Handling of personal data and information about GDPR
Your personal data
For us at CFO Recruitment, it is incredibly important to preserve your integrity as our customer, candidate, and visitor to our website. It is a responsibility that we believe creates equal and honest trust between us. Therefore, we hope that our policy clearly and transparently explains how we collect, use, display, transfer, and store information so that you feel confident that your personal data is in safe custody with us. We recommend that you read our personal data policy carefully before using our service.
Our personal data policy describes which information we process, which parties we may share your personal data with, and your rights regarding this work. We handle all personal data in accordance with the Personal Data Act (PUL) and the EU’s General Data Protection Regulation (GDPR).
CFO Recruitment’s personal data policy
This personal data policy applies to how we at CFO Recruitment (organization number XXXX-XXXX) handle your personal data on our website; www.cforec.com . CFO Recruitment is responsible for the processing of personal data on this and other websites operated by CFO Recruitment, Inc..
Contact details
We are available to answer your questions via gdpr@cforec.com or by letter, which is then sent to:
CFO Recruitment
XXXX
XXX
This is classified as personal data
Personal data is any type of information that can be directly or indirectly linked to a physically living person. Examples of this are name, social security number, address, email address, and telephone number. This also applies to encrypted data and various types of electronic identities such as IP numbers, if they can be linked to natural persons.
This is how we collect personal data
In the first instance, we receive your personal data directly from you when you contact us via our representatives by email and/or telephone. We may also receive information about you when you visit our website to apply for a job assignment or search for a suitable candidate for the company you work for. In connection with the job application, we collect information about your previous work experience, age, gender, name, telephone number, and email address as well as your references with associated names and contact details for them. When you search for a suitable candidate, we collect information such as the name of the company, the duration of the assignment, your position at the company, your name, email address, and telephone number. We also collect information about who applied for the advertised position and who was hired.
Depending on how you choose to contact us, we may also collect contact information such as your email address or phone number. When we have a personal contact with you, we also handle the other personal data that you yourself choose to provide to us.
Handling of personal data when subscribing to newsletters
If you subscribe to CFO Recruitment, Inc.’s newsletter, we collect your name and email address in order to be able to send you the newsletter. You can cancel your subscription at any time via the link in the newsletter or by contacting us via the email address privacy@cforec.com.
Data collected when you use our digital services
When you use one of our websites or digital services, we collect information about your use of the service as well as your IP number in order to constantly improve our service. We also collect information about how you navigate the service, which searches you perform, and which job advertisements and/or candidates you are interested in.
Information collected from someone other than you
When applying and when contacting us on various matters, it happens that a person provides personal data about one or more other people (for example, references). We assume that the person providing the information has the consent of all persons to provide this personal data.
In order to keep your personal data correct, we supplement and update your personal data by collecting it from both private and public registers. This applies, for example, to information such as your address details.
Handling and storage of your personal data
CFO Recruitment, Inc. complies with the legislation regarding the processing of personal data. It may happen that the same personal data is processed both on the basis of fulfillment of recruitment agreements, specifically on the basis of consent, or on the basis that the information is necessary to fulfill other legal obligations. This means that even if you withdraw your consent, and the processing is based on consent, the personal data may still remain with us for other purposes. We mainly process your data to fulfill an agreement to which you are a party, for example, the terms of employment.
Our customer care
We use your personal data to be able to provide you with service if you contact us with questions, opinions, or employment. We use your contact details such as your email address and telephone number to be able to contact you in connection with questions, recruitment, and other matters. We may also use all the other personal data that we have collected about you to handle your question or case, depending on what is relevant in the individual case.
Right to control your personal data
You have the right to request that the information about you be supplemented, deleted, or corrected. You also have the right to request that the processing of your personal data is limited to specific purposes and, for example, not used for direct advertising or so-called profiling.
