PRIVACY POLICY

Candidates applying for a job

 

At La Cabra we prioritize your confidentiality and privacy. You can read about our processing of your personal data when you apply for a job at La Cabra in this privacy policy

La Cabra Risteri ApS is the data controller responsible for the processing of your personal data.

If you have any questions about our processing of your personal data, you are always welcome to contact Morten Le Dous Bruun (Head of Ecommerce) at morten(at)lacabra.com.

1. WE PROCESS YOUR PERSONAL DATA

When you apply for a job at La Cabra we process your personal data for various purposes, which you can read more about in the following.

We only process and retain personal data when and for as long as necessary to fulfill the purposes for which the personal data was collected or if necessary to comply with the law.

1.1 If you apply for a job at La Cabra

Legitimate purpose and legal basis

When you apply for a job, we process your personal data for the purpose of assessing your application in relation to an advertised or possible future position. We process the personal data you provide in your application material as well as the data you provide in connection with emailing the application to us, including:

  • Ordinary personal data in your application material (e.g. name, contact information, job history, education, skills, photo, video application, grade level and desired number of hours). The processing is carried out in order to safeguard your and our interests in assessing your application and your qualifications, cf. GDPR art. 6(1)(f). 
  • Ordinary personal data that we collect from LinkedIn, Facebook and other publicly available medias (e.g. job history, education and general qualifications). The processing is carried out in order to safeguard your and our interests in assessing your application and your qualifications, cf. GDPR art. 6(1)(f).

We never encourage you to include confidential or sensitive personal data in your application material unless this is essential for your potential future employment. If you do include such personal data in your application material, we will consider this as your consent for us to process the data in connection with the recruitment process. In that case, we may process the following personal data about you:

  • National Identification Number (CPR), cf. section 11(2)(2)(2) of the Danish Data Protection Act.
  • Information about criminal convictions and offenses, cf. section 8(3) and (4) of the Danish Data Protection Act.
  • Sensitive personal data, including data related to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or data concerning sexual life or sexual orientation, cf. GDPR Art. 9(2)(a) and GDPR Art. 6(1)(a).

Disclosure

To the extent necessary to safeguard your and our interests in assessing your application, we may disclose your personal data to relevant business partners, including software suppliers, recruitment agencies etc.

Retention policy

We store your application material for up to 6 months after the end of the recruitment period in case of an advertised position or up to 30 days after receipt of an unsolicited application in order to assess whether your application is relevant in relation to a possible future position. We may store your application for up to 12 months if you have consented to us storing your application in order to contact you regarding a possible future position.

Under specific circumstances, we may store your personal data for a longer period of time if we deem it necessary in order to defend ourselves against a possible legal claim, cf. GDPR Art. 6(1)(f) and GDPR Art. 9(2)(f). 

1.2 If you participate in a job interview at La Cabra

Legitimate purpose and legal basis

When you participate in a job interview at La Cabra, we process your personal data in order to assess your qualifications and whether you are the right candidate for the relevant position, including:

  • Ordinary personal data you have provided in your application material (e.g. name, contact information, job history, education, skills, photo, video application, grade level and desired number of hours). The processing is carried out to safeguard your and our interests in being able to assess you and your qualifications, cf. GDPR art. 6(1)(f). 
  • Ordinary personal data we note about you in connection with the recruitment process (e.g. internal notes, assessments or evaluations). The processing is carried out to safeguard your and our interests in being able to assess you and your qualifications, cf. GDPR, art. 6(1)(f).
  • Ordinary personal data that we collect from LinkedIn, Facebook and other relevant publicly available media (e.g. information about your appearance, job history, education and qualifications). The processing is carried out to safeguard your and our interests in assessing you and your qualifications, cf. GDPR art. 6(1)(f).
  • Ordinary personal data collected in relation to any personality or IQ tests (e.g. test results, evaluation and feedback materials). The processing is carried out to safeguard your and our interests in assessing you and your qualifications if you give your content, cf. GDPR art. 6(1)(a) and (f).
  • Ordinary personal data that we collect from any references you have given us permission to contact (e.g., information about work tasks and performance). The processing is carried out to safeguard your and our interests in being able to assess you and your qualifications if you give consent, cf. GDPR art. 6(1)(a).
  • Confidential and sensitive personal data, if you have stated such information in your application material and these are relevant to your employment, including information about criminal convictions and offenses, cf. section 8(3) and (4) of the Danish Data Protection Act or information about race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or information about sexual orientation or beliefs, cf. GDPR article 9(2)(a) and GDPR article 6(1)(a).

Disclosure

To the extent necessary to safeguard your and our interests in assessing whether you are the right candidate for the position, we may disclose your personal data to relevant business partners, including, for example, software suppliers, recruitment agencies, testing agencies etc.

If we obtain references about you from your previous employers, we will disclose information that you have applied for a job at La Cabra to the references you have authorized us to contact.

