what personal data we process within our services/programs and how it is collected

Randstad Risesmart will process your data when you are registered as a participant in our services/programs. The personal data processed is name, address, e-mail address, telephone number, social security number, information about career ambitions, industries you want to work in, information in the CV, such as work experience and previous workplaces, information about education, training and / or tests that you have followed or taken, on your own initiative or through us, information about your success and status in job search, information about your customer satisfaction or other feedback about the job search and service, and possibly other information you voluntarily provide to us.

We collect and process personal data:

  • That you or our client provide when you register as a participant in one of our services/programs, that you provide on our website, or when your information is shared with us by the contracting organization, our client, as part of our contract with our client in connection with the services.
  • That we collect from you during the time you are part of one of our programs/services, e.g. information about work experience, career ambitions, industries you want to work in, etc.

what we use the personal data within our services/programs for

Randstad RiseSmart processes your personal data only for the purposes set out below.

who we share your personal data with

We may share your personal data within the Group to provide our services/programs and we may share your personal data with our subcontractors who provide services to us, e.g. providers of operation and support of our systems. Randstad Risesmart remains responsible for the processing of your personal data that we or subcontractors perform on behalf of Randstad Risesmart and subcontractors may not use the personal data for purposes other than those we specify. Sharing of personal data within Randstad Risesmart or to subcontractors is done to fulfill the agreement between us, i.e. to enable us to provide the agreed services to you.

When we share personal data as described above, personal data may be transferred to companies both within and outside the EEA. Any such transfer is based on applicable law and if the processing is done outside the EEA will be subject to appropriate safeguards in the form of, for example, the European Commission's model clauses for such transfers or that the European Commission has decided that the country has an adequate level of protection.  

Personal data about you will also be shared with our client, or its partners where necessary to perform our services to you, i.e. to help you develop your career. If we provide your personal data to our client, the client is an independent data controller for its processing of your personal data after such receipt from us.

how long we keep your personal data

We process your personal data for as long as it is necessary with regard to why the personal data was collected. This means that your personal data will be deleted after Randstad Risesmart's delivery commitment for the current assignment/contract ends.

security

Randstad Risesmart has taken appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration and destruction. To ensure that personal data is processed in a secure and confidential manner, we use data networks that are intrusion-protected with, among other things, firewalls and password protection according to industry standards. To ensure the privacy of the personal data you provide over the Internet, we may use encryption technology when transmitting such personal data over the Internet to our servers. Randstad Risesmart employees and suppliers are bound by confidentiality agreements and are required to comply with Randstad Risesmart information and IT security rules, internal policies regarding the processing of personal data and other internal regulations and guidelines that further regulate the processing of personal data.

your rights

You have certain rights under the GDPR in relation to your personal data:

  • Right of access - You have the right to obtain certain information about our processing of your personal data. Such information is provided through this information document. You also have the right to access a
  • copy of the personal data we process about you.
  • Right to rectification - You have the right to have inaccurate personal data about you rectified.
  • Right to erasure - In certain circumstances, you have the right to have your personal data erased. This is known as the 'right to be forgotten'. However, the right to erasure is conditional and a request can be left without action.
  • Right to restriction - In certain circumstances, you have the right to request that the processing of your personal data be restricted. However, the right to restriction is conditional and a request can be left without action.
  • Right to data portability - You have the right to receive personal data you have provided to us (or to request the transfer of the data directly from us to a new controller) in a structured, commonly used and machine-readable format.
  • Right to object - You have the right to object to our processing of your personal data if the processing is based on a balance of interests, unless you consider that Randstad Risesmart has a legitimate interest in processing the personal data. The right to object also applies to the processing of personal data for direct marketing purposes.

read more about the rights here: 

https://www.imy.se/en/organisations/data-protection/this-applies-accordning-to-gdpr/the-data-subjects-rights/

You can exercise your rights through this form. Once Randstad RiseSmart has received the form from you, you will be contacted by Randstad RiseSmart for identification (e.g. e-signing).

You also have the right to lodge a complaint with the applicable supervisory authority at any time if you consider that Randstad RiseSmart is processing your personal data in violation of applicable data protection law.