Job applicants

Last updated: January 2025

1. Legal basis and purpose of processing personal data

SSAB processes personal data of job applicant for the following purposes, which are explained below.

PROCESSING ACTIVITY	LEGAL BASIS	DESCRIPTION
Recruitment	Legitimate interest	SSAB processes personal data of job applicants in order to interview and recruit new employees and to manage other administrative duties related to the recruitment process.
Hiring and preparation of employment contracts	Legitimate interest	Preliminary information required for hiring purposes and the initial stages of preparing an employment contract. However, if the recruitment leads to employment, SSAB needs to receive some additional personal information from the applicant. This information is directly collected from the individual in question. More information detailed in Employee privacy statement.
Candidate pool	Consent	A job applicant might also be interested in other positions than the initially applied position. In this case, the applicant can give their consent to receive emails about job-related news and be contacted whether other positions are opened.
Information and facility management	Legitimate interest	SSAB may process technical data, including some personal data for information security and access surveillance purposes and fraud prevention. SSAB maintains also information and facility security measures to safeguard health and safety as well as business information and business assets in order to avoid injuries at its facilities, to prevent property damage and criminal activities and to ensure the availability of the websites and services. This is to ensure an appropriate level of network, facility and information security and the safety of others.
Information security	Legitimate interest	SSAB maintains information security measures for information security purposes to safeguard business information and business assets, to avoid criminal activities and ensure availability of the services.

PROCESSING ACTIVITY

Recruitment

LEGAL BASIS

Legitimate interest

DESCRIPTION

SSAB processes personal data of job applicants in order to interview and recruit new employees and to manage other administrative duties related to the recruitment process.

PROCESSING ACTIVITY

Hiring and preparation of employment contracts

LEGAL BASIS

Legitimate interest

DESCRIPTION

Preliminary information required for hiring purposes and the initial stages of preparing an employment contract.
However, if the recruitment leads to employment, SSAB needs to receive some additional personal information from the applicant. This information is directly collected from the individual in question. More information detailed in Employee privacy statement.

PROCESSING ACTIVITY

Candidate pool

LEGAL BASIS

Consent

DESCRIPTION

A job applicant might also be interested in other positions than the initially applied position. In this case, the applicant can give their consent to receive emails about job-related news and be contacted whether other positions are opened.

PROCESSING ACTIVITY

Information and facility management

LEGAL BASIS

Legitimate interest

DESCRIPTION

SSAB may process technical data, including some personal data for information security and access surveillance purposes and fraud prevention. SSAB maintains also information and facility security measures to safeguard health and safety as well as business information and business assets in order to avoid injuries at its facilities, to prevent property damage and criminal activities and to ensure the availability of the websites and services. This is to ensure an appropriate level of network, facility and information security and the safety of others.

PROCESSING ACTIVITY

Information security

LEGAL BASIS

Legitimate interest

DESCRIPTION

SSAB maintains information security measures for information security purposes to safeguard business information and business assets, to avoid criminal activities and ensure availability of the services.

Loading component...

pdf218 Kb

Privacy notice - job applicants

Loading component...

2. Collection of personal data

Necessary personal data collected for the recruitment purposes includes among others:

Personal Data	Examples
Contact details	Name, postal address, phone number, e-mail address
Authentication data	Log-in and password and other such information used in connection with the proper authentication
Competences	Job application, CV, education background, examinations taken, skills profiles and other relevant qualification or certificate attached
Evaluation, tests and checks	Aptitude and personality tests, health checks and security clearances, where applicable
Preferences	Preferred country/countries and/or sites of employment, willingness to relocate, desired salary
References	References can be retrieved from previous employers. These contacts are provided by the applicant. In such case, the job applicant is responsible to obtain consent form the third party.
Technical data	Log data and IP address
Communications	Communication data during recruitment process, including emails, voice mails, video recordings
Other	Photograph when provided by the applicant or if applicant gives a consent to take a picture in connection to an interview and video interview recordings when applicable

Personal Data

Contact details

Examples

Name, postal address, phone number, e-mail address

Personal Data

Authentication data

Examples

Log-in and password and other such information used in connection with the proper authentication

Personal Data

Competences

Examples

Job application, CV, education background, examinations taken, skills profiles and other relevant qualification or certificate attached

Personal Data

Evaluation, tests and checks

Examples

Aptitude and personality tests, health checks and security clearances, where applicable

Personal Data

Preferences

Examples

Preferred country/countries and/or sites of employment, willingness to relocate, desired salary

Personal Data

References

Examples

References can be retrieved from previous employers. These contacts are provided by the applicant. In such case, the job applicant is responsible to obtain consent form the third party.

Personal Data

Technical data

Examples

Log data and IP address

Personal Data

Communications

Examples

Communication data during recruitment process, including emails, voice mails, video recordings

Personal Data

Other

Examples

Photograph when provided by the applicant or if applicant gives a consent to take a picture in connection to an interview and video interview recordings when applicable

Loading component...

As a rule, this personal data is collected directly from the job applicant. Subject to applicable national legislation, SSAB or its third-party service providers may also collect personal data from other sources.

