Privacy policy for the Stravito employer branding and recruitment
Date of publication: 04-08-2026
We at Stravito manage our employer branding and recruitment process through our career site (the "Career Site"), and by using a related applicant tracking system.
In this privacy policy, we explain how we process your personal data if:
You visit our Career Site (you being a "Visitor")
You connect with us via our Career Site, to create a profile with us and receive information about current or future vacancies with us (you being a "Connecting Candidate")
You apply for a position with us, via our Career Site or a third party service (you being an "Applying Candidate")
We collect information about you from other parties, sites and services, since we believe your profile is of interest for our current or future vacancies (you being a "Sourced Candidate")
We receive information about you from our employees or partners, since they believe your profile is of interest for our current or future vacancies (you being a "Referred Candidate")
We receive information about you from a Candidate, who lists you as their reference (you being a "Reference").
This privacy policy also describes what rights you have when we process your personal data, and how you can exercise these rights.
When we use the term "Candidate" in this privacy policy, we are referring to each of Connecting Candidates; Applying Candidates; Sourced Candidates; and Referred Candidates, unless it's stated otherwise.
When we use the terms "Stravito", "we" or "us" in this privacy policy, we are referring to Stravito AB, Vasagatan 28, 111 20 Stockholm, Sweden, registered with the Swedish Companies Registration Office under company number 559114-6047.
A note on our use of AI. We use AI tools to help us run our recruitment process, including to help us review applications. We never let an AI tool decide, on its own, whether you move forward or are rejected — a person at Stravito always makes that call. Section 5 explains in full what we do, what we don't do, and what you can ask us for.
1. About processing of personal data
Personal data is all information that can be directly or indirectly linked to a living, physical person. Examples of personal data are: name, e-mail address, telephone number and IP address. Processing of personal data is any automated use of personal data — such as collecting, creating, analyzing, sharing, and deleting personal data.
There are laws and regulations on how companies may process personal data, so-called data protection laws. Different data protection laws apply to different types of use of personal data, and in different parts of the world. An example of a data protection law that is relevant for our use of your personal data, as described in this privacy policy, is the EU Data Protection Regulation (2016/679, "GDPR").
Most obligations under the GDPR apply to the so-called data controller. A data controller is the entity that decides for which purposes personal data will be processed, and how the processing will be executed. The data controller can use a so-called data processor. A data processor is an entity that is only allowed to process personal data as instructed by the data controller, and may not use the personal data for its own purposes.
We are the data controller when we process your personal data as described in this Privacy policy. The AI tools we use in our recruitment process, described in Section 5, act as our data processors.
2. What personal data do we process?
All individuals
Device information — If you visit our Career Site, we will collect information about your device, such as IP address, browser type and version, session behaviour, traffic source, screen resolution, preferred language, geographic location, operating system and device settings/usage.
Technical and statistical data — If you visit our Career Site, we will collect technical and statistical data about your use of the site, such as information about which URLs you visit, and your activity on the site.
Communications data — We will collect and store your communication with us, including the information you provided in the communication. This may include the content of emails, video recordings, messages on social media, the information you add to your account with us, surveys, etc.
Contact details — Such as your name, email address, telephone number and physical address.
Candidates
Data from interviews, tests, assessments and other information from the recruitment process — Such as notes from interviews with you, assessments and tests made, salary requirements.
Information in your application — Such as your CV, cover letter, work samples, references, letters of recommendation and education.
Information in your public profile — Meaning the information we collect about you from public sources related to your professional experience, such as LinkedIn or the website of your current employer.
Information provided by references — Meaning the information we receive from our employees or partners who refer you to us, or by the persons you have listed as your references.
Information in a background check — This normally includes your contact details, your credit history and criminal records history.
AI-generated information about you — Meaning information that an AI tool produces from the data listed above, such as: structured profile fields extracted from your CV; summaries of your application; a list of skills and experience identified in your application; an indicative score, ranking or "match" against the criteria we have set for a role; and suggested interview questions. We treat this information as personal data about you, and it is covered by the rights described in Section 10.
3. Where do we receive your personal data from?
All individuals
From the Career Site. If you visit our Career Site, we collect technical and statistical information about how you use the Career Site, and information from your device.
Directly from you. Most of the information we process about you, we receive directly from you, for example when you apply for a position with us or connect with us. You can always choose not to provide us with certain information. However, some personal data is necessary in order for us to process your application or provide you the information you request to get from us.
References
Candidates
From public sources. We may collect personal data about you from public sources, such as LinkedIn or the website of your current employer.
From our references. We may receive information about you from our employees or partners (such as recruitment service providers), when they believe your profile is of interest for our current or future vacancies.
From your references. If you provide us with references, we may collect information about you from them.
Data we create ourselves, with AI assistance, or in cooperation with you. Information about your application and profile is usually created by us, or by us in cooperation with you, during the recruitment process. This may for example include notes from interviews with you, assessments and tests made. Some of this information is generated by AI tools working on the data you have given us, as described in Section 5.
4. What do we use your personal data for, and on what legal basis?
Protect and enforce our rights, interests and the interests of others, for example in connection with legal claims.
Affected individuals: The individual(s) affected by the legal issue — this may include persons from all categories of individuals listed above.
Categories of personal data used: All the categories of personal data listed above can be used for this purpose.
Legal basis: The legal basis depends on the specific context, but will normally be either that the processing is necessary for compliance with a legal obligation to which we are subject; or a balancing of interests, based on legitimate interests pursued by us or by a third party.
Share your personal data with other recipients, for the purposes mentioned in Section 6 below.
