Privacy notice for job applicants and candidates
1. Introduction
1.1 This Privacy Notice explains how the WSA Group (hereinafter "WSA", "we", "us", "our") collects, uses, discloses and protects your data when you participate in our recruitment and selection processes, including any personal data submitted through our careers or recruitment websites, appointed recruitment agencies, employee referrals, as well as our online and offline recruitment activities. This Notice only applies to candidates who submit applications for roles across our operations in the Europe, Middle East and Africa (EMEA) region, including employees, internship, and contractor positions.
1.2 For the purposes of applicable data protection laws, the organisation responsible for handling your personal data, and therefore considered the “data controller”, will be the entity that manages recruitment activities in the relevant country, or the entity to which you have submitted your application (as applicable).
1.3 We will only process your personal data in accordance with this Privacy Notice and applicable law to which we are subject to, in particular the General Data Protection Regulation (EU 2016/679) (hereinafter "GDPR") and any national implementations.
2. CONTACT INFORMATION
2.1 Questions or complaints regarding our processing of your personal data can be addressed to:
WS Audiology A/S
Nymøllevej 6
3540 Lynge
Denmark
E-mail: privacy@wsa.com
2.2 You can also contact our Data Protection Officer (DPO), who is the person responsible for answering questions about personal data. Please use the following email address dpo@wsa.com.
3. The data we collect, the purpose and the legal basis for processing
3.1 We collect and process personal data about you in connection with your application for a job at WSA. The categories of personal data, the purposes for which we process them and our legal bases, are:
3.1.1 When you create and use an account in our WSA-hosted job portal,
3.1.1.1 We collect the following personal data from you to be able to create your account:
- Email address and password.
- Account settings regarding accessibility (recipients) of your profile and information about whether you wish to receive new job posting notifications and information about career opportunities.
3.1.1.2 We collect the following personal data from you, if you choose to populate your account:
- First name, last name, email, primary phone, address, city, country, state/province/region, travel preference, highest education level, region for school of study, country of school for study, name of school for study, employment visa sponsorship needed, resume, CV as well as further profile information (how did you hear about this position, detail of source, information on your work experience and education as well as professional certifications, language skills, geographic mobility etc.).
3.1.1.3 You may communicate with us via our job portal (e.g., by asking questions regarding an application or about a position or your profile). In this context, we will process your personal data (including such that you disclose to us in connection with a query) to the extent required to respond to your query. We will not use such information for other purposes.
3.1.1.4 The purpose of our processing is to deliver the job application services within our job portals (art. 6(1)(b) of GDPR) and our legitimate interest in managing staffing and recruitment for WSA, being informed about who you are, as you are seeking a job with us, and to be able to assess the merits on which you are applying, to determine whether you are suitable for a position as well as to simplify and facilitate the recruitment process as such (art. 6(1)(f) of GDPR).
3.1.1.5 If you consent to it, we will send you new job posting notifications and/or information about career opportunities based on the preferences you have indicated in your account settings within the preference section of your profile (consent, Art. 6(1)(a) of GDPR). You may revoke your consent by changing your account settings in a way so as not to receive new job posting notifications and/or information about career opportunities.
3.1.2 When you apply for a job opening
3.1.2.1 We collect personal data about you such as name, e-mail and pictures (if provided), answers to questions asked through the recruiting procedure, titles, education and other information that you provide to us in, or together with the application.
3.1.2.2 The purpose of our processing is our legitimate interest in managing staffing and recruitment for WSA, being informed about who you are, as you are seeking a job with us, and to be able to assess the merits on which you are applying, to determine whether you are suitable for a position as well as to simplify and facilitate the recruitment process as such, including contacting you regarding scheduling of job interviews, salary negotiations etc., if relevant (art. 6(1)(f) of GDPR).
3.1.3 When we review your application and collect additional information (sourcing)
3.1.3.1 We collect additional relevant information about you from public sources, e.g. LinkedIn and Facebook, and from references you have provided us.
3.1.3.2 The purpose of our processing is our legitimate interest in validating our candidates and facilitating the recruitment process as such (art. 6(1)(f) of GDPR).
3.1.4 For legal purposes
3.1.4.1 We may also process your personal data if we consider it necessary for complying with legal or regulatory obligations (Art. 6(1)(c) of GDPR), or if necessary for establishing, exercising or defending our legal rights (Art. 6(1)(f) and art. 9(2)(f) of GDPR).
3.1.5 Cookies and similar tools
3.1.5.1 When you use our WSA-hosted job portal, personal data about your activities on the portal are collected by use of cookies, if you consent to this. Personal data from cookies are used to remember your preferences, statistical and marketing purposes.
3.1.5.2 We store your personal data on cookies for as long as it is necessary for the purpose(s) for which the data is/are being processed. For more information about how the individual cookies are stored, you can read our Cookie Policy.
3.1.5.3 The legal basis for our processing of personal data is your consent (Art. 6(1)(a) of GDPR) provided in relation to your use of our job portal, including your acceptance of cookies, and our legitimate interest in providing a functional solution (Art. 6(1)(f) of GDPR).
