your privacy explained.

website visitor

When you visit our website or a Randstad app, we collect some information related to your device, your browser and to the way you navigate our content. We may use cookies to collect this personal data. 

Cookies are small text files that are saved on your device when you visit our website. Cookies enable the website to remember your actions and preferences (for example, your choice of language) and recognize you when you return, so that we may analyze trends, determine your areas of interest and administer our website in order to speed up the navigation process and to make your site experience more efficient.

When you visit our website, we gather information that relates to your device, your browser and to the way you navigate our website content, such as:

• the Internet Protocol (IP) address of your device
• the IP address of your Internet Service Provider
• device screen resolution
• device type (unique device identifiers)
• browser and operating system versions
• geographic location (country only)
• preferred language used to display
• the date and time of access to the website
• the internet address from which you were directly linked through to our website
• the control system that you use
• the parts of the website that you visit
• the pages of the website that you have visited and the information that you viewed
• the hyperlinks you have clicked
• the material that you send to or download from our website

If you choose to download our reports or white papers; or to subscribe to our newsletter news, events and alerts; or submit an inquiry we may ask you to fill out a form with information such as your name, e-mail address, job title and company. From the moment you engage in one of the aforementioned actions, we will be able to relate the information listed above about your device, your browser and to the way you navigate our website content directly to you.

Randstad processes your personal data only for the purposes specified below

• To manage the website and for system administration purposes.
  Based on our legitimate interest of managing our website, marketing and communications strategy; and/or in limited cases, based on consent.
• for web analytics, in order to optimize the user experience and the quality of the content provided to you (e.g. job posting). Based on our legitimate interest of improving our website, marketing and communications strategy; and/or in limited cases, based on consent.
• If you choose to download our reports or white papers or to subscribe to news, events and alerts, fill in webforms, we will use the information you provide us to send you the content requested, to communicate with you and to improve our marketing and communication strategy: Randstad can send whitepapers, newsletters, events and alerts where you have given consent to receive this. If you are no longer interested in these Randstad messages you are always able to opt-out from receiving such communications.
• For managing specific inquiries. Based on the legal ground of our legitimate interest of improving our website, marketing and communications strategy; and/or based on consent.
• cooperating with law enforcement agencies/courts, management of legal disputes/claims. Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes.

Please find more information on the cookies we use, for what purpose and further settings for configuring or deleting cookies in our cookie notice.

talent

Your privacy and the security of your personal data is important to Randstad Sweden Group AB ("Randstad", “we” or “us”) which is responsible for ensuring that all personal data is processed properly and in accordance with applicable data protection legislation and Randstads´dataprotection policy. The information in this privacy notice is also applicable to Randstad’s group companies in Sweden. This privacy notice is however not applicable to Randstad Sourceright AB and Randstad Risesmart AB. Protecting your personal data and privacy is part of our employees’ job. As data controller, Randstad is responsible for processing your personal data and to determine how and for what purpose the data are processed.

personal Data Controller and contact information

Within the Randstad Sweden Group, the following companies may be Personal Data Controller for processing your personal data in the talent account:

• Randstad Sweden Group AB, corporate ID No 556089-6572
• Randstad AB, corporate ID No 556242-1718
• Randstad Consulting AB, corporate ID No 559482-5126
• Randstad Solutions AB, corporate ID No 559483-5513

These companies share the same Data Protection Officer. If you have questions about Randstad's use of personal data, you can contact Randstad's Data Protection Officer by sending an email to dataskyddsombud@randstad.se.

what personal data we process and how it is collected

When you register your CV with Randstad, and thereby register a talent account, Randstad will process personal data about you and how you use our services. When you register a Talent Account, the personal data we process are your name, address, e-mail address, telephone number, and information in your CV, such as work experience, earlier places of work, personal ID number, certificates, photograph and any additional information you voluntarily provide us with.

You can create a talent account on our website, or Randstad can create one upon your request following, for example, a telephone conversation between you and Randstad personnel. We collect and process personal data:

• That you yourself provide when creating an account (or provide Randstad with to create an account for you),
• That we collect from you during the time in which you have a talent account, such as information concerning career ambitions, personal or social qualities, industries you wish to work in, desired work hours, to assist with information for your legal rights according to Staffing Act (2012:854) etc.
• That we collect from other sources, such as information from referees you have provided.

this is what we use the personal data in your talent account for

Randstad processes your personal data only for the purposes specified below:

• To provide and manage the services that you requested by creating a talent account, i.e. to find suitable assignments for you:Necessary for our legitimate interest to ensure we find and select the right talent.
• To process additional information from referees: 
  Necessary for our legitimate interest to ensure we find and select the right talent.
• To manage enquiries that you pose to our support: 
  Necessary for our legitimate interest to ensure that the talent can communicate with us.
• To conduct a credit check where this is necessary for the job or assignment you have applied for: Necessary for our legitimate interest to ensure that you are the suitable talent for the job or assignment. 
•  To perform market analysis, system tests, business and method development: Necessary for our legitimate interest to ensure that the services and our systems meet our talents' and our clients' needs over time.
• To be able to manage Randstad's obligations towards you or an individual concerned, to deal with cases concerning alleged discrimination: Necessary for our legitimate interest to establish, filing or defending legal claims.
• To provide direct marketing and offers from Randstad:
  Necessary for our legitimate interest to maintain good relations with our talents. You can always oppose to receiving direct marketing and offers from us, see your rights below.
• To process information about previous placements as hired out person to client companies on one and the same operating unit: Necessary for our legitimate interest in assisting with information to both talent (and supplier if applicable) and client for its legal rights and obligations according to Staffing Act (2012:854).
• Training and updating of systems/statistical purposes. Some of the systems that we use to provide our Services are based on machine learning technology. In order for that technology to function reliably, it needs to be trained and updated on the basis of existing data. We may also process personal data in an aggregated manner for statistical purposes: Based on our legitimate interest in training and updating our systems. We have implemented mitigating measures to limit the privacy impact, such as de-identification and an easy opt-out in your choices.

