Privacy Policy - Xcruiter

Our website includes a privacy centre that affects how we process your personal data and cookies. Through the privacy centre, you can control how you wish us to handle your personal information.

Who is the data controller?

Xcruiter, represented by its Managing Director Christer Sandorf Engh, is responsible for the processing of information that can be linked to you as a private individual.

What is the purpose?

Our goal is to be a trusted provider of candidates to relevant companies in Europe. We use the information to provide you, as a customer or candidate, with the best-tailored solution we can offer.

We customise our work to streamline and improve our candidate search. During the candidate search, we collect information similar to what a potential employer would gather from a job seeker.

The information collected about you is used for technical, analytical, statutory, and marketing and customer-related purposes:

To fulfil agreements with customers and our users, including delivering requested services and managing the customer or user relationship.
To improve the functionality, user experience and content of our website, we collect and analyse data about your behaviour and that of other users.
To provide you with relevant offers and personalised content in other channels and advertising networks such as Facebook and Google, we use cookies issued by third parties.
To contact you in connection with offers or marketing of our products or services.

What is the legal basis?

This privacy policy is based on Norwegian law, where Xcruiter is established. Privacy is a fundamental principle in Norwegian law, enshrined in both the Constitution and specific legislation. The rules are essentially about your right to privacy and the right to control your personal data. Personal data is any information that can be linked to an individual — such as a person’s name, home address, phone number, email address and IP address. It can also include information about your behavioural patterns, such as which advertisements you have viewed or searched for.

What personal data is processed?

For a full overview of all data and cookies we process, see “Is information shared with third parties?” Below are examples of other personal data we process:

Where does the data come from?

When you are a customer or user with us, we will collect personal data about you primarily from you directly, to the extent necessary to fulfil our agreement with you and to comply with applicable regulations.

The main purpose of our collection, registration and processing of personal data is to manage, administer and follow up on you as a customer, user and stakeholder in the best possible way.

When you use our website — including when you enter information in our browser or applications — we will process personal data about you. When you visit our website, we also register information about you and your activity in a cookie, and in some cases your IP address. A cookie is a small text file stored in your browser’s memory. We also collect and store information from any order and contact forms you complete yourself.

We collect and use information you provide when you apply for a position with us or submit a general enquiry, meaning information from CV profile registration and updates to that profile via “My Page.” If you apply for a position or register your profile through the “Apply with LinkedIn” or “Apply with Jobreg” function, the system will retrieve available information from your profile in the service you authenticate with, and this information will be stored on your profile. The same applies if you contact us via our website, LinkedIn, our application portal, or any other means.

Is it voluntary to provide information?

It is voluntary to provide personal data to us, and you are under no obligation to do so. However, in order for us to manage you as a customer or user of our services and keep you informed about our services and products, we need to collect and store certain information about you. The first time you visit our website, you will be given the opportunity to accept or reject the use of non-essential cookies. If you use our order or contact forms, we store the information until the matter is resolved. If you become a customer, we store data for as long as required by applicable sales legislation.

Is information shared with third parties?

To provide you with a better user experience on our website, and to deliver relevant marketing in other channels such as Facebook and Google, we use cookies issued by third parties.

No mobile information will be shared with third parties or affiliates for marketing or advertising purposes. All of the above categories exclude data and consent that arises from a sender choosing to receive text messages — this information will not be shared with any third parties.

Below you will find an overview of all third-party cookies used on this website, what data they collect and their purpose.

Google Analytics

Anonymous: ad impressions, analytics, browser information, cookie data, date/time, demographic data, hardware/software type, internet service provider, interaction data, page views.

Non-anonymous: IP addresses, unique device identifiers, search history, location-based data.

Purpose: These cookies help us understand how visitors interact with our website by providing information about the areas visited, time spent and any issues encountered, such as error messages. This helps us improve the performance of our website. For more information, visit Google Analytics.

Facebook for Developers

Anonymous: ad impressions, analytics, browser information, cookies, date/time, demographic data, hardware/software type, internet service provider, interaction data, page views.

Non-anonymous: name, address, phone number, email, login, unique device identifiers.

Purpose: These cookies are used to deliver relevant advertisements, understand how you engage with our digital advertising campaigns and understand how you move between our website and Facebook. They allow us to understand and evaluate clicks on our ads so we can improve campaigns and our website. Read more about Facebook’s policies here.

How is data deleted and archived?

As a registered individual in the system, you have the right to request access, correction and deletion as described in Chapter III of the GDPR. The request shall be answered free of charge and within 30 days at the latest.

If you wish to withdraw your consent, you can do so by deleting your own profile.

As a candidate, you can delete your own profile at any time from “Your Profile” in the system, or you can contact Xcruiter for assistance. From your profile, you can also edit the information you have entered in the system.

If you wish to access information Xcruiter holds about you, or if you have questions or comments about our processing of personal data, you can contact your account manager or email us at post@xcruiter.no.

What rights does the registered individual have, and which country’s legislation applies?

You have the right to request access to, correction of, or deletion of the personal data we process about you. You also have the right to request restricted processing, object to processing, and request data portability.

You can read more about your rights on the Norwegian Data Protection Authority’s website: www.datatilsynet.no.

Questions or requests regarding access to registered information or the exercise of other rights should be directed to our contact person below.

To exercise your rights, please send an email to our contact person. We may ask you to confirm your identity or provide additional information before granting access. This is to ensure that we only provide access to your personal data to you, and not to someone claiming to be you.

You may withdraw any consents to the processing of your personal data at any time. The easiest way to do this is to contact our contact person (see contact details below).

We will respond to your enquiry as quickly as possible, and no later than 30 days.

If you believe we are processing personal data in breach of applicable regulations, you may also file a complaint with the Norwegian Data Protection Authority at post@datatilsynet.no.

You can find information on how to contact the Norwegian Data Protection Authority at: www.datatilsynet.no.

How is data secured?

In our processing of your personal data, we place great emphasis on security and control in relation to the registration and handling of information.

We work systematically to maintain technical and organisational security measures to protect personal data against unauthorised access and use, as well as against destruction or deletion. We continuously assess the risk of failures and deviations in our security systems and procedures.

Data is stored on secure servers that meet standard IT security requirements. Access to personal data is regulated and restricted to our employees and partners who have a legitimate need. Those with access have signed confidentiality agreements.

When you communicate with us via our website, all communication is based on SSL. Secure Sockets Layer (SSL) is a cryptographic protocol that ensures all communication via the website is secure. Any information you provide will be stored on secure servers behind a firewall that meets our security requirements.

Introduction