Retention policy

We store your personal data for up to 6 months after the end of the recruitment process.

Under specific circumstances, we may store your personal data for a longer period if we deem it necessary to defend ourselves against a possible legal claim, cf. GDPR Art. 6(1)(f) and GDPR Art. 9(2)(f).

1.3 If you are offered a job at La Cabra

Legitimate purpose and legal basis

If you are offered a job at La Cabra, we process your personal data for the purpose of entering into an employment agreement with you, including:

  • Ordinary personal data (e.g. name, address, contact information, salary and other terms of employment). The processing takes place in order to enter into an employment contract with you and to safeguard your and our interests in this connection, cf. GDPR Art. 6(1)(b) and GDPR Art. 6(1)(f). 
  • Confidential personal data, including information that may appear from any criminal record, cf. section 8(3) of the Danish Data Protection Act.

Disclosure

To the extent necessary to safeguard your and our interests in entering into the employment agreement, we may disclose your personal data to group companies and relevant business partners, including e.g., software suppliers, recruitment agencies etc.

Retention Policy

We store the personal data we have collected as part of the recruitment process in accordance with our internal guidelines for processing personal data for employees, which you will be informed of during the recruitment process.

1.4 If we wish to store your application material in order to contact you regarding any future vacancies

Legitimate purpose and legal basis

If your application does not lead to a job at La Cabra, but we consider your application relevant to save in order to contact you for any future vacancies, we process the following personal data about you:

General personal data (e.g., name, contact information, job history, education, skills, photo, video application, grade level and desired number of hours). The processing takes place to safeguard your and our interests in being able to contact you for possible future employment and only if you have given your consent, cf. GDPR art. 6(1)(a). 

We never encourage you to include confidential or sensitive personal data in your application material unless it is essential for your potential future employment. If you do provide such personal data in your application material, we may process the following personal data about you:

  • National Identification number (CPR), cf. section 11(2)(2)(2) of the Danish Data Protection Act.
  • Information about criminal convictions and offenses, cf. section 8(3) and (4) of the Danish Data Protection Act.
  • Sensitive personal data, including, for example, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or data concerning sexual life or sexual orientation, cf. GDPR Art. 9(2)(a) and GDPR Art. 6(1)(a).

Disclosure

To the extent necessary to safeguard your and our interests in contacting you for possible future vacancies, we may disclose your personal data to relevant business partners, including e.g., software suppliers and the like.

Retention policy

We store your application for a period of up to 12 months after you have given your consent. 

Under specific circumstances, we may store your personal data for a longer period if we deem it necessary to defend ourselves against a possible legal claim, cf. GDPR Art. 6(1)(f) and GDPR Art. 9(2)(f).

2. THIRD COUNTRY TRANSFERS

If it is necessary for our processing of your personal data, we may transfer personal data to third countries outside the EU/EEA. Transfer of personal data to third countries only takes place if we have a legal basis, including:

  • If the EU Commission has decided that the third country ensures an adequate level of data protection, cf. GDPR article 45,
  • If we or the data importer can provide appropriate safeguards e.g., by entering into the EU Commission's standard contracts, cf. GDPR Art. 46, or
  • If one or more of the exemptions in GDPR Art. 49 apply.

If you would like further information about third country transfers, you are always welcome to contact us via our online chat.

3. IF YOUR WISH TO WITHDRAW YOUR CONSENT

If we process your personal data on the basis of your consent, you may withdraw your consent at any time by contacting us as stated above in section 1.

If you withdraw your consent, please note that this does not affect the lawfulness of our processing up to the time you withdraw your consent, and that in special cases we may be entitled to continue processing your personal data, e.g., to defend ourselves against a possible legal claim.

4. DATA SUBJECT RIGHTS

You are welcome to contact La Cabra if you seek information about the personal data we process about you and for which purposes. As a data subject, you have the following rights when we collect and use your personal data:

  • You have the right to access the personal data we process about you
  • You have the right to object to our collection and further processing of your personal data
  • You have the right to rectification and erasure of your personal data, subject to certain statutory exceptions
  • You have the right to request us to restrict the processing of your personal data
  • Under specific circumstances, you may also request to receive a copy of your personal data as well as the transmission of the personal data you have provided to us to another data controller (data portability).

If you wish to exercise any of these rights or if you have any questions regarding the processing of your personal data, please contact us via our online chat.

5. COMPLAINTS

You have the right to file a complaint to the Danish Data Protection Agency in Denmark: www.datatilsynet.dk or the Data Protection Agency in your country of residence in the EU/EEA if you are dissatisfied with the way we process your personal data. 

However, we hope that you will always contact us first so that we can find a reasonable solution. You can always contact us via our online chat.

6. AMENDMENTS

We reserve the right to update to this privacy policy from time to time. In case of any updates, the date at the bottom of the privacy policy will be changed. The privacy policy in force at any given time will be available on our website.

 

This privacy policy was last updated on December 1. 2023.