Privacy Notice for Experts (EU/UK GDPR)

Who we are (Controller)

We are SALAR International AB (“we”, “us”), the data controller for your personal data used in our expert/talent processes. Contact: info@salarinternational.se • Hornsgatan 20, 118 20 Stockholm

Applicable law and jurisdiction

This notice is intended to meet the EU General Data Protection Regulation (Regulation (EU) 2016/679, “EU GDPR”) and, for the UK, the UK GDPR and UK Data Protection Act 2018. If you are outside the EU/UK, we apply the same protections and your local privacy laws may also give you rights.

What this covers

How we use your data when you create a profile with us, share your CV, or when we add your professional details to our talent pool to match you with opportunities.

The data we use

• Contact & IDs: name, email, phone, location/country, nationality (if relevant to bids).
• Professional details: CV, education, languages, skills, certifications, roles, project history, references.
• Process info: suitability notes, availability, messages, interview notes, basic login data (if you access our portal). No personal passwords are stored.
• Sources: you; referrals; public sources (LinkedIn, company webpage salarinternational.se).

Why we use it & our legal bases (GDPR Art. 6)

• Applications for a specific role or engagement: to assess and manage your application and communicate with you — Contract (EU GDPR Art. 6(1)(b) / UK GDPR).
• Talent pool / future roles (no active application): to maintain your profile and contact you about suitable roles — Legitimate Interests (Art. 6(1)(f)). We’ve balanced this interest with your rights and provide easy opt-out at any time.
• Legal/record-keeping (e.g., due diligence, taxation if engaged): Legal Obligation (Art. 6(1)(c)).

Who helps us (processors) and where data is stored

We use Opptify AB (Sweden) as our data processor to host and manage expert profiles. Opptify stores primary production data in the EU/EEA and uses carefully selected sub-processors listed at: https://opptify.com/legal/sub-processors.

AI features
Some search/interpretation features may send short text snippets to OpenAI (USA) via Opptify under EU/UK Standard Contractual Clauses. Data is not used to train models and is processed transiently (with limited vendor anti-abuse retention).

International transfers
If your data is transferred outside the EU/UK, we use Standard Contractual Clauses (and any UK addendum) and other safeguards required by law. You can contact us for details.

How long we keep your data

• Active application: keep until the process ends + 24 months (to handle queries/defences and potential re-matches).
• Talent pool (no activity): keep for 24 months from your last interaction, then delete or ask you to renew your interest.
• If engaged/contracted: keep relevant records as required by law (typically up to 7 years for finance/tax).
• Email/communications metadata: up to 24 months. We delete earlier on valid request unless we must keep data by law.

Your rights
You can access, correct, delete, restrict, object (especially to our legitimate interests use), and port your data. If we rely on consent, you can withdraw it at any time. To exercise your rights, contact info@salarinternational.se. You can also lodge a complaint with your local data protection authority (in Sweden, IMY).

Is providing data required?
You don’t have to share data, but without enough information we may be unable to consider you for opportunities.

If we got your data from someone else (Article 14)
If not from you, we may have received it from referrer/public source. We’ll contact you promptly with this notice, and you can opt out or ask us to delete your profile.

Automated decisions
We do not make decisions with legal or similarly significant effects solely by automated means.

How to contact us
SALAR International AB, info@salarinternational.se, Hornsgatan 20, 118 20 Stockholm

Last updated: 2025-11-12