process of additional personal data under assignments/processes

When we provide you with our services, we can process additional personal data about you if this is required by our client and/or legislation. This could include, for example, personality tests, information concerning whether you have completed alcohol or drug tests, background checks and health examinations. You will receive information about the process and in applicable cases give your consent before we collect these personal data.

We will check criminal history that requires special approval by you. We will not process this information in any way, but we may verbally check the result with our client.

In the context of the services we provide to you, we process your personal data for compliance with laws and regulation, including but not limited to national and international sanctions legislation, such as the Anti-Terrorism legislation. 

Should you be employed by Randstad, we will inform you about our processing of your personal data that will occur during and in connection with your employment.

with whom do we share your personal data

We may share your personal data with other companies within the Randstad Group and with subcontractors that provide us with services, such as suppliers of operating services and system support. Randstad will continue to be responsible for the processing of your personal data that we perform or subcontractors perform on behalf of Randstad. Subcontractors may not use the personal data for any purposes other than those specified by us. The sharing of personal data within the Randstad Group or to subcontractors occurs in order to fulfil the contract between us, i.e. for us to be able to provide you with the agreed services.

When we share personal data according to the above, the personal data may be transferred to companies within as well as outside the European Economic Area ("EEA"). All such transfers are in accordance with applicable legislation, and if personal data is processed outside the EEA, it will be subject to suitable protective measure. Such suitable protective measures include the European Commission's model clauses for such transfers or that the European Commission has decided that the country provides an adequate level of protection.

Your personal data will also be shared with Randstad's clients in the event that this is necessary in order to provide you with our services, i.e. to find you employment or to outsource you to a client. If we provide the client with your personal data, the client itself will be a Data Controller, independent from Randstad, for processing your personal data after receiving these data from us.

how long do we save your personal data?

We process your personal data as long as this is necessary for the purposes for which we have collected the personal data. As a result, different data will be saved for different periods of time.

Your talent account, and your other personal data that we process, will be deleted if you have not been active for 36 months (e.g. updated contact information, searched for work or contacted Randstad through other channels). Personal data relating to credit checks are saved for three months. If you have been a final talent for an assignment, certain general information about you is saved along with references, interview notes and test results for the specific assignment for 5 years after the specific assignment toward our client has been concluded in order for us to fulfil all our obligations. Personal data relating to cases of alleged discrimination are saved according to law and industry standards.

Information about any health examinations, completed alcohol or drug tests and background checks is saved for a shorter period of time. You will receive detailed information about this in connection with the collection of such information.

If you are to be employed as a consultant by Randstad, you will receive information about the deletion or your personal data as an employee prior to your employment.

security

Randstad has adopted the appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration and destruction. To ensure that personal data is processed in a secure and confidential manner, we use data networks that are protected against hacking by such means as firewalls and password protection according to industry standards. 

To ensure that we can safeguard the personal data that you provide to us via the Internet, we may use encryption technology when we transfer such personal data to our servers over the Internet. Randstad employees and suppliers are bound by confidentiality agreements and are obliged to comply with Randstad's rules for information and IT security, internal policies concerning the processing of personal data and other internal regulations and guidelines that further regulate the processing of personal data.

your rights

According to the General Data Protection Regulation, you have certain rights concerning your personal data:

• Right to access – You have the right to receive certain information concerning the manner in which we process your personal data. Such information is provided through this document. You also have the right to access a copy of your personal data that we process about you.
• Right to rectification – You have the right to have incorrect personal data about you rectified.
• Right to deletion – Under certain circumstances, you have the right to have your personal data deleted. This is commonly known as "the right to be forgotten". However, the right to deletion is conditioned, and a request may be left without action.
• The right to restriction of processing – Under certain circumstances, you have the right to request that the processing of your personal data is restricted. However, the right to restriction is conditioned, and a request may be left without action.
• Right to data portability – You have the right to receive personal data that you have provided to us (or request the transfer of the personal data directly from us to a new Data Controller) in a structured, commonly used and machine-readable format.
• Right to object – You have the right to object to our processing of your personal data if the process is based on our legitimate interest, if you do not believe that Randstad has a legitimate interest to process the personal data. The right to object also applies to the processing of personal data for direct marketing purposes.

Please read more about your rights here:

https://www.imy.se/en/organisations/data-protection/this-applies-accordning-to-gdpr/the-data-subjects-rights/

If you have a talent account at Randstad, please click here to access the digital request form. You can make use of your rights by logging into your account and filling out the digital request form. Here you can login to your account to access a digital form to use for the exercise of your rights.

If you do not have a talent account at Randstad, please click to access the form. After Randstad has received the digital form, Randstad will contact you for identification (e.g. electronic signing).

