Cognite Recruitment Privacy Notice
The protection of your personal data is important to us. We take confidentiality and security of your personal data seriously and will ensure that your information is processed according to the General Data Protection Regulation (“GDPR”). This recruitment privacy notice applies to all Cognite entities and prospective candidates.
Please read this recruitment privacy notice carefully, it provides important information about how we use your personal data and your legal rights under the GDPR.
Our Purpose
We may process your personal data as part of our recruitment process. This includes, contacting you as potential candidate or part of an application, a referral, sourcing through social media (eg. LinkedIn) or notifying you of an existing or future opportunity. We will also process your personal data as part of a recruitment selection process. In such instances we will verify your identity, academic and professional qualifications, skills, track-record and competencies for the role and right to work in a particular jurisdiction. In some circumstances we will use external third parties as part of our recruitment process (eg. recruitment agencies). The data collected and processed is exactly the same in both cases.
For unsuccessful candidates, we will retain your personal data for 24 months so that we may consider you for other relevant positions at Cognite. You have the right to object to this at any time; see “Our legal basis for processing” below.
We may collect the following information from you:
- Personal information: legal full name, proof of identity, address, email address, and telephone number.
- Information you will provide us in order to be considered for a role: your curriculum vitae (CV), education, employment history and other relevant experience, your right to work in the relevant jurisdiction and salary where applicable.
- At the point of offer, every candidate will go through pre-employment verifications according to the region and country they are to join.
Our legal basis for processing
Our legal basis for recruitment and the associated processing, including the retention of unsuccessful candidates’ data for consideration in future opportunities, is legitimate interest.
You have the right to object to this processing at any time. If you do not wish for us to retain your data for consideration in future opportunities, please contact privacy@cognite.com and we will delete your data, unless we have an overriding legitimate ground to continue processing it or need to retain it to establish, exercise, or defend legal claims.
Third party systems
In order to provide you with a better user experience, we may share your data with our sub-processors, these include: Greenhouse, HiBob, and Netsuite.
The data that we collect from you and process using our sub-processors may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for Cognite or for one of our suppliers. Such staff may be engaged in our recruitment process, or processing necessary for your compensation and payment and/or support services provider. We may also collect publicly available information about you from LinkedIn and telephone directory services where applicable in order to contact you about an open opportunity.
In all instances we have appropriate control mechanisms in place to safeguard your personal data, including: Data Processor Agreements, Standard Contractual Clauses (SCC), and transfer impact assessments (TIA).
Our Sub Processors Include:
- Predictive Index (Westwood, Massachusetts, USA): Behavioral and cognitive assessment platform
- CoderPad (California, USA): Coding ability tests
- Greenhouse (New York, USA): Applicant Tracking System
- HiBob (New York, USA): HR data such as compensation, holidays, sick leave, org info, etc.
- Netsuite (Austin, TX, USA): HR & salary data for when we pay salaries
- Certn (Victoria, British Columbia, Canada): Pre-employment check vendor for international background checks
- RefApp (Sweden): Pre-employment check vendor for international reference checks
- SpringVerify (Bengaluru, India): Pre-employment check vendor for recruitment process in India
Retention
We only store your personal data for as long as is necessary for the purposes described above.
For unsuccessful candidates, we retain your personal data for 24 months in order to consider you for future opportunities at Cognite, based on our legitimate interest in building a qualified talent pipeline. You may object to this retention at any time by contacting privacy@cognite.com, and we will delete your data unless we have a legal basis to continue.
You may be required to take tests as part of the recruitment process. We store test results for 12 months; if you would like us to delete this data sooner, please contact privacy@cognite.com.
Your rights under the GDPR
You have the right to request additional information from us about how we process your personal information. You may request for us to correct your data if you locate any errors, access all the personal data we have stored about you, and delete your personal data. We will delete your personal data if we no longer have a legal and legitimate processing purpose.
Further, you have the right to restrict our processing, object to our processing, and to export personal data elsewhere.
To exercise your rights, please contact us at privacy@cognite.com. We will respond to your inquiry as soon as possible, and at the latest within 30 days.
If you wish to exercise your rights, we will require that you confirm your identity by providing additional information, such as a copy of your driver’s license or passport.
Complaint
If you believe that our collection, storage and use of personal data does not comply with our privacy notice or does not comply with privacy law, you have the right to complain to your local data protection authority. For complaints in Norway, this is the Norwegian Data Protection Authority: https://www.datatilsynet.no/