Privacy notice for applicants in Statkraft Group

1. apply for a position through the career site;
2. proceed to the pre-employment screening as part of the final candidate pool; or
3. want to be included in our candidate database for a potential position. 

Why do we process your personal data?

We only process your personal data for recruiting and hiring purpose. Specifically, we will process your personal data

• to consider your application in respect of a role for which you have applied;
• to consider your application in respect of other roles if relevant;
• to communicate with you in respect of the recruitment process;
• to assess your skills, qualifications and background for a particular role;
• to evaluate you in the pre-employment screening process as part of the final candidate pool; and
• to anonymize your personal data and use the anonymized data for statistical purposes. All data will be processed confidentially and will be used for identifying future applicants to fill vacancies or assignments within Statkraft.  

What kind of personal data do we process?

Statkraft will collect and process the following personal data about you as an applicant:

• Your name and contact details (e.g. salutation, first name and last name, email address, phone number, city and ZIP code, country of residence, nationality);
• Your account details (such as username and password) to the recruitment portal in which you have submitted your personal data;
• Your CV data (e.g. qualifications, experience, information relating to your employment history, skills and experience);
• Your correspondence details if you contact us (e.g. via SMS or similar);
• Organizational data in case of internal applications (e.g. email address);
• Your IP-address, which device and operating system you are using (smartphone, PC, Mac, Windows, Mac OS, etc.) and how you use our recruitment platform (e.g. whether you are able to complete your application, which part of the recruitment platform you are using, etc.);
• Personal data generated by interviewers and recruiters, based on their interactions with you or basic Internet searches (e.g. data from profile on LinkedIn) if compliant with local law;
• Personal data provided by third-party headhunters and recruitment agencies, recruitment assessment providers for personality tests (if such are conducted by Statkraft or on behalf of Statkraft); or job-search websites, where applicable. In such cases of use of third-party providers, you will be duly notified in advance

What are the legal bases for processing your personal data?

All EU/EEA countries. Our processing of your personal data listed above is based on your consent (GDPR Article 6, litra a) which you separately have given prior to submitting your personal data to us. 

Where specific information about applicants must be processed in order to comply with local law, we rely on GDPR Article 6, litra c and the local legal basis.

During the recruitment process we may also contact you directly via SMS, if applicable. Such contact is merely for practical coordination purposes.
 

You are not required to provide us with all personal data proposed during the recruitment process. However, if you decide not to provide us with the necessary personal data, we may not be able to consider you for a position.

Our processing of your personal data listed above is based on GDPR Article 6, litra b in Germany, as the processing is necessary to take steps at the request you prior to entering into an employment contract.
 

During the recruitment process we may also contact you directly via SMS, if applicable. Such contact is merely for practical coordination purposes.

You are not required to provide us with all personal data proposed during the recruitment process. However, if you decide not to provide us with the necessary personal data, we may not be able to consider you for a position.

Where do you get my personal data from?

First and foremost, we collect your personal data from you via the recruitment platform (Smart Recruiters) in which you have provided the required personal data.
 

We may collect personal data about you, which is provided by third-party headhunters and recruitment agencies, recruitment assessment providers for personality tests (if such are conducted by Statkraft or on behalf of Statkraft) and/or job-search websites.
 

Further, we collect personal data about you generated by interviewers and recruiters, based on their interactions with you.
 

We might collect personal data about you via basic Internet searches (e.g. data from profile on LinkedIn) unless local law prohibits this. In that case, Statkraft will not perform such searches.

Who receives my personal data?

Your personal data and your applicant profile can be viewed by the recruiting and human resources department and the specialist department involved in the selection process at Statkraft. In principle, only those persons who need access to your data for the proper conduct of our application process have access to your data.
 

We use the service provider Smart Recruiters for the hosting, operation and maintenance of our applicant management system. You can view the Smart Recruiters data protection declaration here: Privacy Policy | SmartRecruiters. Smart Recruiters is a data processor of Statkraft and they are obligated to protect your personal data in the same way as Statkraft does.
 

Personal data is stored on servers maintained by Amazon Web Services in Frankfurt (Germany, European Union) and subject to security safeguards which are continuously audited, with certifications from accreditation bodies across geographies and verticals. You can read more about Amazon Web Services' security and compliance here: Cloud Compliance - Amazon Web Services (AWS).
 

Statkraft uses several data processors in the recruitment process. This includes assessment centers, such as providers of personality tests, which may have access to your personal data such about your name, e-mail and test result. In such cases, you will also be asked to give consent to personality tests to such assessment centers as data controllers which they will share with us. We also use several IT-providers for operation and management purposes associated with the recruitment process. Your personal data will be accessed by service providers that perform such services on behalf of Statkraft. All data processors of Statkraft are obligated to protect your personal data in the same way as Statkraft does.

Statkraft is part of an international group of companies with cross-national cooperation of employees in their functions. When filling positions it is possible that the selection process involves persons, who work in a different company of the group of companies than the one for which you have applied. It is therefore also possible that in such cases applicant information will be passed on to other companies within the group of companies during the selection process.

We rely on binding corporate rules as the transfer mechanism for any intra-group transfer of personal data between the EEA and non-EEA countries.

When is my personal data deleted?

Provided that you have given your consent, Statkraft will keep the information created for the purpose of processing the application for a specific vacancy for twelve months. If your consent is the legal basis for processing, Statkraft will delete your personal data whenever you withdraw your consent.

Where specific personal data about applicants must be retained in order to comply with local law, we rely on GDPR Article 6, litra c and the local legal basis for keeping such personal data.

We will keep information about the fact that you gave and withdrawn your consent in accordance with local law when applicable.

Provided that you have given your consent to be part of our talent community, Statkraft will keep your contact details and Curriculum Vitae for 24 months with the purpose of contacting you if Statkraft assess that your profile will be fit for another vacant position within the Statkraft Group. During this period Statkraft may contact you directly or through recruitment campaigns to provide information about potential career opportunities within Statkraft.

Upon the expiration of the data retention period (12/24 months), Statkraft will provide you with an opportunity to update your Curriculum Vitae and other information and to renew your consent. Local business units in the Statkraft Group may keep your data for longer than 12/24 months if required by local law.

Upon registration, you will be given the opportunity to create your own "Smart Profile". With this you can get access to edit or delete the data registered. You will also have the option to initiate a request to delete your data stored with Statkraft.

Your rights

At any time, you have the right to ask us to:

• provide you with further details on how we use your personal data
• provide you with a copy of the information that you have provided to us
• update/correct your personal data
• provide information about the logic involved in the automatic processing of your personal data in the case of the automated decision-making
• delete any personal information that we no longer have legal grounds to process
• provide you with your personal data in a structured, commonly used and machine-readable format or transmit the data to another controller
• stop particular processing where this is based on legitimate interests unless our reasons for processing the information outweigh any prejudice to your data protection rights
• restrict how we use your information whilst a complaint is under investigation
• lodge a complaint through the contact details in this privacy statement or to the relevant regulatory authority

You can find the contact information of the different national data protection supervisory authorities in Europe by visiting the European Data Protection Board’s overview

There may be conditions or limitations on these rights. It is therefore not certain for example you have the right of data portability or to be deleted in the specific case - this depends on the specific circumstances of the processing activity.

Contact us 

If you have any questions, wish to exercise your rights or lodge a complaint, you can contact our Corporate Privacy team at privacy@zo23.com.

Change log:

01.06.2022: privacy notice published