Privacy notification for global

Privacy notification for Lundbeck job applicants

If you choose to create a job profile and/or apply for a specific position in the Lundbeck group via our job application website(s), your personal data will be registered in our recruitment systems and H. Lundbeck A/S (or the Lundbeck affiliate relevant to your job profile and/or application) will as the data controller receive, process, use and disclose personal data about you as described in more details in this Privacy Notification.

Please find a list of all Lundbeck companies here.

 

H. Lundbeck A/S and each of its local affiliated companies are hereinafter collectively referred to as “Lundbeck” or “we”

 

Lundbeck will process your personal data according to applicable legislation, including the EU General Data Protection Regulation (“GDPR”) and/or local legislation in the relevant country of our relevant affiliate. Please note that your personal data will be visible to all authorized Lundbeck recruiters and HR personnel.

 

What categories of personal data are we processing and for what purposes?

 

We collect and process the personal data you voluntary provide us with, including

 

  • your name;
  • Contact information such as your address, phone number and e-mail address;
  • Your gender and nationality;
  • Data in your CV or resume, including your educational background, competencies, qualifications and work experience;
  • Your current and historical pay history and benefits, if customary and in accordance with local laws;
  • Details regarding your legal authorization to work in a particular jurisdiction;
  • Specific personal data required by law in specific countries;
  • Other information that you choose to include in your job application, resumé, CV or other documents.

Please refrain from providing us with information which is not relevant to the job that you are interested in or applying for, unless required by local laws.

 

Please do not include sensitive information or national identification numbers in your application documents. 

 

When the personal data is not collected directly from you, we may collect the below categories of personal data from the following sources: 

 

  • References from others, e.g., your previous employers; for certain roles we may also perform background checks;
  • Test results collected via relevant tests performed as part of the process (e.g., personality tests);

We process your personal data for the purpose of administrating and processing your interest or job application.

 

What is the legal basis for our processing of your personal data?

 

The legal bases in the GDPR for our collection and processing of your personal data (may be supplemented by local laws) are:  

 

  • GDPR art. 6(1)(f) (“the balancing of interest test”). It is Lundbeck’s assessment that the processing of your personal data is necessary for the determination of whether Lundbeck can offer you the position as specifically applied for.
  • GDPR art. 6(1)(b). Processing may be necessary for the performance of a contract (or in order to take steps to enter into a contract with you as an applicant).
  • GDPR art. 6(1)(a). Consent may be relevant in relation to references and criminal records, but this will depend on the circumstances and local law.

When applying to jobs in Lundbeck affiliates outside of the EU/EEA, the legal basis will be governed by local laws applying to the affiliate(s) in question. 


Will we share your personal data with data processors?

 

Lundbeck uses IT systems and service providers who will have access to your personal data. Your personal data will also be disclosed and shared with our test providers, for instance in relation to personality tests in the case we decide to invite you for a second interview. All data processors will process your personal data on our behalf and solely in accordance with our instructions. Unless you are interested in or applying for a job in H. Lundbeck A/S in Denmark, H. Lundbeck A/S will also act as a data processor on behalf of affiliates. 


Will we share your personal data with third parties?

 

For applications for positions in one of Lundbeck’s affiliates, we will share your personal data with the given affiliate. For certain positions, we may also share your personal data with recruiting companies for the purpose of obtaining assistance in relation to a specific position.

 

Will we transfer your personal data?

 

In cases where you are interested in or applying for a job in Lundbeck’s affiliates, your data will be transferred to the relevant affiliate. Some affiliates are located outside the EU/EEA and have not been determined by the European Commission to have an adequate level of data protection (see the full list of ‘secure countries’ on the EU Commission’s website). If the country where the affiliate is located has not been determined to have an adequate level of protection, the transfer will be based on the Lundbeck Intra Group Agreements. More information can be obtained by contacting Lundbeck or Lundbeck’s Data Protection Officer using the contact information set out below.

 

In other situations,  we have ensured that required safeguards in the form of standard contractual clauses are in place with the recipient, such as EU Standard Contractual Clauses or China Standard Contractual Clauses. 


How long will we store your personal data?

 

We will store your personal data for as long as necessary to fulfil the purposes described above. However, your data will be deleted or anonymized no longer than six (6) months after your registration unless you decide to update your personal data yourself. You will receive a notification fourteen (14) days prior to the expiration.

 

If you apply for a job, we will furthermore retain your application data after the recruitment process to document the recruitment process and to comply with local laws. The retention period depends on the country in which you have applied for a job.

 

For H. Lundbeck A/S the retention period is six (6) months.

 

If hired, relevant personal data will be stored in accordance with the retention periods for personnel files.

 

Voluntary/mandatory provision of personal data

 

We collect your personal data from you because this is a required step in the recruitment process. The consequences of not providing the personal data are that Lundbeck will be unable to consider your candidacy for the position applied for.

 

Your rights

 

We encourage you to update your candidate profile whenever needed and you can always log into your account and see what data is registered about you in our recruitment system. You can always delete your profile as well as withdraw an application for a specific job opening.
In countries where the processing of your job application is based on consent as legal basis, you may withdraw you consent at any time with effect from the time of revocation.

 

When applying at Lundbeck within the EU, you have the following rights, subject to limitations in the GDPR and applicable local laws:

 

Right of access

 

  • You have the right to request access to the personal data Lundbeck processes about you.

 

Right to rectification

 

  • You have the right to request correction of inaccurate personal data concerning you, including completion of incomplete personal data.

 

Right of deletion

 

  • You have the right to the deletion of the personal data concerning you.

 

Right to restriction

 

  • You have the right to restrict Lundbeck's processing of personal data concerning you.

 

Right to data portability

 

  • You have the right to receive the personal data provided by you in a machine-readable format.

 

Automated individual decision-making, including profiling

 

  • As a general rule, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or affects you significantly. This does not apply if, among other things, automated decision-making and profiling is necessary for entering into, or performing, a contract between you and Lundbeck.  

Right to object

 

  • You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data  based on legitimate interests as the legal basis for the processing (Article 6(1)(f) of the GDPR), including profiling based on this provision. 

You also have the right to lodge a complaint with the competent supervisory authority, e.g., the Danish Data Protection Agency (Datatilsynet) in Denmark.

 

If you wish to exercise any of your rights as described above or have any questions, please contact the Lundbeck Group Data Protection Officer by using the contact information provided below.

 

Contact details

 

Should you have any questions in regards to the protection of your personal data or if you wish to exercise your legal rights, please contact Lundbeck’s Group Data Protection Officer at dataprivacy@lundbeck.com or the relevant Lundbeck company offering the job opening by using the below contact details: 

 

Please find a list of Lundbeck companies here