Last updated: 15 October 2026

Oddwork Sweden AB (corporate ID no. 556847-9892) is an employer branding and recruitment agency based in Gothenburg and Stockholm. We recruit both for our own positions and on behalf of our clients, through our career site (the “Career Site”) and an applicant tracking system. This policy applies to our website oddwork.se and all websites under oddwork.se, including the Career Site and ebi.oddwork.se. It describes how we process your personal data and what rights you have.

The policy consists of six parts. Parts 1, 5 and 6 apply to everyone. Part 2 applies to you as a candidate, referee or visitor to the Career Site, part 3 applies to you as a client, and part 4 applies to you if you visit oddwork.se or any of our other websites under oddwork.se. If you are both a client and a candidate, both parts apply.

We transcribe calls and meetings. When you have a call or meeting with us, such as an interview, a reference call or a client meeting, it is normally transcribed using an AI tool. We inform you before the call begins, and you may decline. Read more in part 6.

Part 1. About personal data

Personal data is any information that can be linked, directly or indirectly, to a natural person, such as a name, email address or IP address. We are the controller for the processing described in this policy and comply with the EU General Data Protection Regulation (2016/679, “GDPR”). Suppliers that process personal data on our behalf are processors and may only do so in accordance with our instructions. We protect personal data with appropriate technical and organisational security measures, such as access controls.

Legal basis. We process personal data on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in recruiting the right talent for ourselves and our clients, and in offering and delivering our services. Video recording of interviews only takes place with consent (Art. 6(1)(a)). Accounting records are kept to comply with the Swedish Bookkeeping Act (Art. 6(1)(c)).

Part 2. For candidates, referees and visitors

This part applies to you if you visit the Career Site (“Visitor”), connect with us to receive information about vacancies (“Connected Candidate”), apply for a position (“Applicant”), have been found by us through other sources (“Sourced Candidate”), have been recommended to us (“Referred Candidate”) or have been named as a referee by a candidate (“Referee”).

When we recruit on behalf of a client. We are the controller for the data we collect and assess in the recruitment process. When you proceed in a process, we share what the client needs to assess you, such as your CV, candidate presentation, test results and references. The client is then responsible for its own processing of that data. The client never receives transcripts or notes from your conversations with us, but we use them as a basis for the candidate presentation.

Data we process. Contact details, your application (CV, cover letter, work samples, education and references), information from public sources about your professional experience, such as LinkedIn, information from referees, and notes, transcripts, assessments, test results, salary expectations and candidate presentations from the recruitment process. When you visit the Career Site, we collect information about your device and how you use the site. Background checks are only carried out with your knowledge. We do not ask for sensitive personal data, such as information about health or ethnic origin, and do not use such data in our assessment.

Where the data comes from. Primarily from you. Some data, such as contact details and your CV, is necessary for us to process your application. Data may also come from public sources, from our employees and partners who recommend you, from your referees and from the client after an interview. As a Referee, we receive your contact details from the candidate. If we have received your data from someone other than you, we will inform you of this the first time we contact you, and at the latest within one month.

Why we process the data. To review and assess applications and profiles, communicate with you about vacancies, present you to clients and follow up on the recruitment, invoice our fee if a client hires you following our presentation, collect references, carry out surveys, improve and secure the Career Site (see our Cookie Policy) and protect our rights in the event of legal claims.

Who we share the data with. Clients when you proceed in a recruitment process; service providers, for example for applicant tracking, testing, background checks and AI services; partners when you apply through a campaign we run together; group companies; cookie providers if you consent; authorities where required by law; and parties to legal proceedings or in connection with an acquisition of our business. For marketing cookies, the joint controllership described in part 4 applies.

How long we keep the data.

• Visitors: one year. Cookies in accordance with our Cookie Policy.

• Talent pool (Connected Candidate): for as long as you remain connected and wish to receive information about new positions. You may leave the talent pool at any time.

• Application for a position, if you are not in the talent pool: for as long as the recruitment process is ongoing and thereafter for as long as the data may be needed to answer questions about the recruitment or to handle legal claims. When you apply for a position, you may also choose to join the talent pool.

• Transcripts: for as long as they are needed as a basis for the recruitment to which they relate.

• Referees: for as long as the data about the candidate is kept.

• If you are hired by us, our employee privacy policy applies. If you are hired by a client, the client is responsible for your data.

Part 3. For clients

This part applies to you if you are a contact person at a client of Oddwork, or at a company that may become a client.

Data we process. Name, job title, employer and business contact details, our communication, agreements and quotes, and notes and transcripts from meetings. Some data is obtained from public sources and business databases, such as LinkedIn. In such cases, we will inform you no later than at our first contact.