Cookies
On www.cforec.com and our other websites, we use cookies to improve your experience, gather information for our marketing, and to be able to develop the websites. The information is stored anonymously. It may happen that some personal data is handled by cookies on CFO Recruitment.se. In addition to our personal data policy, our cookie policy also applies to this handling.
Information mailing
When you have been employed or found a job candidate through us, we use your personal data for, among other things, employment confirmations, and important information about the candidate and/or the assignment. Such mailings take place to the email address that has been provided in connection with the use of our service. Once you have been hired or found a suitable candidate for your company, we will send you a survey with questions about the process to help us improve our services. Even before and during the employment/assignment, we may have been given the task of filling in and sending important information to both you as the client and the executor via the email address you provided in connection with the use of our service. It can be about information such as the start and end of the employment, the contact person at the company you are going to start with,
Marketing and Personalization
Customer information can be used in a marketing context by CFO Recruitment, Inc. in connection with specific projects/assignment proposals to contact you by post, email, and SMS. You who have indicated that you want to subscribe to our newsletter receive news and information based on your personal data in order to send one with customized content just for you. Information that we use for this is partly your email address, information about your search history among our offered services, your usage pattern, and your preferences. By using this information, we can provide you with offers that we believe will be of greatest interest and benefit to you.
On our websites, we use information about our users to make a so-called personalization – an adaptation of the content on our website based on you and your use. This adaptation can, for example, be that we save and display information about jobs and assignments that you have previously searched for on one of our websites or digital services. This also means that we show you advertisements and offers that we think to suit you and your desired jobs and assignments. This also includes our advertising and communication on social media and web advertising on websites other than www.cforec.com .
In some cases, we share information with our partners to help us tailor our offers and marketing to you. We enter into agreements to ensure that such collaboration partners process data in accordance with applicable personal data legislation.
For analysis of user patterns and personalization, we use cookies.
Development of services and service
We use the information we collect about our customers to develop and improve our products and services. This applies in part to our digital services, where we analyze user behavior to develop how we present information, offers, and design functions. This also applies to developing our products according to customers’ wishes and behavior and to e.g. remedy deficiencies or increase security.
Essentially, we use anonymous or anonymized data at an aggregate level to do this type of analysis. However, it may happen that we also use personal data that we have collected if it is relevant.
Requirements according to law
Finally, processing of your personal data may also take place in order for us to be able to fulfill obligations according to laws and regulations, for example, applicable security and accounting.
Storage times
CFO Recruitment follows good practices in the recruitment industry. We save all the personal data we collect in our customer database as long as it is needed for the purpose. Your personal data and service history are stored in the customer database for up to five (5) years unless you have agreed that we can keep the data longer. If you agree to the data being saved for a more extended period, we save your personal data for up to 10 years. Contact information about you who subscribe to our newsletter is saved as long as you choose to receive our newsletter.
The same personal data can be stored in several different places for different purposes. This may mean that data that has been removed from a system because it is no longer necessary may remain in another system where it is stored with the support of consent or for another purpose where the personal data is still needed.
CFO Recruitment technical and organizational measures for secure processing of your personal data. We take ongoing efforts to fulfill the principles of “data protection built in and data protection as standard”. We continuously evaluate the risks of personal data processing and take the necessary security measures to reduce the risks.
We continuously train our staff in data protection matters and we have our own data protection representative. If you have direct questions about how we work with the Personal Data Act (PUL) or the upcoming data protection regulation (GDPR), please privacy@cforec.com .
Disclosure of personal data
Microsoft
We use Microsoft Office products and system services for our internal work. This means that your personal data will be processed by Microsoft, which has been hired by us as a personal data processor. The personal data is stored by Microsoft in a cloud service within the EU. In the event of an extensive IT incident, the personal data may be transferred by Microsoft to a third country (that is, a country outside the EU/ESS). This transfer takes place only for the purpose of protecting the data.
Google Suite / Cloud
We use Google’s services within Google Suite and Cloud on a daily basis. They mean that your personal data can theoretically be available to Google. Google is responsible for ensuring that all data is handled according to the current GDPR standard within the EU.
