Valid from 24/08/2020
Note that other companies may act as controller of the personal data relating to you, as such personal data may be disclosed when you interact with participating companies on Poption. Disclosure of personal data to such participating companies is further described in section 7 below.
Poption AS does not intend to process special categories of personal data, such as data on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.
Poption AS will only process such special categories of personal data as specified above at your request, i.e., when you submit such data to us through your use of Poption. By submitting such special categories of personal data you are deemed to have provided us with your informed, expressly and freely given consent to process such data per GDPR art. 9 (2) a).
Poption AS may collect your personal data:
We may also collect your personal data through your use of supported third-party services. Use of these third-party services is governed by the third-party’s terms and data processing provisions. By logging in to these third-party services from Poption and explicitly requesting that the applicable personal data be submitted to Poption, you are deemed to have accepted that such processing of personal data is necessary for Poption AS to provide you with the full functionality of Poption.
Poption currently supports the following third-party services:
By registering for and using Poption, Poption AS may process the following categories of personal data:
Poption AS will process information as mentioned above for:
Poption AS retains personal data for no longer than one month after you have explicitly requested to have your Poption profile deleted. You may delete your Poption profile here: https://www.poption.com/user or by submitting a request to email@example.com. Personal data will be deleted or anonymized at the end of the retention period, unless statutory obligations prevent such deletion.
Poption AS utilizes processors established in countries outside the EEA (“third country”). Any transfer of personal data to a third country is subjected to appropriate safeguards, such as a legally binding and enforceable instrument between public authorities or bodies (e.g., the EU-US Privacy Shield Framework), or standard data protection clauses adopted by the EU Commission.
Poption AS utilizes processors in the US which are certified under the EU-US Privacy Shield Framework. A copy of such safeguards may be obtained here https://www.privacyshield.gov/Privacy-Shield-Principles-Full-Text.
Notwithstanding the above, Poption will not disclose your personal data to any third party except when, to the extent, and to persons
Regarding section ii), Poption AS will disclose personal data to participating companies solely upon your request. Participating companies are companies which use Poption for recruitment purposes and have concluded an agreement with Poption AS for access to Poption.
Poption AS ensures that it has implemented and will continue to employ appropriate measures to ensure that personal data are processed securely and in compliance with applicable law.
Upon your request, Poption AS will grant you access to all personal data that Poption AS maintains about you unless such personal data is otherwise available to you or Poption AS is legally prohibited from disclosing such personal data.
If any personal data prove to be incorrect or misleading, you are entitled to request the data rectified or restricted. As a registered user, you can access, correct and erase your personal data through Poption.Rights in connection with disclosure
In all cases where Poption is allowed to disclose personal data to third parties, it will ensure that the person to whom disclosure is made grants you the same rights as those set forth herein with respect to the processing of such Personal Data. This includes the right to access the personal data and the right to correct or have corrected incorrect or misleading personal data.Right to data portability
You have the right to receive the personal data concerning you, which you have provided to Poption AS, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from Poption AS.Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes your rights.Contact information
Please submit any request regarding the above data subject rights to firstname.lastname@example.org.