Ascender AS (org. no. 914 087 406) offers executive recruitment and other recruitment services. In connection with such services, Ascender collects and processes personal data about data subjects. Ascender processes personal data about the following categories of data subjects:

• Potential candidates
• Candidates
• Customers, service providers, partners and their employees
• Others who contact Ascender or visit our website

This privacy statement describes how Ascender collects, processes and discloses your personal data and for what purpose, as well as what rights you have in this regard.

You can contact us by phone: 21 52 53 50

If you have any questions related to our privacy policy or to our processing of personal data, you can contact Per Svantesson by e-mail: per@ascender.no.

Ascender offers different services to clients and candidates and may therefore have different roles in relation to the processing of personal data in a recruitment process.

When Ascender is engaged by a customer to find potential candidates for a position, as well as to assist in the recruitment process, Ascender will act as data processor for the relevant customer. For such processing, the customer will be the controller, and Ascender's processing will be subject to a data processing agreement that describes how Ascender will process personal data in relation to the service. However, if a potential candidate or candidate chooses to register in Ascender's candidate database, Ascender will be the controller for processing in connection with the database. This privacy statement describes how Ascender collects, processes and discloses your personal data as controller.

Ascender will be able to collect and process personal data about potential candidates as part of its operations. For such treatment, the following will apply:

• Ascender collects personal data such as name, title, position, employer and contact information of potential candidates. The information is obtained from publicly available sources, such as business websites, LinkedIn, etc.
• The purpose of the treatment is to identify and assess potential candidates. The legal basis for the processing is Ascender's legitimate interest in being able to offer its recruitment services in an efficient manner, as well as to identify the best potential candidates.
• Retention period: Ascender will inform you if we have conducted a candidate search on you and you are a potential candidate for one of our positions. If you choose to register with Ascenders database, section 3.2 below will apply. If you do not wish to register in the database or participate in a recruitment process, your personal data will be deleted immediately.
  

Ascender has a candidate database where candidates can choose to register. For the processing of personal data in relation to this database, the following will apply:

• Ascender collects and processes personal data such as name, work and personal contact information, CV (including place of birth and nationality if included), qualifications, education, certificates, certifications, interview and assessment records, test results, personal interests, hobbies, marital status and background check information (if necessary and subject to agreement). The personal data may be obtained from the candidate himself, from publicly available sources or third parties such as the candidate's references.
• Purpose and legal basis of processing: When you register in Ascender's candidate database, we will process your personal data for the purpose of offering you employment opportunities. The legal basis for the processing is (depending on the registration process) your consent, which you give when registering in the database, or that the processing is necessary to provide the services that you have created an account to receive.
• Retention period: Your personal data will be kept in the database until you delete your registration, but still no longer than 2 years after the last recorded activity or documented contact with Ascender. Ascender may also retain certain personal data (limited to name, occupation and employer) for historical purposes. Such continued retention is based on Ascender's legitimate interest.
  

Please note that you are under no obligation to provide personal data to Ascender. However, if you do not want us to process your personal data, you will not be able to register in Ascender's candidate database and we will not be able to offer you job opportunities.

Administration of appointments: Ascender may process personal data in connection with the administration and handling of contracts with customers, suppliers, etc., including contact information for contact persons of customers, suppliers, etc. Ascender processes such personal data based on our legitimate interest in fulfilling our obligations under a contract or order.

• Reply inquiries: Ascender may also process personal data to follow up on inquiries from candidates, users of our websites, etc. The legal basis for such processing is Ascender's legitimate interest in providing support to our users.
• Use of Ascenders website: Ascender will be able to process personal data about visitors to our website. Ascender uses cookies and other methods of information collection to improve the user experience and optimize our website. The legal basis for this processing is Ascender's legitimate interest in maintaining and maintaining the website. We do not use the information for any other purpose. You can read more about our use of cookies in our cookie policy here: https://ascender.no/cookies
• RecruitmentIf you are applying for a specific position in Ascender, Ascender will be able to process your personal data for the purpose of assessing your application. The legal basis for such processing is that the processing is necessary to fulfill an agreement with you as a candidate, or to carry out measures at your request. Applications will normally be kept for up to 1 year after the recruitment process has been completed, unless you consent to continued storage.
  
• Fulfill a legal obligation and other legitimate interests: Ascender may also process personal data to comply with its statutory obligations, as well as to protect its own or third parties' legitimate interests, e.g. where the processing is necessary to enforce or defend a legal claim or to prevent unauthorised access or disclosure of personal data.
  

Ascender will retain this personal data for as long as necessary to achieve the purposes defined above. Please note that continued retention may also be necessary for reasons of statutory obligations to which Ascender is subject, or as a result of Ascender's legitimate interests, including if necessary to establish, enforce or defend a legal claim.

Ascender will only disclose your personal data to third parties if we have a lawful basis for such disclosure. For example, Ascender may disclose your personal data to a potential employer who has advertised a position for which you have applied or where you have otherwise consented to such disclosure.

Ascender also uses data processors to collect, store or otherwise process personal data on our behalf, e.g. in connection with IT operations. The relationship with such suppliers is governed by a data processing agreement, which, among other things, ensures information security of your personal data.

All processing of your personal data takes place within the EU/EEA area.

Ascender's website and candidate database may contain links to third-party websites. These third-party websites have their own privacy policies that specify how personal data is collected and processed. If you provide personal data to such a third-party website, the processing will be subject to that website's privacy policy. Ascender assumes no responsibility for such third-party websites, how they are managed or how they process your personal data. We therefore recommend that you familiarize yourself with the privacy policy and terms of use of such third party websites when you visit and use these websites.

We are committed to protecting the quality and integrity of personal data, and have implemented appropriate technical and organisational safeguards to achieve this. Among other things, we have implemented security procedures, policies and technical measures to ensure that personal data under our control is secured against:

• Unauthorized access
• Wrongful use or disclosure
• Unauthorized changes
  
• Wrongful deletion or accidental loss
  

All our employees and data processors who have access to and are associated with the processing of personal data are subject to a duty of confidentiality under the GDPR with respect to our candidates' etc. personal data.

When Ascender processes your personal data, you have the following rights:

• You can request access to your personal data at any time.
• If the processing is based on consent or agreement with you, you have the right to data portability.
• If the processing is based on your consent, you can withdraw this at any time. If the consent is withdrawn, this will not affect the lawfulness of the processing before the consent was withdrawn.
  
• In some situations, you may ask us to restrict the processing of your personal data or object to further processing of the personal data.
  
• You can ask us at any time to correct incorrect personal data that we have stored about you.
  
• In some situations, you may request that we delete your personal data, e.g. if the personal data is no longer necessary for the purpose for which it was collected or processed, and Ascender has no right or legal obligation that presupposes the continued processing of the personal data.
  
• If you believe that Ascender's processing is contrary to relevant data protection legislation, you also have the right to complain about Ascender's processing of your personal data to the Danish Data Protection Authority.
  

If you wish to exercise your rights, you may use the contact information provided at the beginning of this Privacy Policy.

If Ascender makes changes to the processing of personal data, this Privacy Policy will be updated and the changes will be notified on Ascender's website or by using your contact information.