Last update 12.3.2020




This document describes how Scanfil Sweden AB and its affiliates in Swedish and its staff process the personal data of job applicants applying to Scanfil. Scanfil acts as a controller to such personal data.

As a controller, we are responsible for the personal data of job applicants, and for the pro-cessing of such personal data. Protecting your privacy and your personal data is of utmost importance to Scanfil. We are committed to complying with the requirements of data protec-tion regulation applicable to us in the processing of your personal data. The means and pur-poses of processing the personal data of job applicants are described in more detail in this Privacy Notice.


Data Controllers

Scanfil Sweden AB
Skeppsbron 3
211 20 Malmö
Tel.: +46 40 10 26 40
Scanfil Åtvidaberg AB
597 80 Åtvidaberg
Tel.: +46 766 35 77 16
Scanfil Vellinge AB
Bronsyxegatan 6 B
213 65 Malmö
Tel.: +46 708 64 08 99

Contact persons

Eva Christensson
C/o Scanfil Sweden AB
Tel.: +46 708 64 08 99
Marika Aalto
C/o Scanfil Åtvidaberg AB
Tel.: +46 701 48 1354
Eva Christensson
C/o Scanfil Vellinge AB
Tel.: +46 708 64 08 99


The EU General Data Protection Regulation (EU) 2016/679 (“GDPR”) applies to all processing of job applicants’ personal data as a general law. Furthermore, certain provisions of the Swe-dish personal data in accordance with what is stipulated in the present document and other-wise in line with the terms of the Swedish Personal Data Act (GDPR) and any other applicable legislation.

Processing of personal data must always be based on a legal basis set forth in the GDPR.
Processing of job applicants’ data is based on the following legal bases:

  • Processing is necessary in order to take steps at the request of the data subject prior to entering into an employment contract
  • Legal obligation to which Scanfil is subject
  • Data subject’s consent under applicable legislation
  • Legitimate interest of Scanfil. A legitimate interest may be, for instance:
  • (i) Conducting credit checks in order to establish the reliability of the job applicant;
  • (ii) Ensuring and improving data security or the security of premises and data net-work; preventing and investigating suspected fraud or misuse; and protection of Scanfil’s property.

Personal data of job applicants is processed in particular for the following purposes:

  • (i) Recruiting; receiving and processing applications;
  • (ii) Conducting personal and aptitude assessments;
  • (iii) Maintaining a CV database;
  • (iv) Informing the candidates whether they were selected to the position or not, as well as other communications between the job applicant and Scanfil.


Scanfil may process the following personal data directly necessary for the processing pur-poses mentioned above. These necessary personal data can be categorised as follows:

Basic information, such as

  • Name of the applicant
  • Personal identity number
  • Contact details (such as address, telephone number and email address)

Information relating to suitability to the position, such as

  • Information on work experience, qualification data and information relating to education
  • Results of personal and aptitude assessment or other suitability assessment data.

Other information obtained from the job applicant, such as

  • Job application and possible appendices of the application

Other information accumulated during the recruitment, such as

  • Notes made by the interviewers
  • Communications between the job applicant and Scanfil

Data collected through technical monitoring, such as

  • Data collected from the job applicant’s use of Scanfil’s recruitment systems
  • Data relating to camera surveillance and other electronic surveillance recordings

In addition to the categories of personal data presented above, Scanfil may process special categories of personal data or personal data that is otherwise sensitive as follows:

  • Personal credit data in so far as legislation permits such processing in order to establish the employee’s reliability;
  • Drug test certificate or data included in it to the extent permitted in applicable legislation in order to establish the employee’s performance and ability to work;


Data relating to job applicants shall primarily be collected from the job applicant him/herself. In addition, data is collected also from other permitted sources, such as from data systems to which personal data of the applicant is recorded in connection with the job applicants use such data system.

In addition, Scanfil may collect data from other sources based on the job applicant’s con-sent, unless it collects personal credit data in order to establish the employee’s reliability, in which case consent is not required.


Your personal data will be used as the basis for automated decision-making. For each indi-vidual post, we use a requirement profile/requirement specification as a framework for the decisions made. Based on your answers to the select questions on the application form, your application may not be processed further if you do not meet the SHALL requirements in the requirement specification. SHALL requirements for each specific position are shown in the relevant job advert. In our recruitment process, automated decision-making is necessary for entering into, or performance of, a contract between you and Scanfil. Scanfil has implement suitable measures to safeguard your rights and freedoms and legitimate interests in the au-tomated decision-making. For example, the tool used by us in performing the initial qualifying of the applicants uses transparent decision-making based on the SHALL requirements deter-mined for each position. In addition, you have right to obtain human intervention on our part to express your point of view and to contest the initial qualification.

