Privacy Policy
At Grimaldi Access, we prioritize honesty and transparency in our collaboration with clients and partners. Openness regarding how we handle personal data is equally important to us. This privacy policy applies to you as a candidate in recruitment contexts when you apply for a specific position or register your interest for future opportunities. This policy is effective from August 20, 2024, and may be subject to adjustments. If we make any significant changes to how we process your personal data, we will inform you via the email you have registered and provide you with an opportunity to respond.
1. Data controller
Grimaldi Access (organization number: 556534-0840) is the Data Controller. The personal data we collect and process will only be accessible to recruitment consultants at Grimaldi Access. By applying for a recruitment assignment, you will be part of the recruitment process, and our client may access your personal data. The client will then become the Data Controller for the handling of your personal data and will follow their own processes. If you register a spontaneous application to be part of our network, your personal data will not be shared without your consent. If you are asked to provide references, it is your responsibility as a candidate to inform your referees that their contact information will be shared and that Grimaldi Access will reach ou
2. Data Storage and Handling
Your personal data and application documents are processed and stored with great respect for your privacy. We retain them for as long as necessary for recruitment purposes or until you request to be removed from our candidate system. After five years in our candidate database from your registration, you will receive an email from us inviting you to extend your presence in our network. If you choose to decline, your profile will be deleted from our database. You can update your profile and documents at any time by following the same procedure as for submitting a new application. Please contact us at if you wish for your personal data to be deleted.
3. What Personal Data Do We Collect?
Name
Personal identification number
Email address
Phone number
CV and Cover Letter
LinkedIn profile if you applied through this channel
Photo if you chose to attach it
Other application documents you share with Grimaldi Access, such as uploaded grades and certificates.
We ask that you only share relevant information that is valuable for the recruitment process.
As a candidate, you may be required to complete personality and/or competency tests provided by an external vendor. If you are a final candidate in a process, background checks may occur due to certain clients of Grimaldi Access having high standards for individuals. Background checks are conducted by an external provider, and Grimaldi Access will only access the results in the provider’s system without processing your personal data. You will also have the opportunity to review the results in the provider’s system after the background check is completed.
If testing or a background check is required, you will need to provide explicit consent before it occurs.
4. Legal foundation
For certain positions, Grimaldi Access may ask you to provide a criminal record extract. You will be responsible for obtaining this extract from the relevant authority. It is always your decision whether to request a criminal record extract. The information contained in the extract will be handled with the utmost confidentiality and will never be processed by Grimaldi Access. However, Grimaldi Access may discuss the results verbally with the relevant client to provide the service.
We aim to avoid processing personal identification numbers whenever possible. In some cases, however, it is necessary for secure identification, such as during background checks.
5. How we storge your personal data
Grimaldi Access assures that appropriate technical and organizational security measures are in place and maintained to protect personal data from accidental, unlawful, or unauthorized access, use, disclosure, alteration, destruction, or loss.
It is our obligation to process only accurate, relevant, and necessary personal data considering our legitimate purposes, and you have the right to verify that this is the case.