You also have the right to issue a complaint to the Data Protection Authority at any time if you believe that Randstad’s processing of your personal data is in conflict with applicable data protection legislation.

employees

Your privacy and security of your personal data is important to Randstad Sweden Group AB and its group companies in Sweden ("Randstad", "Group" "we" or "us"). The information in this privacy notice is also applicable to Randstad’s group companies in Sweden, including Randstad RiseSmart AB. This privacy notice is however not applicable to Randstad Sourceright AB. Randstad is responsible for ensuring that all personal data is processed correctly and according to applicable data protection legislation and Randstad´s dataprotection policy. Protecting your personal data and your privacy is part of our employees' work. As data controller, Randstad is responsible for processing your personal data and to determine how and for what purpose the data are processed.

Personal Data Controller and contact details 

Within the Randstad Sweden Group, the following companies can be personal data controllers when processing your personal data during your employment:

• Randstad Sweden Group AB, corporate ID No 556089-6572
• Randstad AB, corporate ID No 556242-1718
• Randstad RiseSmart AB, corporate ID No 556517-7143
• Randstad External Management AB, corporate ID No 559458-8369
• Randstad Consulting AB, corporate ID No 559482-5126
• Randstad Solutions AB, corporate ID No 559483-5513

These companies share the same Data Protection Officer.  If you have questions about Randstad’s use of personal data, you can contact Randstad’s Data Protection Officer by sending an e-mail to  dataskyddsombud@randstad.se. 

what personal data we process during your employment and how it is collected

When you are employed by Randstad, Randstad will process personal data about you. The following personal data is processed when you are employed by Randstad:

• your contact details, such as your name, postal address, e-mail address and telephone number.
• personal information such as your date of birth, gender, personal identity number and coordination number.
• information you provided at the time of your application such as your CV, test results, details provided by referees and grades.
• information concerning your employment such as your position, form of employment, affiliation to a trade union and other contractual information.
• information concerning your work-related skills such as your language skills.
• information on your assignments at clients such as your position and the hours you have worked and information about previous placements of hired out person to client companies on one and the same operating unit.
• information on your personal development during your employment, such as information from performance and personal development discussions.
• financial information such as your salary details and bank details. 
• tax-related information such as your salary details, absence due to illness, leave of absence, weekly working hours.
• information regarding benefits.
• information regarding your citizenship, residence and work permit.
• information regarding disabilities and health-related information.
• results from drug tests, health checks, credit checks and background checks, and, if applicable, whether a criminal record check has been carried out during your employment or during your application.
• other information that you supply to us voluntarily such as information on contact persons in case of emergencies.

We collect and process personal data:

• That you yourself supply when you have entered an application process.
• That we obtain from you during your period of employment.
• That we obtain from other sources, e.g. information from authorities, our clients or the referees you named during your application process. 

this is what we use the personal data for in connection with your employment

Randstad processes your personal data only for the purposes specified below.

• To enable an employment contract between you and Randstad to be fulfilled, for example for calculating and paying your salary and processing your benefits: Necessary for fulfilling our contractual undertakings towards you in accordance with your employment contract with Randstad.
• To enable Randstad's business to be run efficiently in the way that you can reasonably expect from Randstad, for example invoicing for Randstad's clients, lists of participants for internal events, (internal) audits, installation of internal systems and other actions necessary to protect our confidential information: Necessary for our legitimate interest to be able to run Randstad's business efficiently.
• To deal with questions that you put to our support:  Necessary for our legitimate interest in ensuring that you can communicate with us. 
• To conduct alcohol tests, drug tests and health checks to ensure a safe working environment and comply with the Work Environment Act: Necessary to fulfil Randstad's legal obligations.
• To carry out a credit check if that is necessary for the post or assignment you have applied for: Necessary for our legitimate interest to ensure that you are a suitable candidate for the post or assignment.
•  To carry out criminal history records checks and other background checks: Express approval that you are free to give and withdraw at any given time. 
• To be able to provide a reference after your employment at Randstad has ceased: Necessary for our legitimate interest to be able to provide you with a reference.
• To comply with legal requirements in accordance with the Bookkeeping Act and the Employment Protection Act, for example to guarantee payment of your taxes, and requirements in laws and collective agreements regarding Randstad’s pension obligation towards you: Necessary to fulfil Randstad's legal obligations.
• To be able to manage Randstad's obligations towards you or an individual concerned, to deal with cases concerning alleged discrimination, payment demands and other management of disputes: Necessary for our legitimate interest to establish, filing or defending legal claims.
• To perform market analyses, system tests and business and method development: Necessary for our legitimate interest in ensuring that the services and our systems meet employees’ and our customers’ needs over time.
• To process information about previous placements of hired out person to client companies on one and the same operating unit: Necessary for our legitimate interest in assisting with information to both employee and client for its legal rights and obligations according to Staffing Act (2012:854).
• To process information about grounds for discrimination, reasons for absence, staff turnover, forms of employment: It is necessary for our legitimate interest as an employer and for the client of a hired person to pro-actively work with these issues in accordance with Discrimination Legislation (2008:567), Work Environment Legislation (1977:1160), etc.
• Training and updating of systems/statistical purposes. Some of the systems that we use to provide our Services are based on machine learning technology. In order for that technology to function reliably, it needs to be trained and updated on the basis of existing data. We may also process personal data in an aggregated manner for statistical purposes: Based on our legitimate interest in training and updating our systems. We have implemented mitigating measures to limit the privacy impact, such as de-identification and an easy opt-out in your choices.

who we share your personal data with

We may share your personal data with other companies within the Randstad Group and subcontractors that provide us with services, such as suppliers of operational services and support for our systems. Randstad will continue to be responsible for the processing of your personal data that we or subcontractors perform on behalf of Randstad.  Subcontractors may not use the personal data for any purposes other than those specified by us. The sharing of personal data within the Randstad Group or to subcontractors occurs in order to fulfil the contract between us, i.e. for us to be able to provide you with the agreed services.