Our recruitment process makes use of one or more occupational psychological tests. Those candidates that are, on the basis of the first interview, suitable for the position, may be re-quired to participate to an occupational psychological test / personal and aptitude assess-ment. Such assessments are subject to your consent and are performed in accordance with the applicable compelling legislation. Your responses in the tests are compared with a prede-termined occupational psychological profile for the post. The occupational psychological profile is based on competences and other parameters derived from the requirement profile. The results of the occupational psychological tests form the basis for deciding whether you will progress further in the process or not. A person who is to be evaluated is always provid-ed with a copy of the statement given.


Scanfil may transfer job applicant’s personal data to third parties in the following manner in order to fulfil the processing purposes described in this Privacy Notice. When personal data are transferred to an entity which processes personal data on behalf of Scanfil (i.e. data pro-cessor) Scanfil has through contractual arrangements ensured that personal data is pro-cessed only in accordance with Scanfil’s written instructions and only for the purposes de-scribed in this document and that access to personal data is restricted to persons who need access to data based on their tasks.

  • Data processors: Scanfil may transfer personal data to processors in order for the processors to perform services and tasks assigned to them. Data processors’ tasks relate, for instance, to recruitment management, offering and managing of devices, data systems and software as well as offering other data processing services
  • Transfers and disclosures of personal data to Scanfil’s group companies

Some of the data processors used by Scanfil are located outside the EU or EEA area. Scan-fil has contractually ensured that these entities undertake to apply an appropriate level of da-ta protection in their processing practices, and thus the data transfers are subject to appro-priate safeguards. More information on cross border transfers of personal data and on the appropriate safeguards applied thereto from time to time is available from the contact person mentioned under Section 2 of this Privacy Notice.

Scanfil discloses personal data for instance to authorities and Scanfil’s service providers within the limits allowed or required in currently applicable legislation.


Scanfil retains the personal data of the job applicants in accordance with the applicable legis-lation only for as long as the retention of data is necessary for processing purposes speci-fied in this Privacy Notice. When Scanfil no longer needs personal data for the specified pur-poses, the data will be deleted from the data systems of Scanfil as well as from other files.

The general maximum retention period of personal data of job applicants is two year from the relevant recruitment decision, based on the limitation period for raising discrimination charge under the Gender Equality Act (LAS 1998).


The General Data Protection Regulation provides the data subject with several rights based on which the data subject can in many situation himself/herself decide on the processing of his/her personal data. The data subject may use the following rights with regard to Scanfil to the extent Scanfil acts as the controller to the personal data of the data subject in question.

  • Right of access: The data subject has the right to obtain a confirmation from the controller on whether the controller processes personal data concerning the data subject and the right to access such data. The data controller may ask the data subject to specify his/her access request, amongst others, with regard to the details of the data to be delivered.
  • Right to rectification: The data subject has the right to obtain from the controller the rectification of inaccurate personal data concerning him/her processed by the controller, or to have incomplete personal data processed by the controller to be completed.
  • Right to be forgotten: The data subject has the right to obtain from controller the erasure of personal data related to him/her and the controller has the obligation to erase such data in case there is no longer a legal ground for the processing of such data or, where the legal or contractual obligation binding the controller related to the storing of the personal data has ended or, where the data subject has withdrawn his/her consent to the processing of his/her personal data.
  • Restriction of processing: In certain cases, where so prescribed by law, the data subject may have the right to obtain from the controller restriction of processing of his/her personal data.
  • Right to data portability: The data subject may, subject to certain conditions prescribed by law, have the right to receive the personal data concerning him/her processed by the controller in a commonly used and machinereadable format, and the right to transmit those data to another controller without hindrance from the original controller.
  • Right to object to processing of his/her personal data: In certain cases, the data subject may have the right to object to processing of personal data concerning him or her. The right to object is applicable in such situations in particular where the processing of personal data is based on the controller’s legitimate interest. In such situations the controller has to follow the data subject’s request, unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
  • To the extent the processing of personal data has been based on the data subject’s consent, the data subject has, at any time, the right to withdraw his/her consent regarding the processing.

In certain cases the job applicant can access and rectify his/her personal data through electronic services provided by Scanfil. In other cases, the requests shall be directed to the contact person mentioned in section 2 of this document.

In addition, the data subject has the right to lodge a complaint with the supervisory authority on the processing of the personal data by the controller. The complaint shall be made to the competent supervisory authority, in Sweden to the Data Protection Agency, in accordance with its instructions. The website of the Data Protection Agency can be found here.


Scanfil may, from time to time, change this Privacy Notice. You can tell when changes have been made to the Privacy Policy by referring to the “Last Updated” legend at the top of this webpage / each page of this document. Scanfil encourages you to review this document reg-ularly for any changes.

© Copyright Scanfil 2018. All rights reserved.

Invest to the
future growth