Candidate Personal Data Processing Principles

This Candidate Privacy Notice explains how Atlantsson collects, uses, stores, protects, shares, and otherwise processes Candidates' Personal Data throughout recruitment, talent acquisition, and professional collaboration activities.

This Notice explains:

• what Personal Data we collect;
• why we collect it;
• how we use it;
• with whom it may be shared;
• how long it is retained;
• the legal basis for processing; and
• your rights under applicable data protection laws.

This Candidate Privacy Notice applies to individuals worldwide who interact with Atlantsson regarding employment, freelance engagements, contractor positions, internships, consulting opportunities, or any other professional collaboration.

This Notice applies whether you submit your information through:

• Atlantsson Careers;
• LinkedIn;
• GitHub;
• GitLab;
• portfolio websites;
• recruitment agencies;
• employee referrals;
• email;
• networking events;
• social media;
• strategic partners; or
• any other legitimate recruitment channel.

This Notice also applies where Atlantsson proactively identifies potential candidates using publicly available professional information.

Atlantsson processes Personal Data in accordance with the following principles:

• lawfulness, fairness, and transparency;
• purpose limitation;
• data minimization;
• accuracy;
• storage limitation;
• integrity and confidentiality;
• accountability.

We process only the Personal Data that is necessary for legitimate recruitment and business purposes.

Atlantsson implements appropriate technical and organizational measures designed to protect Personal Data against unauthorized access, unlawful disclosure, accidental loss, destruction, alteration, or misuse.

Access to Candidate information is limited to authorized personnel who require such access to perform their professional responsibilities.

All employees, contractors, and service providers handling Personal Data are expected to maintain appropriate confidentiality and security standards.

Atlantsson works with carefully selected service providers that support recruitment, communication, cloud infrastructure, collaboration, scheduling, artificial intelligence, cybersecurity, and business operations.

Where Personal Data is processed by third-party providers on Atlantsson's behalf, those providers are required to process such information only in accordance with applicable contracts, confidentiality obligations, and data protection legislation.

Atlantsson remains responsible for ensuring that Candidate information entrusted to its service providers is appropriately protected.

Atlantsson operates internationally and recruits professionals for opportunities across multiple jurisdictions.

As a result, Candidate information may be processed in countries where Atlantsson, its clients, strategic partners, or authorized service providers operate.

Where Personal Data is transferred internationally, Atlantsson implements appropriate safeguards designed to ensure an adequate level of protection consistent with applicable privacy legislation.

As an enterprise AI and automation consultancy, Atlantsson may use artificial intelligence ("AI") and machine learning-assisted technologies to support administrative aspects of the recruitment process.

AI-assisted technologies may help organize applications, summarize candidate information, identify relevant skills, compare profiles against role requirements, improve recruitment efficiency, and assist recruitment administration.

AI technologies are used solely as decision-support tools.

Atlantsson does not make fully automated hiring decisions based exclusively on AI-generated outputs. All recruitment, interview evaluation, candidate selection, and hiring decisions are made by qualified individuals exercising independent professional judgment.

• Full name
• Preferred name
• Profile photograph (where voluntarily provided)

• Email address
• Telephone number
• Country of residence
• City
• Postal address (where relevant)
• Preferred communication language

• Curriculum Vitae (CV)
• Résumé
• Cover letter
• Employment history
• Job titles
• Professional experience
• Education
• Certifications
• Professional licences
• Technical skills
• Languages
• Awards and achievements
• Salary or rate expectations (where voluntarily provided)
• Notice period
• Availability

Where voluntarily provided by you or publicly available for professional purposes, Atlantsson may review information available on platforms including:

• LinkedIn
• GitHub
• GitLab
• Behance
• Dribbble
• Personal websites
• Portfolio websites
• Other publicly available professional platforms

During the recruitment process we may collect:

• applications;
• interview notes;
• interview recordings (where applicable and permitted by law);
• technical assessments;
• coding challenges;
• portfolio evaluations;
• recruitment feedback;
• hiring decisions;
• recruitment preferences;
• communication records.

This includes communications exchanged between you and Atlantsson, including:

• emails;
• messages;
• meeting invitations;
• scheduling information;
• interview correspondence;
• other recruitment-related communications.

Where relevant for a particular opportunity, we may collect:

• nationality;
• citizenship;
• work authorization;
• visa status;
• immigration eligibility.

Atlantsson may process professional information that you have made publicly available for recruitment purposes, including professional networking profiles, publications, conference presentations, open-source contributions, portfolios, and similar publicly accessible professional information.