Your personal data will also be shared with Randstad's clients or their partners if so required in connection with an assignment for the client. If we provide the client with your personal data, the client will be an Data Controller, independent from Randstad, for processing your personal data after receiving these data from us. 

Due to legal obligations, information on income and tax deductions is provided to the tax and pension authorities or other authorities. Some data is processed by companies that are assigned the task of managing Randstad's salary system and salary processing. Your data may be provided to insurance companies and/or brokers in order to manage insurance and pension solutions.

When we share personal data according to the above, the personal data may be transferred to companies within as well as outside the European Economic Area (“EEA”). All such transfers are in accordance with applicable legislation, and if the process is performed outside the EEA, it will be subject to suitable protective measure.  Such suitable protective measures include the European Commission’s model clauses for such transfers or through which the European Commission has decided that the country has an adequate protection level.  

how long we save your personal data

We process your personal data for as long as this is necessary for the purpose for which we have collected your personal data. As a result, different data will be saved for different periods of time. 

Randstad stores your data while you are employed by Randstad. Your personal data will be deleted within 1 year after your employment at Randstad has ceased, with the exception of personal data that must be stored for a longer period for instance due to the Bookkeeping Act or due to a commitment towards you or a client. Data which is necessary to provide you with a reference is saved 2 years after your employment has ceased. Data relating to cases of alleged discrimination, payment demands and other management of disputes is saved until after the case has been closed, the obligation has been terminated and follows law and industry standard. 

security

Randstad has adopted the appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration and destruction. To ensure that personal data is processed in a secure and confidential manner, we use data networks that are protected against hacking by such means as firewalls and password protection according to industry standards. To ensure that we can safeguard the personal data that you provide to us via the Internet, we may use encryption technology when we transfer such personal data to our servers over the Internet. Randstad employees and suppliers are bound by confidentiality agreements and are obliged to comply with Randstad's rules for information and IT security, internal policies concerning the processing of personal data and other internal regulations and guidelines that further regulate the processing of personal data

your rights 

According to the General Data Protection Regulation, you have certain rights concerning your personal data: 

• Right to access – You have the right to receive certain information concerning the manner in which we process your personal data. Such information is provided through this document. You also have the right to access a copy of your personal data that we process about you.
• Right to rectification – You have the right to have incorrect personal data about you rectified.
• Right to deletion – Under certain circumstances, you have the right to have your personal data deleted. This is commonly known as "the right to be forgotten". However, the right to deletion is conditioned, and a request may be left without action.
• The right to restriction of processing – Under certain circumstances, you have the right to request that the processing of your personal data is restricted. However, the right to restriction is conditioned, and a request may be left without action.
• Right to data portability – You have the right to receive personal data that you have provided to us (or request the transfer of the personal data directly from us to a new Data Controller) in a structured, commonly used and machine-readable format.
• Right to object – You have the right to object to our processing of your personal data if the process is based on our legitimate interest, if you do not believe that Randstad has a legitimate interest to process the personal data. The right to object also applies to the processing of personal data for direct marketing purposes. 

Please read more about your rights here: https://www.imy.se/verksamhet/dataskydd/det-har-galler-enligt-gdpr/de-registrerades-rattigheter/

If you have a candidate account at Randstad, please click here to access the digital request form. You can make use of your rights by logging into your account and filling out the digital request form. Here you can login to your account to access a digital form to use for the exercise of your rights.

If you do not have a candidate account at Randstad, please click to access the form. After Randstad has received the digital form, Randstad will contact you for identification (e.g. electronic signing).

You also have the right to issue a complaint to the Data Protection Authority at any time if you believe that Randstad’s processing of your personal data is in conflict with applicable data protection legislation.

clients and suppliers

Your privacy and the security of your personal data is important to Randstad Sweden Group AB and its group companies in Sweden ("Randstad", “we” or “us”). The information in this Notice is also applicable to Randstad RiseSmart AB. This Notice is however not applicable to Randstad Sourceright AB. Randstad is responsible for ensuring that all personal data is processed correctly and in accordance with applicable data protection legislation and Randstads´dataprotection policy. Protecting your personal data and privacy is part of our employees’ job. As data controller, Randstad is responsible for processing your personal data and to determine how and for what purpose the data are processed.

personal data controller and contact information

Within the Randstad Group, the following companies may be Personal Data Controller for processing your personal data in the talent account:

• Randstad Sweden Group AB, corporate ID No 556089-6572
• Randstad AB, corporate ID No 556242-1718
• Randstad RiseSmart AB, corporate ID No 556517-7143
• Randstad External Management AB, corporate ID No 559458-8369
• Randstad Consulting AB, corporate ID No 559482-5126
• Randstad Solutions AB, corporate ID No 559483-5513

These companies share the same Data Protection Officer. If you have questions about Randstad’s use of personal data, you can contact Randstad’s Data Protection Officer by sending an email to dataskyddsombud@randstad.se.

what personal data we process and how it is collected

In the context of a current or potential business relationship between Randstad and a current or potential client or supplier, we collect and process personal data on contact persons at the current or potential client and suppliers. The personal data we process are contact details, such as name, phone number, email address, signature, job title / role, organisation number, information about previous placements of hired out person (both employed or from supplier) to client companies on one and the same operating unit and other relevant information about the relationship.

