Privacy policy for iRecommend

1. Introduction and objectives

This privacy policy describes how Irecommend Sweden AB (“Irecommend”, “us” or “we”), process manage personal data related to candidates, customers (potential and existing), and suppliers. Irecommend Sweden AB offers a unique, automated and digital solution for employee referrals that make recruitment cheaper, more effective and more accurate (the Service”).

Irecommend is data controller for the personal data relating to customers and suppliers processed for the purpose of creating and maintaining customer and supplier relations.

Irecommend is the data processor of candidate data, and the customer using the Service is data controller.

Throughout this privacy policy, the definitions used correspond to the terms in the General Data Protection Regulation (GDPR).

“Personal data” includes any information which directly or indirectly refers to an identified or identifiable natural person.

“Processing” of personal data includes any operation involving personal data, such as collection, administration, storage, sharing, access to, use of, transfer and erasure of personal data.

Irecommend company information:

Irecommend Sweden AB
Reg. no: 559100-5128
Address: Östgötagatan 90, 116 64 Stockholm, Sweden
Irecommend is a part of Talentech Group.

2. Processing of personal data

2.1 Customers

Potential customers
Irecommend collects personal data from potential customers from public sources, from visits, sharing and/or registering information on our website and through recommendations from people in our network. The personal data processed includes your name and contact information, such as e-mail address and/or phone number, and your title and employer and/or organization. We process this personal data in order to inform you about, offer and market Irecommend and the Service. The legal basis for this processing of personal data is our legitimate interest of marketing our Service.

Irecommend processes personal data of potential customers up to three (3) years after the last interaction with the potential customer.

Customers
Irecommend collects personal data, including your name and contact information, such as e-mail address and/or phone number, your title and employer and/or organization, and any personal data related to and needed for the customer agreement and relations, from customers. We process this personal data in order to deliver the Service in accordance with the customer agreement, and to inform you about, offer and market Irecommend and the Service. The legal basis for this processing of personal data is performance of the customer contract, and our legitimate interest of marketing our Service.

For Irecommend’s customer users, we process the name and email address of the users as mandatory information, and image as voluntary, as well as log in information such as date and time for log in, password and IP-address.

Irecommend processes customer personal data during the term of the customer agreement, and up to one (1) year thereafter. Customer user data is processed until the user is deleted from the Service.

2.2 Suppliers

Irecommend collects personal data, including your name and contact information, such as e-mail address and/or phone number, your title and employer and/or organization, and any personal data related to and needed for the supplier agreement and relations, from suppliers. We process this personal data in order to perform the supplier agreement and to maintain supplier relations. The legal basis for this processing of personal data is performance of the supplier contract.

Irecommend processes supplier personal data during the term of the supplier agreement, and up to one (1) year thereafter.

2.3 Candidates

Who are candidates?
Candidates are persons who’ve been recommended for a role or a company through the Service. The company receiving the recommendation is the data controller of candidate data, and have entered into a customer agreement and a data processing agreement with Irecommend regarding the use of the Service and the processing of candidate data.

Processing of candidate data
Irecommend collects personal data of candidates provided by you directly or by someone in your network who has recommended you for a role or to a company. The personal data processed includes your name and contact information, such as e-mail address and/or phone number, and an image of you.

When you are recommended by someone in your network, you receive information about the referral by email and/or text message. The information includes the name of the person who has recommended you, unless he or she have chosen to be anonymous, and the role or company you’ve been recommended for. The legal basis for this processing of personal data is the data controller’s legitimate interest of recruiting candidates.

If you are interested in the position, you follow the link provided in the email and/or text message, and consent to Irecommend processing your personal data on behalf of the data controller. The legal basis for processing your personal data thereafter is your explicit consent, and your personal data is stored for twenty-four (24) months, after which it is deleted.

If you are not interested in the position you’ve been recommended for, or if you do not respond to the referral, your personal data is kept for sixty (60) days, after which it is deleted. The legal basis for this processing of personal data is the data controller’s legitimate interest of recruiting candidates to open positions.

2.3 Access to personal data

Your personal data will be accessed by the customer to which you have been recommended.

Irecommend’s staff may also access your personal data, in order to provide support, develop the Service or correct errors or incidents. Irecommend’s access to personal data is based upon the principle of least privilege, and is only assigned to roles within Irecommend where there is an explicit and necessary purpose for the access. Access may also be provided to other necessary roles within the Talentech Group.

2.3 Cookies

When you visit our website for the first time, you will be presented with the option to consent to receive cookies. If you consent, we store cookies on your device in order to improve your user experience, customize content, ads, provide social media features and to analyse our traffic. We also share information about your use of our website with our partners for social media, advertising and analytics.

You have the right to refuse cookies, or to limit the usage to the necessary cookies.

3. Information security

Irecommend implements appropriate technical and organizational security measures in order to protect personal data against accidental or illegal destruction, loss, alteration and unauthorized disclosure or access.

4. Your rights

4.1 The right to access your personal data

You have the right to access to all personal data that Irecommend process about. You can request records of the personal data we have stored about you by contacting us at legal@talentech.com

4.2 Right to correction

You have the right to correct or update your personal data.

4.3 The right to be deleted / forgotten

You have the right to at any time request deletion of your personal data. Unless we are obliged by law or contract to keep the personal data, Irecommend will perform deletion of your data. If we are unable to do so, we will inform you about the reasons and what personal data will be kept.

4.4 Right to limitation of processing

You have, under certain prerequisites, the right to request that the processing of your personal data is limited to certain processing operations or certain categories of personal data.

4.5 Right to object

You have, under certain prerequisites, the right to object to the processing of personal data that is based on a legitimate interest.

In cases where your personal data is processed for direct marketing, you have the right to object to the processing at any time, and the processing must then cease.

4.6 Right to data portability

You have the right to receive the personal data we have, in order for you to be able to transfer it to another data controller. Alternatively, if it is technically possible, you have the right to request that we transmit the personal data directly to such other data controller.

4.7 Right to lodge complaints with the supervisory authority

If you consider that our processing of your personal data is in violation of applicable law, you have the right at any time to file a complaint with the applicable supervisory authority.

4. Contact

This privacy policy may be updated. If there are major amendments to the policy, you will be notified by email. If you have any questions regarding this policy, please contact us at legal@talentech.com.