We ask you not to share information about individual employees’ health or other sensitive matters in our meetings. Responsibility for what information about employees is shared with us lies with you and your employer.

Why we process the data. To offer our services, carry out and follow up on assignments, invoice, send invitations and, if you have subscribed, newsletters, and protect our rights in the event of legal claims.

Who we share the data with. Service providers, for example for CRM, email and AI services; partners when an assignment is carried out together with them; and authorities and other parties where required by law. Notes and transcripts from our meetings are never shared outside Oddwork.

How long we keep the data. For as long as we have a business relationship or dialogue with the company you work for. If we learn that you have left the company, we will update or delete your data. Transcripts from meetings are kept for as long as they are needed as a basis for the assignment to which they relate. Accounting records are kept for seven years in accordance with the Swedish Bookkeeping Act. If you have objected to marketing, we only keep the information that you do not wish to be contacted.

Part 4. For visitors to oddwork.se and other websites under oddwork.se

This part applies to you if you visit oddwork.se or any other website under oddwork.se, except the Career Site, which is covered in part 2, for example when you read about our services, use our employer brand analysis (EB Audit), fill in a contact form or sign up for newsletters or events.

Data we process. Information about your device and how you use the website, such as IP address, browser and the pages you visit, collected using cookies and similar technologies. Information you provide in a form, such as your name, email address, phone number, company and message.

Cookies and tracking. Necessary cookies are used to make the website work. Other cookies, for example for analytics and for tracking visits in our CRM system HubSpot, are only used if you have consented (Swedish Electronic Communications Act (2022:482), Chapter 9, Section 28). You can change or withdraw your consent at any time via the cookie settings link at the bottom of the website. More information is available in our Cookie Policy.

Why we process the data. To make the website work and keep it secure, to analyse and improve it, to respond to what you send us and, if you have consented, to follow up on your visit and tailor our communication.

Legal basis. Analytics and tracking cookies and newsletters are based on your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time. Necessary cookies, security and responses to what you send us via forms are based on our legitimate interest (Art. 6(1)(f)).

Who we share the data with. Providers of the website, CRM and marketing platform (HubSpot) and analytics tools, which process the data as processors. If you consent to marketing cookies from, for example, Meta, LinkedIn or Google, Oddwork and the provider are joint controllers for the collection and transfer of the data. The provider’s further processing is governed by its own privacy policy. Some providers process data in the United States, see part 5.

How long we keep the data. Cookies are kept in accordance with our Cookie Policy. Data from contact forms is handled as client contact data in accordance with part 3. Newsletter data is kept until you unsubscribe.

Part 5. Transfers, rights and contact

Transfers outside the EU/EEA. We aim to process personal data within the EU/EEA. However, some suppliers, including providers of AI services, process data in the United States. In such cases, we rely on the European Commission’s decision on the EU-US Data Privacy Framework or standard contractual clauses, supplemented by technical and organisational safeguards.

Your rights. You have the right to:

• receive information about and access to the personal data we process about you

• have inaccurate data rectified and incomplete data completed

• have data erased when it is no longer needed or lacks a legal basis

• request restriction of processing

• withdraw your consent, without affecting processing carried out before the withdrawal

• receive your data in a machine-readable format (data portability) where the processing is based on a contract or consent

• not be subject to decisions based solely on automated processing

Your right to object. You have the right to object at any time to processing based on our legitimate interest, including transcription of calls, and to direct marketing.

As a candidate, you can exercise your rights via Data and privacy or by logging in to your account.

Complaints. You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or with the data protection authority in the country where you live.

Contact. Candidates, referees and visitors to the Career Site can contact us at rekrytering@oddwork.se. Clients and visitors to oddwork.se and other websites under oddwork.se can contact us at hello@oddwork.se.

Updates. We update this policy as needed. The date at the top shows when it was last updated.

Part 6. Use of AI

We use AI to support our work, for example to transcribe and summarise calls, draft texts and compare applications against the job requirements. Anything produced by AI is reviewed by an Oddwork employee before it is shared or used as a basis for an assessment, and all assessments and decisions are always made by a person.

At Oddwork, every application is reviewed by one of our experienced recruiters, and no candidate is screened out by AI. We do not use AI to interpret emotions, voice or facial expressions.

We always inform you before a call or meeting is transcribed. The audio is not stored, only the text. If you do not want the call to be transcribed, you can let us know, and this will not affect our assessment of you. Our AI service providers are processors and may not use your data to train their AI models.