We collect and process personal data:

• That you yourself provide in connection with the business relationship between Randstad and your organisation,
• That we collect from you and us during the time in which you have a client account, such as your name.
• That we collect from other sources, such as third party services that provide us with information regarding in the context of job advertisement.
• That you yourself as a supplier provide to us in connection with the business relationship between Randstad and your organisation in an oursourcing assignment. The privacy notice talent account is also applicable. 

this is what we use the personal data in your account for

Randstad processes your personal data only for the purposes specified below

• To facilitate and develop a current or future business relationship with our current or potential clients and suppliers:
  Necessary for our legitimate interest to facilitate and develop our current and future business relationship with our current or potential clients and suppliers.
• To administer and manage the contractual relationship between Randstad and the clients and suppliers:
  Necessary for the performance of the contract between Randstad and the client or supplier.
• To provide and administer the services you as a client have requested through the client account: 
  Necessary to fulfill our contractual obligations to you.
• To perform market analysis, system tests, business and method development:
  Necessary for our legitimate interest to ensure that the services and our systems meet the talents', employees' and our clients' needs over time.
• To provide direct marketing and offers from Randstad:
  Necessary for our legitimate interest to maintain good relations with our current or potential clients and suppliers. You can always oppose to receiving direct marketing and offers from us, see your rights below.
• To process information about previous placements of hired out person to client companies on one and the same operating unit:
  Necessary for our legitimate interest in assisting with information to hired out person as employee or from supplier if applicable and to client for its legal rights and obligations according to Staffing Act (2012:854).
• To process information about grounds for discrimination, reasons for absence, staff turnover and form of employment about hired out personnel: Necessary for our legitimate interest to assist with information to the client for its legal obligations according to Discrimination Act (2008:567), Work Environment Act (1977:1160) etc.

In the context of the services we provide to you, we process your and our personal data for compliance with laws and regulation, including but not limited to national and international sanctions legislation such as the Anti-Terrorism legislation.  

with whom do we share your personal data

We may share your personal data with other companies within the Randstad Group and with subcontractors that provide us with services, such as suppliers of operating services and system support. Randstad will continue to be responsible for the processing of your personal data that we perform or subcontractors perform on behalf of Randstad. Subcontractors may not use the personal data for any purposes other than those specified by us. The sharing of personal data within the Randstad Group or to subcontractors occurs in order to fulfil the contract between us, i.e. for us to be able to provide you with the agreed services.

Personal data will also be shared with Randstad's clients or their partners if so required in connection with an assignment. If we provide the client with personal data, the client will be a Data Controller, independent from Randstad, for processing personal data after receiving these data from us. 

When we share personal data according to the above, the personal data may be transferred to companies within as well as outside the European Economic Area ("EEA"). All such transfers are in accordance with applicable legislation, and if personal data is processed outside the EEA, it will be subject to suitable protective measure. Such suitable protective measures include the European Commission's model clauses for such transfers or that the European Commission has decided that the country provides an adequate level of protection.  

how long do we save your personal data

We process your personal data as long as it is necessary in regards to why the personal data was collected. As a result, different data will be saved for different periods of time. In general, we will delete the contact details after the current or potential business relationship has ended. Personal data relating to contract management are stored under ten (10) years after the contract has ended.

security

Randstad has adopted the appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration and destruction. To ensure that personal data is processed in a secure and confidential manner, we use data networks that are protected against hacking by such means as firewalls and password protection according to industry standards. To ensure that we can safeguard the personal data that you provide to us via the Internet, we may use encryption technology when we transfer such personal data to our servers over the Internet. Randstad employees and suppliers are bound by confidentiality agreements and are obliged to comply with Randstad's rules for information and IT security, internal policies concerning the processing of personal data and other internal regulations and guidelines that further regulate the processing of personal data.

your rights

According to the General Data Protection Regulation, you have certain rights concerning your personal data.

• Right to access – You have the right to receive certain information concerning the manner in which we process your personal data. Such information is provided through this document. You also have the right to access a copy of your personal data that we process about you.
• Right to rectification – You have the right to have incorrect personal data about you rectified.
• Right to deletion – Under certain circumstances, you have the right to have your personal data deleted. This is commonly known as "the right to be forgotten". However, the right to deletion is conditioned, and a request may be left without action.
• The right to restriction of processing – Under certain circumstances, you have the right to request that the processing of your personal data is restricted. However, the right to restriction is conditioned, and a request may be left without action.
• Right to data portability – You have the right to receive personal data that you have provided to us (or request the transfer of the personal data directly from us to a new Data Controller) in a structured, commonly used and machine-readable format.
• Right to object – You have the right to object to our processing of your personal data if the process is based on our legitimate interest, if you do not believe that Randstad has a legitimate interest to process the personal data. The right to object also applies to the processing of personal data for direct marketing purposes.

