Thank you for showing interest in NNE.
As part of our recruitment process, we will process your personal data, as set out in this privacy notice. The NNE entity you apply for a job in is data controller with respect to the personal data collected and processed as part of the recruitment process.
Administration of recruitment
The purpose of collecting personal data in the recruitment database is to assess and contact candidates who are interested in and qualified for current or future vacancies with NNE.
In order to evaluate your application, we will process the information, including the personal data, which you have disclosed in your job application, CV or on your LinkedIn profile. We will also evaluate your performance and competencies during potential interviews. The legal basis for our processing of your personal data is your request for our evaluation of your application and CV prior to the potential execution of an employment contract in accordance with the General Data Protection Regulation article 6(1)(f).
Further to your evaluation, we might search the internet for relevant and available information, hereunder also content from social media and will typically involve information regarding your previous jobs, activities, competencies, performance, as well as your general appearance.
If the job position requires you to complete personality tests or similar you will be informed hereof when we have processed your application. The results of such tests will be treated confidentially but will be included in our evaluation of your application. Our legal basis for such processing of personal data is the General Data Protection Regulation article 6(1)(f).
Depending on your position you are applying for we may also request that you provide us with a copy of your criminal record and/or conduct a background check. Any such information will also be treated confidentially and no copy of the criminal record will be retained. In such case we will ask for your consent, whereas our legal basis for such processing of personal data is the General Data Protection Regulation article 6(1)(a) and applicable EU Member state law.
As part of our evaluation of you and your application, we may wish to take references from your previous and/or current employers. We will only take up references which you have informed us about. In such case we will request references from you, whereas our legal basis for such processing of personal data is the General Data Protection Regulation article 6(1)(f).
We recommend that you do not disclose sensitive personal data, such as information revealing racial or ethnic origin, religion, trade union membership, sexual orientation, health, etc. in your application. In the unlikely event that a certain health condition is required for the ability to perform the duties related to the position in question, we might – after a concrete assessment – request health information from you. In such case we will ask for your consent, whereas our legal basis for such processing of personal data is the General Data Protection Regulation article 9(2)(a).
If you are offered a position with NNE, your application and additional personal data obtained during the recruitment process will become part of your employee file.
If you are not offered a job, we will store your application and any additional personal data obtained during the recruitment process for a period depending on the NNE entity you apply for following our rejection for the purpose of you to be considered for other available positions within NNE unless you have provided your consent to the storage hereof for a longer period in accordance with the General Data Protection Regulation article 6(1) (a). The list below shows how long we keep your information in our database:
- Denmark: 6 months
- India: 6 months
- USA: 2 years
Compliance with legal, regulatory and other governance obligations
NNE will process personal data about you, which is considered necessary for our compliance with legal, regulatory and other governance obligations.
We will process personal data about you, including contact details such as name, title or position, email address, telephone, address and your place of employment. We may also process information about your details of employment and professional credentials, performance reviews and development, salary and other compensations, bonuses information, bank account data, time registration, work permits and visas etc., absence due to illness etc., parental leave, employment benefits, employee purchases, travel management and disciplinary sanctions or other matters.
We will process such personal data based on General Data Protection Regulation article 6(1)(c) (necessary for NNE to comply with a legal obligation, e.g. reporting to public authorities) and General Data Protection Regulation article 6(1)(f) (necessary to pursue our legitimate interests in processing your personal data for the described purposes, where such processing may not be based on General Data Protection Regulation article 6(1)(c).
Transfer
If your personal data is transferred to data controllers or data processors which are located in countries outside the EU/EEA, such transfer will be adequately safeguarded by NNE via the EU Commission’s Standard Contractual Clauses.
Your personal data may be transferred to NNE companies that are located in countries outside EU/EEA. NNE is covered by Novo Nordisk’s Binding Corporate Rules which can be found on the following link:
https://www.novonordisk.com/content/dam/Denmark/HQ/aboutus/documents/corporategovernance/novo-nordisk-privacy-policy.pdf. Personal data may be transferred to USA, Israel, New Zealand, India, Canada, Australia, United Kingdom.
Please contact us if you wish to obtain a copy of EU Commission’s Standard Contractual Clauses.
Storage
We will store personal data as long as it is necessary in order to fulfil the purposes mentioned. In general, personal data will be stored for 3 years following the end of the recruitment process, unless we are required to store your personal data for a longer period due to legal requirements, or as part of a legal dispute.
Recipients
We will treat your personal data as confidential and we will generally not disclose the data to third parties. Data may, however, be disclosed in order to pursue the purposes listed above to third parties providing relevant services under contract to NNE such as processors of salary, expenses and other compensation information as well as IT hosting and maintenance providers. Such service providers will only process the personal data in accordance with our instructions and to fulfil the purposes mentioned above.
We may also disclose personal data for the purposes mentioned above to i.e. public authorities, pension or insurance providers, travel agencies, airline companies, leasing bureaus and financial institutions as well as our external legal advisors and external accountants.
Lastly, we may disclose some of your personal data to Novo Nordisk A/S being the parent company of the NNE group for administration and security purposes.
Your rights
Where the GDPR applies you have the following rights:
- You have the right to obtain confirmation as to whether we process personal data concerning you, and, if so, to receive access to such data and information about the processing (right of access);
- You have the right to request that we correct or complete any inaccurate or incomplete personal data about you without undue delay (right to rectification);
- You have the right to request that we delete your personal data where, for example, the data are no longer necessary for the purposes for which they were collected, you withdraw consent, or the data have been unlawfully processed (right to erasure);
- You may request that we restrict the processing of your personal data in certain situations, e.g. if you contest the accuracy of the data, object to the processing, or believe the processing is unlawful but prefer restriction to erasure (right to restriction);
- Where processing is based on your consent, you may withdraw that consent at any time. Be aware that withdrawal will not affect the lawfulness of processing based on consent before its withdrawal or the lawfulness of processing based on other legal bases (withdraw consent).
- Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit those data to another controller, where technically feasible (right to data portability).
- You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. NNE does not carry out such automated decision-making. If this should change, we will inform you in advance and explain the logic involved, as well as the significance and possible consequences for you (automated decision making).
If you believe that our processing of your personal data infringes the GDPR or other relevant data privacy regulation, you have the right to lodge a complaint with an EU supervisory authority, provided the processing is in scope of the GDPR.
You can take steps to exercise your rights by contacting the HR department by telephone +45 4444 7777 or by email compliance@nne.com.
There may be conditions or limitations on your rights. It is therefore not certain for example you have the right of access, deletion, restriction or data portability in the specific case - this depends on the specific circumstances of the processing activity.
If you have any complaints regarding the processing of your personal data, please contact us at compliance@nne.com . You may also file a complaint with the local Supervisory Authority.