Processing of Personal Data in Recruitment

Last updated: November 28, 2025

Respect for personal integrity and the correct and adequate processing of personal data are of utmost importance.

This information is intended, in accordance with the EU General Data Protection Regulation (GDPR), to provide information about the personal data processing for which Solid Försäkringsaktiebolag (516401–8284,) (”Solid Insurance”) is the data controller in connection with your application for, or referral to, a position with us. It also aims to provide information to you as an individual whose personal data is processed by Solid Insurance (a “data subject”), enabling you to exercise your rights.

Data Controller and Purpose of the Processing

Solid Insurance is the data controller for the processing of your personal data. This means that we are responsible for ensuring that the handling of data is carried out securely and in accordance with applicable laws and regulations.

Solid Insurance processes personal data when an application for a position is submitted to us. The personal data is processed so that Solid Insurance can administer applications and fill the position. The purpose of the processing is to identify and hire suitable candidates for Solid Insurance. The information may also be used by Solid Insurance for statistical analysis, marketing, and business reporting purposes.

Categories of Personal Data Processed

The data processed by Solid Insurance includes:

If an employee of Solid Insurance has referred a candidate, we may also process other information provided by the employee who made the referral.

Solid Insurance conducts background checks (such as contacting previous employers), various tests based on the position applied for (such as personality tests), and suitability/record checks as a final step in the recruitment process. These background checks include processing of additional information deemed relevant for the role the candidate may be offered. The candidate’s contact person at Solid Insurance will inform the candidate about the specific contents of the background check.

Legal Basis for the Processing

Solid Insurance uses four legal bases for the processing carried out during recruitment processes: consent, contract formation and performance, legitimate interest, and legal obligation.

Consent

Sometimes sensitive personal data is submitted to Solid Insurance , for example in a cover letter or CV. These data are processed so that the application can be handled. Such data are only processed by being included in the candidate’s application documents and are not recorded separately.

The legal basis for processing sensitive personal data submitted as part of a job application is consent. You may withdraw all or part of your consent at any time, effective from the time of withdrawal. Solid Insurance may no longer process your personal data after such withdrawal.

However, Solid Insurance may be legally required to retain certain personal data for a specified period (such as the period during which a candidate could appeal a recruitment decision). In such cases, Solid Insurance may use the data only for fulfilling the legal obligation.

Contract Formation and Performance

Processing of personal data related to a job application is also based on the legal ground of entering into and fulfilling (employment) contracts.

Legitimate Interest

If candidates have been contacted by Solid Insurance and invited to apply for a role, the legal basis for processing is legitimate interest. Solid Insurance has conducted an assessment (a balancing test) weighing our legitimate interest in finding suitable candidates against the interests of the candidates, concluding that our interest outweighs the candidates’ interests.

Only data that the candidate has made publicly available (e.g., via LinkedIn) is processed under this legal basis.

Legal Obligation

Solid Insurance also processes personal data on the basis of legal obligation, for example when we are required by law to retain the data during the period in which a recruitment decision may be appealed.

Retention Periods

Solid Insurance retains personal data only for as long as necessary.

Processing of Personal Data by Parties Other Than Solid Insurance

Information in a candidate’s application will be accessible to recruitment staff within Solid Insurance as part of their work duties.

Solid Insurance may also use data processors, such as IT providers for recruitment systems. These processors may only process personal data in accordance with the purposes and instructions provided by Solid Insurance . They may not access more information than required to perform the contracted service.

Solid Insurance may also engage external recruitment agencies during recruitment procedures. A recruitment agency is solely responsible (as a data controller) for the processing it performs. To learn how the agency processes personal data, the candidate must contact the agency directly, as indicated in the job advertisement.

Your Rights as a Data Subject

If you wish to exercise your rights or have questions about how your personal data is processed, you may contact dpo@solidab.se.

Right of Access (Register Extract)

You have the right to obtain information on what personal data Solid Insurance processes about you and to receive a copy of that data. To issue a register extract, Solid Insurance must be able to verify your identity to prevent unauthorised access.

Right to Rectification

You have the right to have incorrect personal data corrected and to have incomplete personal data completed.

Right to Object

You may object to processing based on legitimate interest. Solid Insurance may then no longer process the data unless we can demonstrate compelling legitimate grounds outweighing your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defence of legal claims.

If your personal data is processed for direct marketing, you have the right to object at any time, including profiling related to such marketing.

Right to Withdraw Consent

You may withdraw all or part of your consent at any time, effective from withdrawal.

Right to Restriction of Processing

You may request restriction under certain circumstances—for example, if you contest the accuracy of your data and a correction is being evaluated.

Right to Erasure (“Right to be Forgotten”)

You may request erasure of your personal data in certain cases. If Solid Insurance is legally required to retain your data (such as during the appeal period for a recruitment decision), the data cannot be erased but may only be processed to fulfil the legal requirement.

Right to Data Portability

If processing is based on consent or the formation/performance of a contract, you have the right to receive an electronic copy of your personal data and to request transfer to another data controller when technically feasible.

Right to Lodge a Complaint

If you have complaints about our processing of your personal data, you may submit a complaint to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY):
https://www.imy.se/

Contact Details

You may submit comments on Solid Insurance’s processing of your personal data to the address or email below:

Solid Insurance
Box 22068
250 22 Helsingborg

For questions, you are welcome to contact us and our Data Protection Officer at:
dpo@solidab.se

You may also read about the GDPR at: https://www.imy.se/