Please read more about your rights here:

https://www.imy.se/en/organisations/data-protection/this-applies-accordning-to-gdpr/the-data-subjects-rights/

If you want to make use of your rights, please click here to access the request form. After Randstad has received the digital form, Randstad will contact you for identification (e.g. electronic signing).

You also have the right to issue a complaint to the applicable regulatory authority at any time if you believe that Randstad's processing of your personal data is in conflict with applicable data protection legislation.

clients and suppliers broker solution

Your privacy and the security of your personal data is important to Randstad External Management AB, corporate ID no. 559458-8369 ("REM", “we” or “us”). REM is responsible for ensuring that all personal data is processed correctly and in accordance with applicable data protection legislation and Randstads' data protection policy. Protecting your personal data and privacy is part of our employees’ job. As data controller, REM is responsible for processing your personal data and to determine how and for what purpose the data are processed. 

data controller and contact details

Following company may be Personal Data Controller for processing your personal data in the candidate account:

• Randstad External Management AB, corporate ID no. 559458-8369
• Randstad Sweden Group AB, corporate ID no. 556089-6572

These companies (“Group”) share the same Data Protection Officer. If you have questions about REM’s use of personal data, you can contact REM’s Data Protection Officer by sending an email to dataskyddsombud@randstad.se.

what personal data we process and how it is collected

In the context of a current or potential business relationship between REM and a current or potential client or supplier, we collect and process personal data on contact persons at the current or potential client and suppliers. The personal data we process are contact details, such as name, phone number, email address, signature, job title/role, organisation number and other relevant information about the relationship.

We collect and process personal data:

• That you yourself provide in connection with the business relationship between REM and your organisation,
• That we collect from you during the time in which you have a client or supplier account, such as your name.
• That you yourself provide to us in connection with the business relationship between REM and your organisation in a Broker Agreement including information about previous placements of hired out person from supplier to client companies on one and the same operating unit

this is what we use the personal data for

REM processes your personal data only for the purposes specified below.

• To facilitate and develop a current or future business relationship with our current or potential clients and suppliers.
  Necessary for our legitimate interest to facilitate and develop our current and future business relationship with our current or potential clients and suppliers.
• To administer and manage the contractual relationship between REM and the clients and suppliers.
  Necessary for the performance of the contract between REM and the client or supplier.
• To provide and administer the services you as a client have requested through the client account.
  Necessary to fulfill our contractual obligations to you.
• To perform market analysis, system tests, business and method development.
  Necessary for our legitimate interest to ensure that the services and our systems meet the candidates', employees' and our clients' needs over time.
• To process information about previous placements of hired out person from supplier to client companies on one and the same operating unit.
  Necessary for our legitimate interest in assisting with information between supplier and client for its legal rights and obligations according to Staffing Act (2012:854).

In the context of the services we provide to you, we process your personal data for compliance with laws and regulation, including but not limited to national and international sanctions legislation such as the Anti-Terrorism legislation.

with whom do we share your personal data

We may share your personal data with other companies within the Group and with subcontractors that provide us with services, such as suppliers of operating services and system support. REM will continue to be responsible for the processing of your personal data that we perform or subcontractors perform on behalf of REM. Subcontractors may not use the personal data for any purposes other than those specified by us. The sharing of personal data within the Group or to subcontractors occurs in order to fulfil the contract between us, i.e. for us to be able to provide you with the agreed services.

When we share personal data according to the above, the personal data may be transferred to companies within as well as outside the European Economic Area ("EEA"). All such transfers are in accordance with applicable legislation, and if personal data is processed outside the EEA, it will be subject to suitable protective measure. Such suitable protective measures include the European Commission's model clauses for such transfers or that the European Commission has decided that the country provides an adequate level of protection.

how long do we save your personal data

We process your personal data as long as it is necessary in regards to why the personal data was collected. As a result, different data will be saved for different periods of time. In general, we will delete the contact details after the current or potential business relationship has ended. Personal data relating to contract management are stored under ten (10) years after the contract has ended.

security

REM has adopted the appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration and destruction. To ensure that personal data is processed in a secure and confidential manner, we use data networks that are protected against hacking by such means as firewalls and password protection according to industry standards. To ensure that we can safeguard the personal data that you provide to us via the Internet, we may use encryption technology when we transfer such personal data to our servers over the Internet. REM employees and suppliers are bound by confidentiality agreements and are obliged to comply with REM's rules for information and IT security, internal policies concerning the processing of personal data and other internal regulations and guidelines that further regulate the processing of personal data.

your rights

According to the General Data Protection Regulation, you have certain rights concerning your personal data:

• Right to access – You have the right to receive certain information concerning the manner in which we process your personal data. Such information is provided through this document. You also have the right to access a copy of your personal data that we process about you.
• Right to rectification – You have the right to have incorrect personal data about you rectified.
• Right to deletion – Under certain circumstances, you have the right to have your personal data deleted. This is commonly known as "the right to be forgotten". However, the right to deletion is conditioned, and a request may be left without action.
• The right to restriction of processing – Under certain circumstances, you have the right to request that the processing of your personal data is restricted. However, the right to restriction is conditioned, and a request may be left without action.
• Right to data portability – You have the right to receive personal data that you have provided to us (or request the transfer of the personal data directly from us to a new Data Controller) in a structured, commonly used and machine-readable format.
• Right to object – You have the right to object to our processing of your personal data if the process is based on our legitimate interest, if you do not believe that REM has a legitimate interest to process the personal data. The right to object also applies to the processing of personal data for direct marketing purposes.

