VELUX Recruitment Process Privacy Notice
The VELUX Group respects and protects your privacy.
The VELUX Group is responsible for collecting, storing and processing your personal data. Our parent company VELUX A/S is registered in Denmark under registration number 30003519 with its registered office at Aadalsvej 99, 2970 Hoersholm, Denmark.
This VELUX Recruitment Privacy Notice complies with the EU General Data Protection Regulation 2016/679 (‘GDPR’) and the Danish Law.
The VELUX Recruitment Privacy Notice describes how we collect, handle and protect your personal data in connection with the recruitment process in VELUX. The kind of information we process will vary and is determined by the requirements of the country in which the position is located This policy applies to all candidates who are EU citizens or whose personal data is processed by a VELUX entity based in the EU.
VELUX A/S is the data controller for this information unless specifically stated otherwise.
This notice should be read in conjunction with the VELUX A/S Privacy Statement.
- 1. Purpose and lawful basis for processing
Our purpose for processing personal data about you is to assess your suitability for the position for which you have applied. The lawful basis we rely on for processing your personal data is article 6(1)(b) of the GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract. The lawful basis we rely on to process any information you provide as part of your application which is special category data, such as health, religious or ethnicity information is article 9(2)(b) of the GDPR, which relates to our obligations in employment and the safeguarding of your fundamental rights. In the recruitment process, we may for some positions, based on the principles of necessity and proportionality, process personal data relating to criminal convictions and offences, but only ever upon your prior consent. (article 6.1 (a)).
- 2. When you upload your application
The personal data registered about you during the recruitment process are the data provided by you in your application, CV and other enclosed documents. Depending on the country of the position applied for, we typically register the following personal data: Name, address, date of birth, gender, telephone number, e-mail address, marital status, education background and career history.
- 3. Data from social media
We may collect personal data about you online to the extent that you have made this information publicly available. For example, we may find your profile on professional social media websites (such as LinkedIn).
- 4. Data from career assessment tests
Depending on which position, you are applying for, we may ask you to complete a career assessment test. The test results will be deleted after the recruitment process has been completed according to local legislation.
- 5. References
We may collect personal data about you from third parties, such as professional recruiting firms, your references, or prior employers, You will be asked to give your consent before we contact any references. You may withdraw your consent at any time. If you withdraw your consent, this will apply from the time of such withdrawal. Consequently, it will not affect the lawfulness of our processing of the data up to the time of withdrawal. If we obtain any references, we will register the data we receive. The data obtained will be deleted after the recruitment process has ended.
- 6. Data in connection with residence and work permit
If, due to your citizenship, you need a work and residence permit to work lawfully in the country of employment, we will also obtain a copy of your passport, work and residence permit from you.
- 7. Storage and erasure
If you are not selected for the position, we will erase all data we have collected and stored about you after 6 months, if you have given your consent hereto (6.1 (a)). However, all results from tests will be deleted after the recruitment process has been completed. If you have been selected for the position, we will store the data collected during the recruitment process in your personnel file in our HR system(s). If we have obtained a copy of your criminal record certificate in connection with the recruitment process, we will erase this as soon as we have registered that we have seen it.
- 8. Sharing your data with other companies
In connection with the recruitment process, we may share your personal data with third parties. This may be public authorities or providers supplying systems and assisting with administrative functions, e.g.:
- Recruitment agency
- Provider of personality tests etc.
- Public authorities in connection with the establishment of possibility for flexible jobs or similar programmes
When we cooperate with external service providers (data processors), we enter into a data processor agreement regarding the service providers’ processing of your personal data.
- 9. Data security and integrity
The security, integrity and confidentiality of your personal data are extremely important to us. we have implemented technical, administrative and physical security measures that are designed to protect your personal data from unauthorised access, disclosure, use and modification. from time to time, we review our security procedures to consider appropriate recent technology and methods. please be aware that despite our best efforts no security measures are perfect or impenetrable.
- 10. Your rights
According to the GDPR and the Data Protection Act, as an individual you have certain rights regarding your own personal data:
- The right to be informed
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision-making and profiling.
For more information about your rights, please see the EU guidance on the rights of data subjects, which is available at:
European Commission - What are my rights?
Please contact us if you wish to exercise any of your rights at privacy@velux.com.
- 11. Comments and questions
If you have a comment or question about this VELUX Privacy Statement, please contact privacy@velux.com.
You may file a complaint about the way we process your personal data. If a complaint is made, the name and contact details of the complainant must be provided to VELUX A/S. We will investigate the complaint and respond within one month.
If you consider that we have failed to resolve the complaint satisfactorily, you may file a complaint to your local Data Protection Agency. You can find the contact details of your national Data Protection Agency on the European Data Protection Board website: www.edpb.europa.eu.
Contact details
This website is owned and operated by VELUX A/S.
This Recruitment Notice was last updated in September 2020.