Integritetspolicy

Dataskydd och GDPR-information för OGR

Version 1.1•Giltig från och med 2026-10-08
OBS: UTKAST FÖR JURIDISK GRANSKNING — Denna policy är för närvarande under granskning av en svensk jurist. Den visas här i demonstrationssyfte.

1. Personuppgiftsansvarig

OGR AB (under registrering)
Stockholm, Sverige
Kontakta oss om dataskydd: privacy@thriverly.se

2. Varför behandlar vi dina personuppgifter?

Vi behandlar dina personuppgifter för att kunna hantera rekryteringsprocessen och, om du samtycker, för att kontakta dig om framtida tjänster som kan passa dig.

2.1 Ansökan till en specifik tjänst

Vi samlar in namn, e-post, LinkedIn-profil (valfritt), CV och personligt brev baserat på vårt berättigade intresse (art. 6.1 f GDPR) att hantera din ansökan och bedöma din erfarenhet.

We do not request salary history, identity numbers, photographs or sensitive personal information. Please omit them from your CV. Uploaded files may nevertheless contain information you supplied; AI extraction filters known identifiers and sensitive fields, and unredacted scans require manual review.

2.2 Talangpool (frivilligt, kräver samtycke)

Om du väljer att gå med i vår talangpool behandlar vi dina uppgifter baserat på ditt uttryckliga samtycke (art. 6.1 a GDPR) för att proaktivt kontakta dig om framtida lediga tjänster. Du kan när som helst återkalla ditt samtycke under "Mina uppgifter".

3. Hur länge sparar vi dina uppgifter?

The controller must approve and publish a purpose-specific retention schedule before real candidate processing is enabled. This draft does not claim that all recruitment records must be kept for six months or seven years. Talent-pool consent expires after 180 days unless renewed; withdrawing it stops talent-pool use. AI records are included in access and erasure procedures, subject to applicable legal holds.

4. Vem delar vi dina uppgifter med?

We do not sell your data. Recruitment data may be shared with the hiring organisation and the configured service providers: Convex for storage, WorkOS for authentication, Vercel for hosting, and OpenRouter/OpenAI when recruitment AI is enabled. The controller must identify the actual recipients, processing locations, retention periods, processor terms and any international-transfer safeguards in the approved notice for this deployment. This demonstration draft does not establish that those approvals exist or that all processing stays in the EU.

5. Dina rättigheter

You may request access, correction, erasure, restriction or object to processing, and withdraw optional consent. Use My Data for access, deletion and talent-pool consent. Use the AI evidence panel for explanations, corrections, restrictions and objections; these requests remain available while deletion is pending. Contact the privacy address above for other requests or help. Applicable legal exceptions may affect a request; the controller will explain its response.

6. Automatiserat beslutsfattande och AI

Recruitment AI is disabled until the organisation approves its purpose, lawful basis, vendor arrangements and quality controls. When enabled, OpenRouter/OpenAI may extract explicit professional CV facts and compare human-reviewed facts with human-reviewed job requirements. AI can make mistakes, and missing evidence is not proof that a requirement is unmet. Human recruiters must independently review the evidence; AI does not change application status or make hiring decisions. You receive a versioned notice before your CV is sent for AI processing. In your application dashboard you can inspect extracted facts and criterion evidence, request an explanation or correction, restrict processing, or object. Restrictions remain in place after a response until you choose to resume AI use. You may also contact the organisation’s privacy contact; access and deletion remain available through My Data. Notice receipt is not consent or mandatory talent-pool consent.

7. Klagomål

Om du anser att vi behandlar dina uppgifter i strid med GDPR har du rätt att lämna in ett klagomål till Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm (imy@imy.se).