Please read more about your rights here:
https://www.imy.se/en/organisations/data-protection/this-applies-accordning-to-gdpr/the-data-subjects-rights/

If you want to make use of your rights, please click here to access the request form. After REM has received the digital form, REM will contact you for identification (e.g. electronic signing).

You also have the right to issue a complaint to dataskyddsombud@randstad.se or the applicable regulatory authority at any time if you believe that REM's processing of your personal data is in conflict with applicable data protection legislation.

participants in randstad risesmart

Your privacy and the security of your personal data is important to Randstad Risesmart AB, which is part of the Randstad Sweden Group AB (the “Group”). Randstad Risesmart is responsible for ensuring that all personal data is processed correctly and in accordance with applicable data protection legislation and Randstad's data protection policy. Protecting your personal data and privacy is part of our employees' job. Randstad Risesmart, as data controller, is responsible for the processing of your personal data and how and for what purposes it is done.

Randstad Risesmart provides outplacement, career management, assessment and skills and employability services. These services we provide to you and our clients, both in person and through our website, are subject to our Terms of Use and this Privacy Policy.

data controller and contact details

Within the Group, the following companies may be the data controller for the processing of your personal data when we provide one of the services you have requested as a participant in one of our programs:

Randstad Sweden Group AB, org.nr. 556089-6572

Randstad Risesmart AB, org.nr. 556517-7143

The group has a common data protection officer and you only need to use one contact route if you have questions and concerns about Randstad Risesmart's personal data processing. If you have any questions, you are welcome to contact us at dataskyddsombud@randstad.se.

what personal data we process within our services/programs and how it is collected

Randstad Risesmart will process your data when you are registered as a participant in our services/programs. The personal data processed is name, address, e-mail address, telephone number, social security number, information about career ambitions, industries you want to work in, information in the CV, such as work experience and previous workplaces, information about education, training and / or tests that you have followed or taken, on your own initiative or through us, information about your success and status in job search, information about your customer satisfaction or other feedback about the job search and service, and possibly other information you voluntarily provide to us.

We collect and process personal data:

• That you or our client provide when you register as a participant in one of our services/programs, that you provide on our website, or when your information is shared with us by the contracting organization, our client, as part of our contract with our client in connection with the services.
• That we collect from you during the time you are part of one of our programs/services, e.g. information about work experience, career ambitions, industries you want to work in, etc.

what we use the personal data within our services/programs for

Randstad RiseSmart processes your personal data only for the purposes set out below.

• To provide and administer the services provided to you as a participant in our services/programs, i.e. to help you develop your career.
• Legal basis for the processing:
  Necessary to fulfill our contractual obligations to you as a participant and our client.
  To handle requests you make to our support.  
• Legal basis for processing:
  Necessary for our legitimate interest to ensure that participants can communicate with us.
• To carry out market analysis, system testing, business and methodology development and reporting back to clients.
• Legal basis for processing:
  Necessary for our legitimate interest to ensure that our services/programs and our systems meet participant and client needs over time.
  To provide direct marketing and offers from Randstad RiseSmart.
• Legal basis for processing:
  Necessary for our legitimate interest to maintain good relations with our participants. You can always opt out of direct marketing and offers from us, see below under your rights.
• For management purposes including management information, organizing internal compliance and control, performing audits and data analysis and general audits.
• Legal basis for processing:
  Necessary for our legitimate interest to develop and protect our services, our organization and your data.

who we share your personal data with

We may share your personal data within the Group to provide our services/programs and we may share your personal data with our subcontractors who provide services to us, e.g. providers of operation and support of our systems. Randstad Risesmart remains responsible for the processing of your personal data that we or subcontractors perform on behalf of Randstad Risesmart and subcontractors may not use the personal data for purposes other than those we specify. Sharing of personal data within Randstad Risesmart or to subcontractors is done to fulfill the agreement between us, i.e. to enable us to provide the agreed services to you.

When we share personal data as described above, personal data may be transferred to companies both within and outside the EEA. Any such transfer is based on applicable law and if the processing is done outside the EEA will be subject to appropriate safeguards in the form of, for example, the European Commission's model clauses for such transfers or that the European Commission has decided that the country has an adequate level of protection.  

Personal data about you will also be shared with our client, or its partners where necessary to perform our services to you, i.e. to help you develop your career. If we provide your personal data to our client, the client is an independent data controller for its processing of your personal data after such receipt from us.

how long we keep your personal data

We process your personal data for as long as it is necessary with regard to why the personal data was collected. This means that your personal data will be deleted after Randstad Risesmart's delivery commitment for the current assignment/contract ends.

security

Randstad Risesmart has taken appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration and destruction. To ensure that personal data is processed in a secure and confidential manner, we use data networks that are intrusion-protected with, among other things, firewalls and password protection according to industry standards. To ensure the privacy of the personal data you provide over the Internet, we may use encryption technology when transmitting such personal data over the Internet to our servers. Randstad Risesmart employees and suppliers are bound by confidentiality agreements and are required to comply with Randstad Risesmart information and IT security rules, internal policies regarding the processing of personal data and other internal regulations and guidelines that further regulate the processing of personal data.

