Media | Contact us
SEARCH:
Bavarian Nordic

Privacy Policy - Job Applicants

This privacy policy explains how Bavarian Nordic A/S (“Bavarian Nordic”, “us”, “we” or “our”) collects and processes your personal data in connection with your job application.

1. DATA CONTROLLER CONTACT INFORMATION

The legal entity responsible for the processing of your personal data is:

Bavarian Nordic A/S
CVR: 16271187
Philip Heymans Alle 3
DK-2900 Hellerup
Denmark 

If you have inquiries and/or questions to our processing of your personal data, please contact the Bavarian Nordic Data Protection Officer at dpo@bavarian-nordic.com 

2. CATEGORIES OF PERSONAL DATA WE MAY PROCESS

Depending on the information available about you, we may collect and process the following categories of personal data about you: 

Category of personal data collected

What this means

Non-sensitive personal data
  • Private contact details (name, home address, email, private phone number etc.).
  • CV & job application
    References
  • Date of birth
  • Gender
  • Marital status and family information
  • Publicly available social media information
  • Background checks
  • Photo
  • Nationality
  • Educational background
  • Work experiences and skills.
  • Driver licence details (if relevant for the position)
  • Personality tests
  •  

Sensitive personal data (where necessary)
  • Health and medical data
  • Disability

Other
  • National identification number (CPR) for tax purposes
  • Criminal records (if relevant for the position)

3. Sources of your personal data

We collect and process personal data that you have provided in communications with us. In addition, we may collect and process personal data from:

  • Recruitment agencies
  • Former employer (references)
  • publicly available sources such as social media
  • Other third parties, including other legal entities within the Bavarian Nordic group

4. Purpose and legal basis for our processing

In the following we have described the purposes and legal bases for our processing of your personal data:

Purpose

Categories of personal data

Our legal basis for processing this data

Administering and processing your application

Non-sensitive personal data

Our or a third party’s legitimate interests (GDPR Article 6(1)(f))

To determine your eligibility for a position for which you are applying

Non-sensitive personal data

Performance of or entering into a contract (GDPR Article 6(1)(b))

Our or a third party’s legitimate interests (GDPR Article 6(1)(f))

Sensitive personal data

Employer rights and obligations (GDPR Article 9(2)(b))

Obtaining references, criminal records or carrying out background checks

Non-sensitive personal data

Your consent (GDPR Article 6(1)(a))

Our or a third party’s legitimate interests (GDPR Article 6(1)(f))

5. SHARING OF YOUR PERSONAL DATA

We may share your personal data with the following recipients:

  • Other legal entities within the Bavarian Nordic group
  • Service Providers, including cloud-services and hosting and IT providers
  • Recruitment agencies

6. TRANSFERS TO COUNTRIES OUTSIDE THE EU/EEA and Switzerland

As a starting point, your personal data will only be processed and stored within the EU, namely in Denmark, unless otherwise stated or evident (for example if the contracting party is Bavarian Nordic Inc., US).

To the extent your personal data is transferred to countries outside the EU/EEA and Switzerland, we will only transfer the personal data after having provided one of the following safeguards:

  • Adequacy decision by the EU Commission.
  • EU Commission’s Standard Contractual Clauses

In some cases, we may rely on your consent for the transfer of your personal data to countries outside the EU, or if one of the limited and relevant exceptions third country transfers in the GDPR apply. You can contact us for more information on the relevant safeguards or legal basis.

7. How long will we STORE YOUR PERSONAL Data

We will not store your personal data for longer than necessary.

If you have been requested to send your criminal records to HR, your criminal records will be deleted without undue delay once HR has received and reviewed it.

If you are not offered a position in Bavarian Nordic, we will delete your personal data once the recruitment process is completed. However, we may ask your consent to store your application for consideration in connection with future job openings.

In some cases where you are not offered a position in Bavarian Nordic, we may store your personal data for a period of 6 months after completion of recruitment process for documentational purposes.

If you are offered a position in Bavarian Nordic, your personal data will be included in your employee file, and you will receive additional information on how we process your employee file and any additional personal data about you.

8. YOUR RIGHTS

You have the following rights in connection with our processing of your personal data. Please note that some of the rights may be subject to exceptions and limitations.

  • Request access to and to receive a copy of your personal data.
  • Right to have your personal data rectified.
  • Right to have your personal data deleted.
  • Right to have the processing of your personal data limited.
  • Right to data portability.
  • Right to object to the processing of your personal data.
  • Right to not be subject to automated decision making, including profiling.
  • Right to withdraw your consent.
  • Right to complain to the relevant supervisory authorities.

How to exercise your rights
If you want to exercise any of the rights described above, please contact us as provided for in Section 1.

Complaints
If you would like to make a complaint regarding this Privacy Policy or our practices in relation to your personal data, please contact us as provided for in Section 1. We will reply to your complaint as soon as we can.

If you feel that your complaint has not been adequately resolved, please note that the GDPR gives you the right to contact your local data protection supervisory authority, as listed here.

9. OBLIGATION TO PROVIDE PERSONAL DATA AND CONSEQUENCES FOR FAILING TO DO SO

You are not required to provide us with your personal data.

Where we need to process your personal data, either to comply with law or to perform the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract with you.

10. AUTOMATED DECISION-MAKING

Your personal data will not be used for automated decision-making. 

11. CHANGES TO THIS PRIVACY POLICY

Changes to this privacy policy will be posted on our webpage here: www.bavarian-nordic.com/privacy/applicants.aspx. We encourage you to visit our webpage regularly to keep yourselves updated on any such changes.