Privacy Notice
Telenor values your privacy and protection of your personal data. Therefore, it is important to us that you understand how we collect and process your personal data. This privacy notice concerns the processing of personal data of candidates and others involved in the recruitment process that takes place in connection with Telenor’s recruitment of new resources. At Telenor, we manage our recruitment process through our career site and with the help of our recruitment system.
The data controller
Telenor Sverige AB is the controller of the recruitment process and is responsible for ensuring that your personal data is processed in accordance with applicable laws and regulations. The controller might use third parties to support the recruitment, and they will either act as a data processor or a separate controller.
If you have any questions regarding the processing of your personal data or the exercise of your rights, you are always welcome to contact the data controller through the contact details listed in the job advertisement or through your recruitment officer.
What personal data do we process?
Candidates:
- Contact information – such as your name, email address, phone number, and address.
- Data from interviews, assessments, and other information from the recruitment process – such as notes from interviews with you, completed assessments and tests, and salary expectations.
- Information about your background – such as your CV, cover letter and any notes, work experience, references, recommendations, and educational background, data relating to background checks.
- Communication data – We will collect and store your communication with us, including the information you have provided in the communication. This may include the content of emails, messages through the recruitment system, the information you add to your account with us, and surveys.
- System-generated data - such as audit logs (records of actions taken in the recruitment system). These logs may include personal data such as user identifiers, timestamps, and details of the changes made.
- Publicly available information about you – Refers to the information we collect about you from publicly available sources related to your professional experience, such as LinkedIn or your current employer’s website.
- Information from references – This includes information we receive from the individuals you have listed as your references.
Special categories of personal data
As part of our recruitment process, we do not seek candidates to provide special categories of personal data. These include, but are not limited to, information relating to health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or data concerning a person’s sex life or sexual orientation. We strongly discourage candidates from submitting such data in their applications or any related communications. If such data is inadvertently provided, we will not take it into account during the recruitment process or evaluations.
References:
- Contact information – Your name, email address, and phone number. If provided by the candidate, there is also professional information about the reference.
- Content from the reference – Information about the candidate and the reference provided by the reference.
Where do we get your data from?
References:
- From the candidate. If a candidate lists a reference, we will collect contact details from the candidate in order to contact the reference.
Candidates:
- Directly from you. Most of the information we process about you is received directly from you, for example, when you apply for a position with us.
- From publicly available sources. We may collect personal data about you from publicly available sources, such as LinkedIn or your current employer’s website.
- From our references and service providers. We may receive information about you from our employees, partners (such as providers of recruitment services) when they believe your profile may be of interest for our current or future job openings. We may also receive information about you such as the results of background checks and assessments and tests from our service providers as part of the recruitment process.
- From your references. If you provide us with references, we may collect information about you from them.
- Data we create ourselves or in collaboration with you. Information about your application and profile is usually created by us – or by us in collaboration with you – during the recruitment process. This may include, for example, notes from interviews with you, assessments, and tests performed.
Why do we process your personal data?
We will process your personal data during the recruitment process to recruit competent resources and to ensure a fair and professional recruitment process.
This includes the following:
- Review and evaluation of applications submitted to us.
- Communication with you regarding your application.
- Provide you with updates about our job openings.
- Contact references to ask them to provide information about a candidate and evaluate the information they provide.
- Process personal data collected during the recruitment process in connection with legal claims.
- Contact you to ask to participate in surveys.
- Anonymize/aggregate data to enable analysis of the recruitment process.
As part of our recruitment process, we maintain audit logs within our recruitment system to ensure a transparent and traceable history of the actions taken. Audit logs record actions performed by users in the system, such as updates to candidate profiles and account settings.
Recipients of your information
Where your personal data is disclosed to third parties processing data on our behalf, we will ensure that those third parties abide by the practices and policies relating to the collection, use and retention of personal data of the company you apply.
We might during the recruitment share your personal data with the following categories of third parties:
Our service providers. We share your personal data with our suppliers who provide services and functionality in our recruitment process. This includes, for example, service providers in the field of recruitment such as test and background check providers and the provider of recruitment systems.
Companies within our group. We share your personal data with other companies in our corporate group, for example Telenor Shared Services, when they provide services and functionality for our recruitment process, such as access to specific systems and software and recruitment support.
Authorities and other public bodies – when required. We share your personal data with authorities and other public bodies when we are legally obligated to do so.