your rights

You have certain rights under the GDPR in relation to your personal data:

• Right of access - You have the right to obtain certain information about our processing of your personal data. Such information is provided through this information document. You also have the right to access a
• copy of the personal data we process about you.
• Right to rectification - You have the right to have inaccurate personal data about you rectified.
• Right to erasure - In certain circumstances, you have the right to have your personal data erased. This is known as the 'right to be forgotten'. However, the right to erasure is conditional and a request can be left without action.
• Right to restriction - In certain circumstances, you have the right to request that the processing of your personal data be restricted. However, the right to restriction is conditional and a request can be left without action.
• Right to data portability - You have the right to receive personal data you have provided to us (or to request the transfer of the data directly from us to a new controller) in a structured, commonly used and machine-readable format.
• Right to object - You have the right to object to our processing of your personal data if the processing is based on a balance of interests, unless you consider that Randstad Risesmart has a legitimate interest in processing the personal data. The right to object also applies to the processing of personal data for direct marketing purposes.

read more about the rights here

You can exercise your rights through this form. Once Randstad RiseSmart has received the form from you, you will be contacted by Randstad RiseSmart for identification (e.g. e-signing).

You also have the right to lodge a complaint with the applicable supervisory authority at any time if you consider that Randstad RiseSmart is processing your personal data in violation of applicable data protection law.

HR technologies

Our ultimate goal is to support people and organizations in realizing their true potential. We believe that the best way to achieve that goal is by combining our passion for people with the power of today's HR technologies. By HR technologies we mean technologies that help us digitize and enhance a variety of recruitment-related processes.

As part of the larger recruitment process, HR technologies allow us to connect talents more quickly. This, in turn, allows us to better support talents in exploring jobs and to deliver the right talents more quickly to our clients. HR technologies also allow our consultants to find people based not only on the jobs they qualify for but also on the basis of jobs they are interested in.

improving the client experience

HR technologies help us to search through a broader and more diverse set of talents so that we become even better at finding the best talent with the most relevant skill-set for our clients. Our basic principle is to use new technologies to develop work processes where we can get as much time as possible for the core of our business - the meeting between people.

web beacons

Our emails may contain a promotional “tracking pixel” to tell us if our emails have been opened and to verify any link clicks in the email. We use this information to determine what type of content in our emails is most interesting to the recipient. The pixel will be deleted when you delete the email. If you do not want the pixel to be downloaded to your device, you should choose to receive emails from us in plain text instead of HTML.

responsible use of HR technologies

Randstad is committed to the ethical and responsible use of innovative HR technologies. Randstad does not use these technologies as a substitute for humans or human interaction in any part of its processes. Instead, our use of HR technologies is intended to make interactions with clients and talents more personal, relevant and meaningful.

We strive to involve human beings whenever we make decisions that significantly impact you. If, in exceptional cases, we were to make such decisions based on a fully automated process (ie. without involvement of humans), we will only do so where that is permitted by law and after having notified you.

To ensure all talents are treated fairly we take steps to avoid bias where we use HR technologies. For example:

• We regularly test the output created by these technologies to identify potential unfair bias.

• We regularly obtain expert advice to continuously improve the way in which we identify and remove bias.

• Both our consultants and our search and match algorithms are thoroughly trained and always work together.

with whom do we share your personal data

We may share your personal data with other companies within the Randstad Group N.V. and Group and with subcontractors that provide us with services, such as suppliers of operating services and system support. REM will continue to be responsible for the processing of your personal data that we perform or subcontractors perform on behalf of REM. Subcontractors may not use the personal data for any purposes other than those specified by us. The sharing of personal data within the Group or to subcontractors occurs in order to fulfil the contract between us, i.e. for us to be able to provide you with the agreed services.

When we share personal data according to the above, the personal data may be transferred to companies within as well as outside the European Economic Area ("EEA"). All such transfers are in accordance with applicable legislation, and if personal data is processed outside the EEA, it will be subject to suitable protective measure. Such suitable protective measures include the European Commission's model clauses for such transfers or that the European Commission has decided that the country provides an adequate level of protection.

security

Randstad has adopted the appropriate technical and organizational measures to protect personal data from loss, misuse, unauthorized access, disclosure, alteration and destruction. To ensure that personal data is processed in a secure and confidential manner, we use data networks that are protected against hacking by such means as firewalls and password protection according to industry standards. To ensure that we can safeguard the personal data that you provide to us via the Internet, we may use encryption technology when we transfer such personal data to our servers over the Internet. Randstad employees and suppliers are bound by confidentiality agreements and are obliged to comply with Randstad's rules for information and IT security, internal policies concerning the processing of personal data and other internal regulations and guidelines that further regulate the processing of personal data.

your rights

If you have questions about the processing of personal data by Randstad, please contact Randstad’s Data Protection Officer, at  dataskyddsombud@randstad.se .

You are entitled to request access to and correction or deletion of your personal data, as well as  restriction of processing of personal data and you can request to exercise your right to data portability. In addition, you have the right to object to how Randstad processes your personal data when this processing is based Randstad’s legitimate interest and if you do not consider Randstad to
have a legitimate interest for processing your personal data.

changes to this data protection notice

We may update this notice from time to time. You can see the date on which the latest change was made below in this statement. We advise you to review the notice on a regular basis so that you are aware of any changes. 

This statement was updated on 1 september 2024