In the spirit of transparency, this Privacy Notice details how HydraWell processes the personal data collected or received from candidates seeking work, e.g. from CV’s or application forms.
1. WHAT INFORMATION DOES THE COMPANY COLLECT AND HOW IS IT USED?
HydraWell will collect and process the CV’s of candidates seeking work either speculatively, or in response
to a specific opportunity that has been advertised.
Upon receipt, your CV/Application will be logged in our database for the purposes of recruitment and work
seeking. Your CV will be retained for 2 years, under the legal basis of Legitimate Interest and will then be
securely deleted/destroyed after this period. If you would like your CV to remain on our database after this
time, you will need to resubmit. At any time, if you no longer wish your CV to be retained by us, you can
contact us to have your details removed from our database.
2. WHO HAS ACCESS TO DATA?
Your information will be shared internally with HydraWell Staff, for the purposes of recruitment. In all
circumstances the data will be subject to confidentiality arrangements.
We will not share your CV with any other external 3rd Party without your consent.
3. HOW DOES THE COMPANY PROTECT DATA?
HydraWell have implemented a number of operational controls and internal policies to ensure that your
data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees
in the performance of their duties.
Data that is transferred outside of the European Economic Area is protected by appropriate Transfer
Safeguards, which guarantee an adequate level of data protection wherever your data is physically kept.
Where we engage third party suppliers to process data on our behalf, we do so on the basis of written
instructions, ensuring the third party has implemented appropriate technical and organisational measures
to ensure the security of data.
4. YOUR RIGHTS
As a data subject, you have a number of rights, as follows:
• access and obtain a copy of your data on request;
• to change incorrect or incomplete data;
• to delete or stop processing your data, for example where the data is no longer necessary for the
purposes of processing;
• object to the processing of your data in certain circumstances
• to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your
interests override our legitimate grounds for processing data.
If you would like to exercise any of these rights, please contact our Data Protection Representative. All
correspondence should be addressed to Gro Lunde: gl@hydrawell.no
