Privacy statement — recruitment

1. Data controller

SkyeTec AS (org. no. 924 783 427), Biskop Gunnerus' gate 14a, 0185 Oslo, Norway, is the data controller for personal data processed in connection with recruitment. Privacy enquiries may be directed to careers@skyetec.no.

2. What data is processed

• Contact information — name, email address and, if provided, phone number
• CV and cover letter — education, work experience, skills and motivation
• Certificates and diplomas — documentation of education and previous employment
• Assessment notes — notes from interviews and from contact with the references provided
• AI qualification report — see section 4

Special categories of personal data, such as health information, religion or political affiliation, must not be included in the application documents.

3. Purpose and legal basis

The personal data is processed in order to assess the application against the requirements of the position, to communicate with the applicant about the progress of the process and, where a position is offered, to carry out digital signing and establish the employment relationship.

The processing is based on steps taken at the applicant's request prior to entering into a contract, cf. GDPR Art. 6(1)(b), and on legitimate interest, cf. Art. 6(1)(f). Storage beyond six months requires explicit consent under Art. 6(1)(a).

4. AI-assisted candidate assessment

SkyeTec uses an AI tool developed in-house to support candidate assessment. The tool analyses the application documents against the requirements of the position and generates a report with a score and reasoning. The report is reviewed by a recruiter, who makes the final decision. No decisions are made automatically without human review.

Applicants have the right to access the generated report, the right to request human review and the right to object to the use of the AI tool in their case. Enquiries may be directed to careers@skyetec.no.

5. Storage period

• Applicant not offered a position — 6 months after the process has ended
• Applicant reached the interview stage — 10 months after the process has ended
• Consent to future contact — up to 12 months from the application date

Upon hiring, relevant personal data is transferred to SkyeTec's HR system. Payroll and accounting data is retained for five years in accordance with section 13 of the Norwegian Bookkeeping Act.

6. Disclosure to third parties

Personal data is disclosed to the following recipients, all of which are bound by data processing agreements with SkyeTec:

• Signing service — sending and receiving the employment contract
• HR tool — establishing the employment relationship upon hiring

The AI qualification tool is developed in-house and operated within SkyeTec's own systems. Personal data is not transferred to external AI providers. Personal data is never sold to third parties.

7. Your rights as a data subject

As a data subject you have the right of access, rectification, erasure, restriction of processing, data portability and objection to the processing, cf. GDPR Arts. 15–21. You also have the right to human review of the AI assessment. Enquiries may be directed to careers@skyetec.no. Replies are given within 30 days.

Complaints regarding the processing may be lodged with the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no.