SSAB does not generally collect information about job applicants that is particularly personal or private (sensitive information). If sensitive information will be collected and processed at some stage of the recruitment process, such collection is based on the applicable local legislation, and the job applicant will be informed thereof. SSAB is an equal opportunity employer and SSAB offers equal treatment to all job applicants.

Loading component...

3. Transfers or disclosure of personal data

In some cases, SSAB uses third-parties in the recruitment process and can outsource parts of the process, thus personal data may be disclosed:

to trusted service providers, such as recruitment partners and system providers for competence and qualification reasons, including aptitube tests;
to authorities or other parties, in order to conduct background checks. When required by applicable law, consent of the job applicant will be asked prior to the event.

Third parties may act on SSAB’s behalf as data processors or as independent data controllers, depending on the case.

Loading component...

4. Retention of personal data

Personal data related to non-chosen job applicants shall be retained for up to two years. If the recruitment process leads to an employment with SSAB, relevant Personal data will be retained during and after the course of the employment as required by retention period provided in the applicable law. Generally, candidate pool information is retained for one year since last login.

Loading component...

5. Automated decision making

In certain instances, SSAB may recur to automated decision making in the initial stages of the recruitment process. As the job applicant, you have the right to not be subject to automated decision making.

Loading component...

Privacy portal

Go back to the Privacy portal containing general privacy information and other specific privacy notices.

Back to Privacy portal

Loading component...

PROCESSING ACTIVITY	LEGAL BASIS	DESCRIPTION
Recruitment	Legitimate interest	SSAB processes personal data of job applicants in order to interview and recruit new employees and to manage other administrative duties related to the recruitment process.
Hiring and preparation of employment contracts	Legitimate interest	Preliminary information required for hiring purposes and the initial stages of preparing an employment contract. However, if the recruitment leads to employment, SSAB needs to receive some additional personal information from the applicant. This information is directly collected from the individual in question. More information detailed in Employee privacy statement.
Candidate pool	Consent	A job applicant might also be interested in other positions than the initially applied position. In this case, the applicant can give their consent to receive emails about job-related news and be contacted whether other positions are opened.
Information and facility management	Legitimate interest	SSAB may process technical data, including some personal data for information security and access surveillance purposes and fraud prevention. SSAB maintains also information and facility security measures to safeguard health and safety as well as business information and business assets in order to avoid injuries at its facilities, to prevent property damage and criminal activities and to ensure the availability of the websites and services. This is to ensure an appropriate level of network, facility and information security and the safety of others.
Information security	Legitimate interest	SSAB maintains information security measures for information security purposes to safeguard business information and business assets, to avoid criminal activities and ensure availability of the services.

PROCESSING ACTIVITY

Recruitment

LEGAL BASIS

Legitimate interest

DESCRIPTION

SSAB processes personal data of job applicants in order to interview and recruit new employees and to manage other administrative duties related to the recruitment process.

PROCESSING ACTIVITY

Hiring and preparation of employment contracts

LEGAL BASIS

Legitimate interest

DESCRIPTION

PROCESSING ACTIVITY

Candidate pool

LEGAL BASIS

Consent

DESCRIPTION

PROCESSING ACTIVITY

Information and facility management

LEGAL BASIS

Legitimate interest

DESCRIPTION

PROCESSING ACTIVITY

Information security

LEGAL BASIS

Legitimate interest

DESCRIPTION

Personal Data	Examples
Contact details	Name, postal address, phone number, e-mail address
Authentication data	Log-in and password and other such information used in connection with the proper authentication
Competences	Job application, CV, education background, examinations taken, skills profiles and other relevant qualification or certificate attached
Evaluation, tests and checks	Aptitude and personality tests, health checks and security clearances, where applicable
Preferences	Preferred country/countries and/or sites of employment, willingness to relocate, desired salary
References	References can be retrieved from previous employers. These contacts are provided by the applicant. In such case, the job applicant is responsible to obtain consent form the third party.
Technical data	Log data and IP address
Communications	Communication data during recruitment process, including emails, voice mails, video recordings
Other	Photograph when provided by the applicant or if applicant gives a consent to take a picture in connection to an interview and video interview recordings when applicable

Personal Data

Contact details

Examples

Name, postal address, phone number, e-mail address

Personal Data

Authentication data

Examples

Log-in and password and other such information used in connection with the proper authentication

Personal Data

Competences

Examples

Job application, CV, education background, examinations taken, skills profiles and other relevant qualification or certificate attached

Personal Data

Evaluation, tests and checks

Examples

Aptitude and personality tests, health checks and security clearances, where applicable

Personal Data

Preferences

Examples

Preferred country/countries and/or sites of employment, willingness to relocate, desired salary

Personal Data

References

Examples

References can be retrieved from previous employers. These contacts are provided by the applicant. In such case, the job applicant is responsible to obtain consent form the third party.

Personal Data

Technical data

Examples

Log data and IP address

Personal Data

Communications

Examples

Communication data during recruitment process, including emails, voice mails, video recordings

Personal Data

Other

Examples

Photograph when provided by the applicant or if applicant gives a consent to take a picture in connection to an interview and video interview recordings when applicable