Parties involved in legal proceedings. If necessary to protect or defend our rights, we share your personal data with public authorities or other parties involved in a potential or ongoing legal case. This may occur, for example, in connection with allegations of discrimination.
Legal basis for the processing
In order to process your personal data, we must have a legal basis in accordance with the General Data Protection Regulation (GDPR).
The legal basis for processing your personal data for the above-mentioned recruitment purposes is that the processing is necessary for the purposes of the legitimate interests of Telenor. Telenor has an interest in conducting effective, professional and fair recruitment of new employees.
There may be specific circumstances where processing is carried out based on your consent:
Special categories of personal data provided by the candidate: As part of our recruitment process, we do not seek candidates to provide special categories of personal data. We strongly discourage candidates from submitting such data in their applications or any related communications. If such data is inadvertently provided, we will not take it into account during the recruitment process or evaluations.
To the extent feasible, we will attempt to delete such data upon discovery. If deletion is not possible due to technical or operational constraints, our processing will be strictly limited to secure storage until the retention period for the application expires, after which the data will be permanently deleted.
For any unavoidable processing of such data, we will rely on the candidate’s explicit consent.
For consideration of candidates for future positions: We would like to consider candidates for future job opportunities. Therefore, we ask candidates at the start of the recruitment process if they want to be considered for future jobs. If you provide consent, we may contact you for new job opportunities which may be relevant for you.
You can withdraw your consent at any time by logging into your profile in the application system and unchecking the checkbox where you have initially provided your consent or by contacting Telenor here: Data och integritet - Telenor Sweden
Transfer of your personal data to third countries
We always strive to process your personal data within the EU/EEA area. Some of our service providers process your personal data outside the EU/EEA. We also use suppliers whose parent company or whose subcontractor’s parent company is based outside the EU/EEA. In these cases, we have considered the risk that personal data may be transferred to countries outside the EU/EEA, for example, due to a request from authorities.
In cases where another recipient of your personal data (as described in the section above relating to recipients of your information) is located outside the EU/EEA, this also means that your personal data is transferred outside the EU/EEA. In cases where your personal data is transferred to third countries, i.e., countries outside the EU/EEA, Telenor ensures a lawful basis for the transfer in accordance with the applicable data protection legislation at all times. Transfers may, for example, take place on the basis of:
- A decision by the European Commission stating that the country outside the EU/EEA to which your personal data is transferred ensures an adequate level of protection (European Commission adequacy decisions).
- Conclusion of the European Commission’s Standard Contractual Clauses (SCCs) with the recipient of the personal data outside the EU/EEA.
How long do we retain personal data?
We retain your personal data for as long as necessary to fulfill the purposes described above.
Candidates
We will retain your personal data for 1 years from the date of your application.
For selected candidates, we may retain your personal data as part of your personnel file during your employment.
If you consent to be considered for future job opportunities, we may contact you while we retain your personal data.
References
We retain personal data regarding reference checks for the same period as we keep the candidate’s data in our system.
Audit Logs
Audit logs are retained for 30 days.
What rights do you have, and how can you exercise them?
This section provides information about the rights you have when we process your personal data. As described below, some of the rights are only relevant when we process your personal data on a specific legal basis.
If you wish to exercise any of the rights listed here, you can:
Right of access
You have the right at any time to access the information we process about you.
Right to erasure
In special cases, you have the right to have information about you deleted before our general deletion period occurs.
Right to object
You have the right, under certain circumstances, to object to the processing of your personal data where the legal basis is legitimate interests. If you object, we may no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Right to restriction of processing
In certain cases, you have the right to have the processing of your personal data restricted.
Right to rectification
You have the right to have incorrect information about yourself corrected. For example, if you access your personal data and find that the information is objectively wrong, incorrect, or inaccurate.
Right to withdraw consent
When we process your personal data based on your consent, you have the right to withdraw that consent at any time. In such cases, we will cease processing your data for the purposes for which you have withdrawn your consent. However, this does not affect the lawfulness of the processing based on your consent before it was withdrawn.
If you believe that your personal data is not being processed in accordance with applicable data protection regulations, you can file a complaint with the Swedish Authority for Privacy Protection (IMY). You can find more information on how to file a complaint here.
Updates to this privacy notice
Publication date: 2025-09-01
We update this privacy notice when necessary, for example, if we begin processing your personal data in a new way, if we want to make the information even clearer for you, or if it is required to comply with applicable data protection laws.