Atlantsson does not intentionally request or require special categories of Personal Data unless necessary to comply with applicable law or to provide reasonable workplace accommodations.

Where such information is processed, Atlantsson applies additional safeguards and processes the information only where a valid legal basis exists.

Atlantsson processes Personal Data to administer recruitment activities, evaluate applications, communicate with Candidates, schedule interviews, coordinate recruitment workflows, and manage the overall hiring process.

Legal Basis

• Performance of pre-contractual measures at the request of the Candidate.
• Atlantsson's legitimate interests in recruiting suitable professionals.

We process Personal Data to assess a Candidate's qualifications, professional experience, technical competencies, certifications, portfolio, and overall suitability for a position or engagement.

This may include reviewing technical assessments, portfolio submissions, publicly available professional profiles, interview feedback, and information voluntarily provided by the Candidate.

Legal Basis

• Performance of pre-contractual measures.
• Legitimate interests.

Atlantsson processes Personal Data to communicate with Candidates throughout the recruitment process, including interview invitations, recruitment updates, scheduling meetings, responding to enquiries, and providing feedback where appropriate.

Legal Basis

• Performance of pre-contractual measures.
• Legitimate interests.

With your consent where required by applicable law, Atlantsson may retain your information to contact you regarding future employment, contractor, freelance, internship, or consulting opportunities that may be relevant to your background.

You may request removal from our talent network at any time.

Legal Basis

• Consent.
• Legitimate interests where permitted by applicable law.

Atlantsson may process Candidate information using AI-assisted technologies to support recruitment administration.

These technologies may assist in:

• organizing applications;
• summarizing candidate information;
• identifying relevant qualifications;
• matching skills against role requirements;
• improving recruitment efficiency;
• reducing administrative workload.

AI technologies are used solely as decision-support tools.

Atlantsson does not make employment decisions based solely on automated processing or AI-generated outputs. All recruitment decisions are reviewed and made by qualified individuals.

Legal Basis

• Legitimate interests.
• Performance of pre-contractual measures.

Where appropriate and relevant to your qualifications, Atlantsson may process your Personal Data to consider you for professional opportunities with Atlantsson's enterprise clients, strategic partners, or affiliated recruitment projects.

Your information will only be shared where necessary for the relevant opportunity and in accordance with applicable data protection legislation.

Legal Basis

• Performance of pre-contractual measures.
• Legitimate interests.

Atlantsson may process Personal Data where necessary to comply with applicable laws, regulations, court orders, governmental requests, tax obligations, employment legislation, or other legal requirements.

Legal Basis

• Compliance with legal obligations.

Atlantsson may process Personal Data where necessary to establish, exercise, or defend legal claims, investigate complaints, resolve disputes, prevent fraud, protect our business operations, or enforce contractual rights.

Legal Basis

• Legitimate interests.
• Compliance with legal obligations.

Personal Data may be accessed by authorized Atlantsson employees, hiring managers, recruiters, executives, and other personnel directly involved in recruitment, candidate evaluation, business operations, or related administrative activities.

Access is granted only on a need-to-know basis.

Where you are being considered for a client assignment, consulting engagement, contractor role, or other collaboration opportunity, Atlantsson may share relevant Personal Data with the respective enterprise client or strategic partner.

Only information necessary to evaluate your suitability for the opportunity will be shared.

Atlantsson may work with recruitment agencies, talent acquisition partners, executive search firms, or referral partners.

Such organizations may process Personal Data only in accordance with contractual obligations and applicable data protection legislation.

Atlantsson works with carefully selected service providers supporting recruitment and business operations. These providers may include:

• Microsoft 365
• Microsoft Azure
• Amazon Web Services (AWS)
• Google Workspace
• Cloudflare
• LinkedIn
• GitHub
• Calendly
• OpenAI
• Anthropic

Atlantsson requires service providers processing Personal Data on our behalf to implement appropriate technical and organizational security measures and to process Personal Data only in accordance with our instructions and applicable law.

The list of providers may change as our business and technology evolve.

Where necessary, Personal Data may be shared with legal advisers, accountants, auditors, insurers, compliance advisers, or other professional advisers assisting Atlantsson in the ordinary course of business.

Atlantsson may disclose Personal Data where required by law or where necessary to comply with legal obligations, court orders, regulatory requests, or requests from competent governmental authorities.

If Atlantsson undergoes a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, Personal Data may be transferred as part of that transaction, subject to appropriate confidentiality and legal safeguards.