recipient. 

Right to have your personal data deleted (“right to be forgotten”). 

In some cases, you have the right to have us delete personal data about you. For example, if it’s no longer necessary for us to process the data for the purpose for which we collected it, if you withdraw your consent, or if you have objected to the processing and there are no legitimate, overriding justifications for the processing. (For the separate right to object, see below.) 

Right to object against our processing of your personal data. 

You have the right to object to processing of your personal data which is based on our legitimate interest, by referencing your personal circumstances. 

Right to restrict processing. 

If you believe that the personal data we process about you is inaccurate, that our processing is unlawful, or that we don’t need the information for a specific purpose, you have the right to request that we restrict the processing of such personal data. If you object to our processing, as described just above, you can also request us to restrict processing of that personal data while we make our assessment of your request. 

When our processing of your personal data is restricted, we will (with the exception of storage) only process the data with your consent or for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons relating to an important public interest. 

Right to rectification. 

You have the right to request that we rectify inaccurate information, and that we complete information about you that you consider incomplete. 

Right to withdraw your consent. 

When we process your personal data based on your consent, you have the right to withdraw that consent at any time. If you do so, we will stop processing your data for the purposes you’ve withdrawn your consent for. However, it doesn’t affect the lawfulness of processing that was based on your consent before it was withdrawn. 

Right to raise a complaint. 

If you have complaints about our processing of your personal data, you can raise a complaint with the data protection authority in Sweden. You can find their contact details here. 

You can also lodge a complaint with your national data protection authority, which you can find listed here if you are based in the EU. If you are based in the UK, you can lodge a complaint with the Information Commissioner’s Office, here. 

We may update this privacy notice from time to time. We encourage you to review this notice regularly for any changes. The date of the most recent update is indicated at the bottom of the notice.

Date of last update: 2024-11-21