Read more about Google’s policies regarding personal data and GDRP;
https://cloud.google.com/security/gdpr/
https://privacy.google.com/businesses/compliance/
https://gsuite.google.com/security/?secure-by-design_activeEl=data-centers
Contractual partners and IT suppliers
We use a number of different IT services and IT systems in our operations. In some of these, personal data is stored and handled. We are concerned about your privacy and the security of your data in all such handling. Some systems are installed locally with us and only our staff have access to the data. In these cases, no transfer to third parties takes place. However, some systems are cloud solutions or installed at the supplier which mean that we transfer personal data to the supplier. In these cases, the supplier is our personal data assistant and handles the data on our behalf and according to our instructions.
Internal IT systems
Internally, we handle personal data in our customer database, in our recruitment and sales support systems, in our customer service system, and in a system for data management and data improvement. These systems are there to be able to deliver the services you have ordered from us and to be able to handle questions and customer care in connection with the performance of these services. In these systems, all the personal data we collect can be handled.
Web analytics company
We use external providers for personalization and analysis of user behavior on our websites and for user feedback. These companies handle personal data as personal data processors on our behalf. The information in question is above all information that is retrieved through cookies and handled on an anonymous and aggregated level.
We use an external vendor to provide chat functionality. The supplier gets access to the information provided in the chat. You accept the provider’s personal data policy in connection with starting the chat function.
Your rights
Necessary processing of personal data and processing based on consent Processing of
personal data that is necessary for us to be able to fulfill a contract with you or for us to be able to fulfill a legal obligation is permitted without consent. However, in order for us to be able to collect and process your personal data for any other purpose, you must consent to the processing. You consent to the handling of your personal data in connection with your use of our services at www.cforec.com , when contacting our recruiters or with an agent or an employer/customer of CFO Recruitment, Inc..
Withdrawal of consent
You can choose to withdraw your consent at any time by contacting us. If you withdraw your consent, we will delete the personal data and cease the processing that was covered by the consent.
It may happen that the same personal data is processed both on the basis of consent and on the basis that the data is necessary or on the basis of other rules. This means that even if you withdraw your consent and the processing based on consent ceases, the personal data may still remain with us for other purposes.
The right to receive information about what personal data we have saved about you
If you want information about which data we have registered about you, you can apply for this in writing at the above address. The register extract is provided on request and is free of charge once a year. How do I go about requesting a register extract?
The legal support for this right with register extracts can be found in Section 26 of the Personal Data Act
If a company violates PUL
Anyone who believes that a company is in breach of PUL or other privacy legislation can contact the Swedish Data Protection Authority. Read more on the Swedish Data Protection Authority’s website
KEY CONCEPTS
Processing of personal data includes all handling of personal data, for example; collection, analysis, registration, and storage. The person responsible for personal data is the person who, alone or together with another, determines the purposes and means for the processing of the personal data and who is ultimately responsible for the processing taking place in accordance with the applicable personal data legislation.
DATA PROCESSED
- name;
- address;
- email address;
- phone number;
- IP address;
- social security number;
- other information that you provide yourself within the scope of the Service.
- information about your use of the Service; and
- technical data, which may include the URL through which you access the Website, your IP address, unique device ID, network and computer performance information, browser type, language, and identification and operating system information.
PURPOSE OF THE TREATMENT
- to provide the Service;
- to ensure customer awareness;
- to personalize and improve your experience of the Service;
- to send you notifications and messages by post, telephone, electronic communication (such as SMS or email), or otherwise, including sending you marketing of our products and services;
- to inform you about our updates to the Service and the Terms of Use;
- to improve and develop the Service and new services and products, as well as to analyze your use of the Service;
- to ensure the technical functionality of the Service;
- to prevent the use of the Service in violation of the terms of use for the Service and to prevent and investigate misuse of the Service; and
- to fulfill obligations under the law.
