Privacy Policy for Job Applicants

Below you can find the information that Hotel Hesselet A/S (“Hotel Hesselet”, “we”, “us”) is obliged to provide to you under Regulation (EU) 2016/679 (“GDPR” or “General Data Protection Regulation”) when we process personal data about you as an applicant or candidate for positions with us.

The data controller for the processing is:

Hotel Hesselet A/S

CVR no.: 43351729

Christianslundsvej 119

5800 Nyborg

In connection with the recruitment of employees, we process information about applicants and candidates in order to assess who, based on an overall consideration, will be the best suited for the relevant position.

3.1 Categories of personal data

Name

Email address

Telephone number

Address

Information about educational background, including diplomas

Information on special skills, including any certifications

Information about current and previous employment

Information from the open part of your profile on social media or which is otherwise publicly available

Other information you may choose to give us in your application or CV, or otherwise during the recruitment process

Any information about criminal offenses (criminal record - only obtained for candidates where this is relevant in relation to the specific position)

Results of aptitude tests and personality tests

References to the extent that you give us consent to collect these

A criminal record is obtained from the police. In addition, information is obtained from the references you have given us permission to contact. Other information is obtained as a starting point from yourself, from publicly available sources, such as the open part of your profile on social media, or from advisers (headhunters) who assist us with the recruitment process.

3.2 Legal basis

The legal basis for processing information about criminal offenses (criminal record) is the Data Protection Regulation, Article 8, subsection 3, as the processing is necessary in order for us to pursue our legitimate interest in ensuring that candidates for positions at Hotel Hesselet are not convicted of conditions that must be considered incompatible with the job they have to contest in the event of employment.

The legal basis for the processing of other information is partly the data protection regulation's article 6, subsection 1, letter b, as the processing is necessary for the implementation of measures taken at your request prior to entering into a contract, and partly the data protection regulation, Article 6, subsection 1, letter f, as the processing is necessary for us to pursue our legitimate interest in assessing candidates for positions at Hotel Hesselet with a view to selecting the candidate who, after an overall assessment, is the best suited for the specific position.

However, the legal basis for processing information obtained from references is the data protection regulation's article 6, subsection 1, letter a.

3.3 Recipients of personal data

The information is left to our IT suppliers (data processors), who store the information for us and process it according to our instructions.

In addition, we may pass on the information to external advisers who assist us in connection with recruitment, for example recruitment companies or lawyers.

3.4 Storage

If you are employed, the information will be included in the personnel information we process about you. In connection with employment, you will receive information about how we process information about current and former employees, including how long we store the information.

If you are not employed, we will generally store the information for up to 12 months from the end of the month in which you have received a final rejection.

In special cases, however, we may ask for your consent to store the information for a longer period of time, and if you give consent, we will store the information in accordance with what you have consented to.

However, we may store information for a longer period of time if it is necessary to comply with a legal obligation we are or may be subject to, or if it is necessary to establish or defend a legal claim or assert a legal claim.

When we process personal data about you, you have the following rights:

Right to withdraw consent. If we process the information on the basis of your consent, you have the right to withdraw your consent at any time. You do this by contacting us using the contact information that appears in section 2 

Withdrawal of consent only applies to processing of personal data after the time you have withdrawn consent and thus does not affect the legality of previous processing.

Right to access. You have the right to state which information we process about you, as well as the terms of this processing. In this connection, you have the right to receive a copy of the information we process about you.

Right to rectification. You have the right to have information we process about you corrected if it is not correct, just as you have the right to have the information we process about you supplemented if it is not sufficient.

Right to erasure. In certain cases, you have the right to have personal data we process about you deleted (the right to be forgotten)

Right to restriction of processing. In certain cases, you have the right to have the processing of the personal data we process about you restricted.

Right to data portability. If we process information about you on the basis of your consent or for the purpose of fulfilling a contract, you have the right to receive the personal data we process about you in a structured, commonly used and machine-readable format

Right to object to processing. If we process personal data about you on the basis of the data protection regulation, Article 6, subsection 1, letter f, you have the right to object to the processing for reasons relating to your particular situation

You can exercise your rights by contacting us – our contact details appear in section 2 above. Please note that certain conditions and limitations apply to your rights. We are therefore not necessarily obliged to comply with your requests.

However, you always have the right to complain to a supervisory authority – in Denmark it is the Data Protection Authority. You can read more about what options you have to complain to the Data Protection Authority on the Data Protection Authority's website.

If you wish to complain about our processing of personal data, we would like to hear from you. Our contact details can be found under section 2 above.

You also have the right to lodge a complaint with the Data Protection Authority, Carl Jacobsens Vej 35, 2500 Valby. This can be done via e-mail dt@datatilsynet.dk or on the Datatilsynet's website datatilsynet.dk.

If you wish to complain about our processing of personal data, we would like to hear from you. Our contact details can be found under section 2 above.

Hotel Hesselet can continuously change this personal data policy if necessary to provide a fair description of our processing of personal data.

In the event that there are significant changes in our processing of personal data about you that we already hold, you will be notified directly of the update (e.g. via e-mail).

This privacy policy was last updated in June 2024.