The protection of your personal data is important to us. We take confidentiality and security of your personal data seriously and will ensure that your information is processed according to the General Data Protection Regulation (“GDPR”). This recruitment privacy notice applies to all Cognite entities and prospective candidates.
Please read this recruitment privacy notice carefully, it provides important information about how we use your personal data and your legal rights under the GDPR.
We may process your personal data as part of our recruitment process. This includes, contacting you as potential candidate or part of an application, a referral, sourcing through social media (eg. LinkedIn) or notifying you of an existing or future opportunity. We will also process your personal data as part of a recruitment selection process. In such instances we will verify your identity, academic and professional qualifications, skills, track-record and competencies for the role and right to work in a particular jurisdiction. In some circumstances we will use external third parties as part of our recruitment process (eg. recruitment agencies). The data collected and processed is exactly the same in both cases.
For unsuccessful candidates, we may retain your personal data for 24 months in order to consider you for future opportunities at Cognite.
We will collect the following information from you:
Personal information: name, date of birth, proof of identity address, email address, and telephone number.
Information you will provide us in order to be considered for a role: your curriculum vitae (CV), education, employment history and other relevant experience, your right to work in the relevant jurisdiction and salary where applicable.
Our legal basis for processing
Our legal basis for recruitment and the associated processing is legitimate interest.
We will seek your consent if we believe your profile could be of interest to us in a future recruitment process. You can withdraw your consent at anytime if you do not wish for us to keep your data on file, please contact: email@example.com
Third party systems
In order to provide you with a better user experience, we may share your data with our sub-processors, these include: Lever, BambooHR, and Netsuite.
The data that we collect from you and process using our sub-processors may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for Cognite or for one of our suppliers. Such staff may be engaged in our recruitment process, or processing necessary for your compensation and payment and/or support services provider. We may also collect publicly available information about you from Linkedin and telephone directory service where applicable in order to contact you about an open opportunity.
In all instances we have appropriate control mechanisms in place to safeguard your personal data, including: Data Processor Agreements and Standard Contractual Clauses (SCC) and transfer impact assessments (TIA).
Our Sub Processors Include:
|Sub Processor Name||Purpose||Location|
|Aon assessment||Psychometric testing (personality tests, ability tests, skill tests, and cognitive tests)||Oslo, Norway|
|Hackerrank||Coding skill tests||
|Lever||Applicant tracking system||
San Francisco, US
|Bamboo HR||HR Data such as compensation, holidays, sick-leave, org, info etc||
|Netsuite||HR & salary data for when we pay salaries||
We only store your personal data for as long as is necessary for the purposes described above.
For unsuccessful candidates, we may retain your personal data for 24 months in order to consider your future opportunities at Cognite. Your consent can be withdrawn at any time by contacting firstname.lastname@example.org
You may be required to take tests as part of the recruitment process. We store the test results for 12 months, but if you would like us to delete the data prior to 12 months, please contact email@example.com
Your rights under the GDPR
You have the right to request additional information from us about how we process your personal information. You may request for us to correct your data if you locate any errors, access all the personal data we have stored about you, and delete your personal data. We will delete your personal data if we no longer have a legal and legitimate processing purpose.
Further, you have the right to restrict our processing, object to our processing and to export personal data elsewhere.
To exercise your rights, please contact us at firstname.lastname@example.org. We will respond to your inquiry as soon as possible, and at the latest within 30 days.
If you wish to exercise your rights, we will require that you confirm your identity by providing additional information, such as a copy of your driver’s license or passport.
If you believe that our collection, storage and use of personal data does not comply with our privacy notice or does not comply with privacy law, you may complain to the local data protection authority here: https://www.datatilsynet.no/