Privacy Policy

Controller. Cresto Group AB (org. nr 556572-1163, Helsingborg, Sweden) is responsible for personal data you submit when applying for a position through this website.

What we process. Data you give us directly in the application form:

• · Name, e-mail address and, if provided, phone number and LinkedIn profile
• · Your CV and cover letter or message
• · Your answers to questions in the form, such as whether you live within commuting distance of the office
• · How you heard about the role (optional) and the referring website or campaign link, if any
• · Notes, ratings and evaluations made by our recruiting staff, and the status of your application
• · Copies of messages we send you about your application

Please do not include sensitive information (such as health, religion or ethnic origin) or national identity numbers in your CV or cover letter.

Why and legal basis. We use the data to assess your application, communicate with you and manage the recruitment. The legal basis is our legitimate interest in recruiting suitable employees (GDPR Article 6(1)(f)). We do not ask for your consent to process an application; the checkbox on the form only confirms that you have read this information.

Decisions. All assessments and hiring decisions are made by people. We do not use automated decision-making or profiling to reject or select candidates.

Who has access. Only authorised staff involved in the recruitment, such as the hiring manager, Group management and HR. Our website and database hosting providers process the data on our behalf as processors. We do not sell your data or share it with other employers.

Transfers outside the EU/EEA. If a service provider processes data outside the EU/EEA, this happens only with an appropriate safeguard in place, such as an EU adequacy decision or the EU Standard Contractual Clauses.

How long we keep it. We keep your application only as long as needed for the recruitment and, after it has ended, only as long as necessary to establish, exercise or defend legal claims (for example under Swedish discrimination law). It is then deleted. Your application is not kept for future recruitment unless you have separately agreed to that.

Your rights. You can request access to your data, correction, deletion or restriction, and you can object to the processing. Contact us at info@crestogroup.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se.