CONSENT
- processing of your personal data takes place in accordance with this personal data policy;
- we may send you direct marketing, e.g. by post, telephone, electronic communication (such as SMS or email), or otherwise (you can opt out of further offers at any time).
- that we, to the email address specified by you, have the right to continuously send out newsletters with information about new services or offers from CFO Recruitment, Inc.. If you no longer wish to receive such a newsletter, you can terminate this service at any time by clicking on the dedicated link provided in each newsletter.
- that we may record or otherwise document your communication with us.
Transfer of personal data to third parties
We will not share, sell, transfer or otherwise disclose personal information beyond what is stated in this privacy policy unless we are required to do so as a result of a court order or if we have obtained your consent to such disclosure. If there is a suspicion that you have committed a crime in connection with the use of the Service, information may be disclosed to the authorities upon request.
This does not exclude that we can use personal data assistants who process personal data on our behalf in accordance with written personal data assistant agreements and our instructions. Personal data processors who gain access to your personal data (eg when we use a third party to carry out payment transactions or store information on a server), are not given any right to use your personal data for purposes other than the purposes set out in this personal data policy.
Transfer of personal data to third countries
We may transfer parts of your personal data to third countries, i.e. countries outside the EU/EEA. For example. may personal data be stored on servers located in third countries.
AMENDMENT
You have the right, according to the applicable personal data legislation, to request a so-called register extract with information about which personal data about you we process. You have the right to this information free of charge and without reason.
You also have the right, at any time, to request that we either correct, block or delete personal data that is inaccurate. In case we are obliged by law to store your data, the data can only be blocked.
LEGAL REQUESTS AND DAMAGE PREVENTION
We may use, store and share your information in response to legal requests (such as a search warrant, court order, subpoena or similar), or when necessary to detect and prevent criminal activity. We do this so that we can protect ourselves, you, and other users. This may mean that the storage takes place as part of an investigation if we believe that this is required according to the applicable law. Information that we obtain about you when you use the Service may be used and stored for a longer period of time than is required for other purposes when the information is subject to a legal request, the obligation under the law, authority investigation, or investigations concerning possible violations of our terms of use or policies, or otherwise to prevent damage.
COOKIES AND SIMILAR TECHNOLOGIES
We collect information using cookies and other technologies that recognize you as a user. For information on how we use these technologies and how you can prevent the use of cookies, please see our cookie policy.
SOCIAL PLUG-INS
When you use the Service, you may from time to time be offered to share information from the Service on social media, such as Facebook, LinkedIn or Twitter, via an implemented social plug-in (such as a like button). If you choose to share information via a social plug-in, your browser will transmit the following data to social media:
- date and time of your visit;
- The Internet address/URL of the address you are currently visiting;
- your IP address;
- what browser you used;
- what operating system you used;
- your username if you are a registered user of the social media and, if applicable, your first and last name; and
- if you use a plug-in, the information for which you used that specific plug-in.
Please note that we have no influence over the information that social media collects with the help of various plug-ins. Regarding such information, we refer to the terms and conditions of the respective social media. We encourage you to keep yourself informed about the purpose of, and the scope of, the collection of data that takes place through social plug-ins. You can block various social plug-ins in the settings of your browser.
Changes to the personal data policy
If we make changes to this personal data policy, we will notify you by publishing the updated version here: www.cforec.com/privacy/
If the changes are material we will also notify you appropriately and, if required, ask for your consent.
Choice of law and dispute resolution
Processing of your personal data according to this personal data policy and your use of the service is regulated by Swedish law. Disputes must be resolved by a Swedish general court with the San Francisco District Court as the first instance unless otherwise provided by law.
Contact details for the person in charge of personal data
CFO Recruitment is the personal data controller for the personal data processing that takes place within the framework of the service.To exercise the rights set out above or if you have any questions about our processing, please contact us at one of the following addresses:
CFO Recruitment
XXX
XXX
privacy@cforec.com