3.2 To the extent that we refer to our legitimate interest as the legal basis for the processing of personal data specified above, we have conducted a balancing test for those interests to ensure that our interest is not overridden by your interests or fundamental rights and freedoms. Please contact us by using the email provided in clause 2 above if you wish to receive more information on the balancing test.
4. Disclosure of your personal data
4.1 With service providers
4.1.1 Your personal data may be shared with third parties who process data on our behalf when providing us with personnel and IT administration services. We do this to enable our hiring process, including for the purpose of hosting and supporting our IT systems.
4.1.2 We have entered into data processing agreements with all our processors to ensure that such processors are only allowed to process data in accordance with our instructions and to ensure such processors establish adequate organisational and technical security measures.
4.2 With WS Audiology
4.2.1 Only authorized employees with a need to know have access to your personal data; this includes sharing of your personal data on a "need-to-know" basis between our employees in the recruiting department.
4.2.2 Certain executives, managers and employees in the WSA Group may also have access to certain personal data, however, on a “need-to-know” basis, if there are legitimate business purposes (e.g., enabling employees in our shared service centers to arrange an interview or as required during an application process). This is based on our legitimate interests in administering applications and candidate information at a group wide level (Art. 6(1)(f) of GDPR).
4.3 For Legal use
4.3.1 We may disclose and use your personal data when we reasonably believe it is necessary to satisfy any applicable law, regulation, legal process or governmental request (Art. 6(1)(c) and art. 6(1)(f) of GDPR).
4.4 Merger or acquisition.
4.4.1 In the event of a merger, acquisition, reorganization, bankruptcy, or similar occurrences, your personal data may be transferred to the succeeding entity. We will make efforts to provide advance notice, share pertinent details about the event and the successor, and request the successor to handle your personal data in alignment with this Privacy Notice. Should the successor process your personal data beyond the authorized scope in this Privacy Notice, they will be responsible for notifying you, providing details about their intended processing, and obtaining your consent, and/or the consent of your parent and/or guardian (if applicable), as required by applicable laws and regulations.
5. Transfer of your Personal data to third countries
5.1 Your data may be transferred to our data processors or group companies established outside the European Economic Area (“EEA”). which, from the perspective of the European Union ("EU"), do not guarantee an "adequate level of protection" for the processing of personal data in accordance with EU standards. In this case, before we transfer the data, we always ensure that the recipient of your personal data remains subject to a level of protection comparable to what is required under the GDPR (and in any event, in line with our commitments in this Privacy Notice). Specifically, we ensure that such recipient either has an appropriate level of data protection and that the requirements of art. 44 of GDPR are met, e.g. due to an adequacy decision by the EU Commission for the respective country in accordance with Art. 45 of the GDPR, or that the so-called EU standard contractual clauses prepared by the European Commission have been agreed with the recipient in accordance with art. 46 of GDPR.
5.2 If you require further information on the above data transfers, including a copy of any agreed EU standard contractual clauses, you can request it from us. Please send your request to us as set out clause 2 above.
6. Data retention
6.1 We will retain your personal data you have provided in our WSA-hosted job portal for as long as you have a profile. Your profile will be deleted after 180 days of inactivity.
6.2 Your job application and other personal data you have sent to us in relation to a specific job opening will be deleted in our systems 6 months after rejection of your application, unless you have consented to being part of our job bank in which case we will retain your application for 12 months after rejection.
6.3 Please contact us using the contact information provided clause 2 above if you require further details about our data retention practices.
7. YOUR RIGHTS
7.1 You can contact us at any time with questions or comments to our processing of your personal data. You also have one or more of the following rights:
- You have the right to receive information about how we process your personal data as well as to receive a copy of the data we keep about you (art. 15 of GDPR).
- You have the right to ask us to correct any incomplete or inaccurate information that we hold about you (art. 16 of GDPR).
- You have the right to ask us to delete your data where there is no good reason for us to keep it anymore. To the extent that we need to keep your data, for example in order for us to comply with our legal obligations or for legal requirements to be established, enforced or defended, we are not required to delete your personal data (art. 17 of GDPR).
- You may have the right to ask us to restrict our processing of your personal data. This enables you to ask us to suspend our processing, for example if you want us to establish its accuracy or the reason for processing it (art. 18 of GDPR).
- You have the right to object at any time, on reasons relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of art. 6 (1)(f) of GDPR (data processing on the basis of a balance of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (art. 21 of GDPR).
- You may have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format ("data portability") and the right to have this data transmitted to another person responsible if the requirement in art. 20(1) of GDPR are present.
- In cases where we process your personal data based on your consent, you are entitled to withdraw it at any time. If you wish to withdraw your consent, please contact us by using the contact information provided in section 2 above.
- If you believe that the processing of your personal data violates data protection law, you also have the right under art. 77 of GDPR to complain to a data protection supervisory authority of your choice, including the data protection supervisory authority of your country or the country of the WSA-entity where you seek employment.
8. Changes to this privacy notice
8.1 We may occasionally update this Privacy Notice to align with changes in our procedures or comply with updated laws and regulations. We encourage you to check these updates periodically. If you have any questions or concerns about our privacy practices, please reach out to us using the contact information provided in clause 2 above.
8.2 This Privacy Notice was last updated 15 October 2025.
