This privacy notice is intended for you who are applying for an employment with CareDx AB, company registration number 556550-7257 (the “Company“). The Company respects your integrity and ensures that your personal data is treated with the confidentiality and respect that the situation requires.
Below you will find information about how we treat your personal data in accordance with applicable data protection laws, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
When you are applying for an employment with the Company, the Company is the controller for the personal data that the Company is processing about you regarding your application.
If you have questions regarding how we process your personal data, please contact Anna Hedlund at ahedlund@caredx.com.
The Company has not designated an external data protection officer (DPO), but we do have a CareDx Privacy Officer that can be reached at privacy@caredx.com.
We collect and process all of the personal data you provide us with when you apply for an employment opportunity with the Company. Other sources we collect personal data from are listed below under “From where do we collect your personal information?”
Personal data we process may include:
In addition to collecting information directly from you, we may collect information about you via:
We process your personal data for the following purposes:
Purpose | Legal basis |
---|---|
For the purpose of evaluating your possibilities of being employed by the Company and, if applicable, for the purpose of offering you an employment and entering into an employment agreement with you. | The Company’s legitimate interest in recruiting new employees (legitimate interest). |
For the purpose of establishing, exercising or defending legal claims that could arise from a recruitment process. | The processing is necessary for the establishment, exercise or defense of legal claims that could arise (legitimate interest). |
Purpose | Legal basis |
---|
For the purpose of evaluating your possibilities of being employed by the Company and, if applicable, for the purpose of offering you an employment and entering into an employment agreement with you. The Company’s legitimate interest in recruiting new employees (legitimate interest). |
For the purpose of establishing, exercising or defending legal claims that could arise from a recruitment process. The processing is necessary for the establishment, exercise or defense of legal claims that could arise (legitimate interest). |
We store your personal data in order to evaluate your opportunities to be employed by the Company until the job position you have applied for is filled and for an additional 12-month period. If you have applied for a position without it being advertised, your application will be saved until we have assessed whether you could be eligible for an employment with the Company within a year.
In addition, we store your personal data to the extent necessary for the establishment, exercise or defense of legal claims that could arise.
The Company may also share your personal data with trusted third parties that the Company has entered into an agreement with to ensure that the Employee’s personal data is processed in accordance with this document, such as Affiliates, partners and pension providers.
“Affiliate” means any legal entity that directly or indirectly controls, is controlled by, or is under the same control as the Company, regardless of country of registration.
In addition to the explicitly stated below, we will only process your personal data within the EU / EEA.
The Company uses a cloud service provider with servers in the US. According to the Commissions adequacy decision the US does not provide an adequate level of protection. However, we have entered into the appropriate processing agreements, including where necessary Standard Contractual Clauses to facilite the transfer of your personal data to the United States and other jurisdictions.
The Company may share your personal data with Affiliates in the US and/or Australia. Neither the US nor Australia are deemed to ensure adequate levels of protection. However, the Company has entered into data transfer agreements with Affiliates in the US and Australia including standard contractual clauses adopted by the Commission.
You are not required to provide any personal data to the Company. However, it is necessary for you to provide the Company with your personal data in order for the Company to be able to evaluate your opportunities to be employed by the Company and, if applicable, to offer you an employment and to enter into an employment agreement with you.
1 | 1 |
---|---|
Right to access | You have the right to obtain information on what personal data we have about you and how we process this data. You also have the right to receive a copy of this information. |
Right to rectification and erasure of personal data | You have the right to have inaccurate personal data rectified and completed. In some cases, you may also have the right to have your personal data erased, for example if it is no longer necessary for the purpose for which it was collected. |
Right to objection and restriction of processing personal data | You have the right to object to the processing of your personal data in cases where we process the data with the legal basis that we have a legitimate interest. In addition, you also have the right to restrict the processing, e.g. if you find the personal data to be inaccurate. |
Right to data portability | In some cases, you have the right to obtain the personal data you have provided in a structured and machine-readable format. You may also have the right to transmit such data to another controller where technically feasible. |
1 | 1 |
---|
Right to access You have the right to obtain information on what personal data we have about you and how we process this data. You also have the right to receive a copy of this information. |
Right to rectification and erasure of personal data You have the right to have inaccurate personal data rectified and completed. In some cases, you may also have the right to have your personal data erased, for example if it is no longer necessary for the purpose for which it was collected. |
Right to objection and restriction of processing personal data You have the right to object to the processing of your personal data in cases where we process the data with the legal basis that we have a legitimate interest. In addition, you also have the right to restrict the processing, e.g. if you find the personal data to be inaccurate. |
Right to data portability In some cases, you have the right to obtain the personal data you have provided in a structured and machine-readable format. You may also have the right to transmit such data to another controller where technically feasible. |
Should you have any questions or remarks regarding the Company’s processing of your personal data, please contact Anna Hedlund (at ahedlund@caredx.com) or CareDx’s Privacy Officer at privacy@caredx.com.
Any Swedish employee also has a right to lodge a complaint regarding the Company’s processing of the Employee’s personal data with the Swedish Data Protection Authority, Box 8114, SE-104 20 Stockholm, Sweden.