1. introduction
- This privacy policy (the “Policy”) describes how RH Pumper A/S (“us”, “we” or “our”) as data controller collects and processes personal data about you in connection with the handling of your job application and in the recruitment process.
- The policy is formulated and made available to comply with the General Data Protection Regulation (2016/679 of April 27, 2016) (“GDPR”) and its rules on disclosure.
2. Personal data we collect about you
- We process personal data about you when relevant and in accordance with applicable legislation. Depending on the specific circumstances, the personal data processed may include the following types of personal data: name, address, telephone number, e-mail address, date of birth, CV, application, profile picture, educational records, references from previous employers, information from social media that is publicly available and relevant.
- We do not process sensitive personal data, i.e. the special category of personal data defined in GDPR Article 9(1).
- As a general rule, we will only collect personal data about you directly from you. If in special circumstances we collect personal data about you from other sources, we will notify you, including by updating this Policy. Personal data may also be collected from external sources such as recruitment agencies and social media (e.g. Linke-dIn – here the collection will be in the form of publicly available information on social media).
- If we need to collect and process more personal data than stated above, we will inform you at the time of collection. Such information may also be provided when updating this Policy.
3. Purpose of the processing of your personal data
- Personal data that we collect about you is processed for the following purposes:
- To process applications and recruit relevant candidates.
- To be able to create and maintain a directory of relevant candidates for positions in our organization.
- Legal basis for the processing of your personal data
- We only process your personal data when we have a lawful basis for processing in accordance with GDPR. Depending on the specific circumstances, the processing of personal data is based on the following legal basis:
- If we have asked for your consent to the processing of some specific personal data, the basis for processing this personal data is your consent, cf. GDPR Article 6(1)(a).
- The processing is necessary for the pursuit of a legitimate interest, where your interests or fundamental rights and freedoms that require the protection of personal data do not override this, cf. Article 6(1)(f) of the GDPR and Section 12(2) of the Danish Data Protection Act.
- The processing is necessary in order to comply with applicable law, cf. GDPR Article 6(1)(c) and/or to comply with labor law obligations in legislation or collective agreements, cf. Section 12(1) of the Data Protection Act.
- Personal data that we collect about you is processed for the following purposes:
4. Disclosure and transfer of your personal data
- We only disclose personal data to others when permitted or required by law.
- We disclose personal data to the following recipients from the EU/EEA:
- Data processors
- We generally use various external and professional organizations as suppliers and partners to provide or assist us in providing our services and products. The external organizations will not receive or process personal data unless the law permits the transfer and processing thereof. If the external organizations or partners are data processors for us, their processing of personal data will always take place in accordance with a data processing agreement that meets the legal requirements. If the external organizations or partners are independent data controllers, their processing of personal data is in accordance with their own privacy, data protection or personal data policy, to which the external organizations will draw attention, unless otherwise required by law.
- We do not transfer personal data to countries or international organizations outside the EU/EEA.
- Deletion and storage of personal data
- We ensure that personal data is deleted when it is no longer relevant for our processing purposes as described above. We always retain personal data for the period of time required by applicable law, including for the purpose of documenting compliance with, among other things, the provisions of the Danish Bookkeeping Act. If you are hired, your personal data will be transferred to our personnel administration system in connection with your application.
- If you are not employed, your personal data will generally and in accordance with Danish law be deleted after 6 months at the latest. If there are specific employment law reasons, personal data may continue to be processed for such specific purposes despite the above. This means, among other things, that we can store the applications for a longer period of time in order to later be able to prove that, for example, there has been no unlawful discrimination in connection with the selection, if we find this necessary. It may also be relevant for us to process the personal data for a limited period of time if a similar relevant position becomes available or if another candidate drops out during the recruitment process.
- If you have any questions regarding the storage and processing of your personal data, you are welcome to contact us at the email address you find in the last section of this Policy.
5. Your rights
- As a data subject, you have a number of rights:
- You have the right to request insight into what personal data we process about you, the purpose of the processing and whether we disclose the personal data to others.
- You have the right to have inaccurate personal data about you rectified.
- In certain cases, you have the right to have some of your personal data erased. In certain cases, you have the right to have the processing of your personal data restricted so that we only store your personal data for a certain period of time.
- In certain cases, you have the right to object to our processing of your personal data on grounds relating to your particular situation.
- You have the right not to be subject to an automated decision without human intervention, unless the decision is necessary for your employment with us or the making of the decision is authorized by law or your explicit consent.
- If we have obtained your consent to part of our processing of your personal data, you have the right to withdraw your consent at any time. If you choose to withdraw your consent, it will not affect the lawfulness of the processing based on the consent before the withdrawal.
- In certain cases, you have the right to so-called data portability of the personal data you have provided to us.
- You can always file a complaint with the Danish Data Protection Agency.
- There may be conditions or restrictions to these rights. It is therefore not certain that you have the right to data portability, for example, in a specific case – this depends on the specific circumstances of the processing activities.
- As a data subject, you have a number of rights:
6. Changes to the Policy
- We reserve the right to update and amend this Policy. If we change the Policy, we will change the date and version at the top of the document.
- In case of significant changes, we will notify you in the form of a visible notice on vo-res website, email or by using other means of communication.
- This policy was last updated on 14/10/2025.
7. Contact us
- If you have any questions or comments about this policy, or if you claim one or more rights, you can contact us at info@rhpumper.dk.