Affected individuals: Varies depending on the purpose of the sharing, see Section 6 below.
Categories of personal data used: All the categories of personal data listed above may be used for this purpose.
Legal basis: When sharing your personal data with our service providers and with our group companies: A balancing of interests, based on our legitimate interest in creating an effective, smooth and thorough recruitment process for Stravito and for our Candidates. When sharing your personal data with companies providing cookies: See the headline just below. When sharing your personal data with authorities, other public actors or otherwise to parties involved in legal proceedings: See the headline just above.
Collect information about your use of the Career Site, using cookies and other tracking technologies, as described in our Cookie Policy.
Affected individuals: Visitors.
Categories of personal data used: Device information.
Legal basis: For necessary cookies, a balancing of interests, based on our legitimate interest in being able to provide our Career Site to those visiting it. For cookies used for all other purposes: Your consent.
Maintain, develop, test, and otherwise ensure the security of the Career Site.
Affected individuals: Visitors.
Categories of personal data used: Device information; Technical and statistical data.
Legal basis: A balancing of interests, based on our legitimate interest in being able to provide a safe, secure and compliant Career Site.
Analyse how the Career Site and its content is being used and is performing, to get statistics and to improve operational performance.
Affected individuals: Visitors.
Categories of personal data used: Device information; Technical and statistical data.
Legal basis: A balancing of interests, based on our legitimate interest in being able to develop and improve our Career Site.
Provide you with updates about vacancies with us.
Affected individuals: Connecting Candidates.
Categories of personal data used: Contact details; Communications data.
Legal basis: A balancing of interests, based on our legitimate interest in creating an effective, smooth and thorough recruitment process for Stravito and for our Candidates.
Review profiles and applications sent to us. This also includes communicating with you about your application and profile.
Affected individuals: Connecting Candidates; Applying Candidates.
Categories of personal data used: All the categories of personal data listed above may be used for this purpose.
Legal basis: A balancing of interests, based on our legitimate interest in creating an effective, smooth and thorough recruitment process for Stravito and for our Candidates.
Use AI tools to help us structure, summarise and assess profiles and applications, and to prepare for our conversations with you, as described in Section 5.
Affected individuals: Candidates.
Categories of personal data used: Information in your application; Information in your public profile; Data from interviews, tests, assessments and other information from the recruitment process; Communications data; Contact details; AI-generated information about you.
Legal basis: A balancing of interests, based on our legitimate interest in running an efficient, consistent and thorough recruitment process, and in identifying the candidates whose skills and experience best match the requirements of a role. This is the same interest on which we rely to review your application at all; AI tools are a means of pursuing it, not a separate purpose. In assessing that our interest is not overridden by your rights, we took into account in particular that the output of these tools is always reviewed by a person, that they do not make decisions about you, and that you can object to their use and ask for a review without AI assistance — see Section 5.5.
Review and check the quality, accuracy and fairness of our AI-assisted recruitment process.
Affected individuals: Candidates.
Categories of personal data used: All the categories of personal data listed above may be used for this purpose.
Legal basis: Where a specific law requires us to carry out this checking, compliance with a legal obligation to which we are subject. Otherwise, a balancing of interests, based on our legitimate interest — which we consider you share — in making sure that the tools we use in recruitment produce accurate results and do not lead to unfair or discriminatory outcomes. We use data we already hold for this purpose and do not collect anything additional from you for it.
Collect and evaluate your professional profile on our own initiative. This also includes communicating with you regarding your profile.
Affected individuals: Sourced Candidates; Referred Candidates.
Categories of personal data used: All the categories of personal data listed above may be used for this purpose.
Legal basis: A balancing of interests, based on our legitimate interest in finding the best possible candidate for open positions with us.
Consider you for, and contact you about, future vacancies with us.
Affected individuals: Candidates who have given us their consent for this processing.
Categories of personal data used: All the categories of personal data listed above may be used for this purpose.
Legal basis: Your consent. See Section 9 for how long we keep your data for this purpose, and Section 10 for how to withdraw your consent.
Record the interview(s) with you, and use AI tools to transcribe and summarise the recording and to draft answers to our pre-set interview questions from the transcript.
Affected individuals: Candidates.
Categories of personal data used: Communications data; Data from interviews, tests, assessments and other information from the recruitment process; AI-generated information about you.
Legal basis: Your consent. We will tell you before the interview that we propose to record it and that an AI tool will produce a transcript and a summary. You can decline, and you can withdraw your consent afterwards, without this affecting your application.
Ask you to complete the test(s) relevant for the position you are considered for, and evaluate the results of the tests.
Affected individuals: Candidates.
Categories of personal data used: Data from interviews, tests, assessments and other information from the recruitment process.
Legal basis: A balancing of interests, based on our legitimate interest in creating an effective, smooth and thorough recruitment process for Stravito and for our Candidates.
Perform a so-called background check, when you are offered a position for which a background check is necessary.
Affected individuals: Candidates who have been offered a position which requires a background check. The exact content and circumstances of the background check differs depending on the location and position. We will inform you about the content and circumstances before we conduct the background check.
Categories of personal data used: Information in a background check.
Legal basis: A balancing of interests, based on our legitimate interest in protecting Stravito's assets and information.
Contact you to ask for your participation in surveys.
Affected individuals: Candidates.
Categories of personal data used: All the categories of personal data listed above may be used for this purpose, except for Information in a background check.
Legal basis: A balancing of interests, based on our legitimate interest in creating an effective, smooth and thorough recruitment process for Stravito and for our Candidates.
Contact a Reference to ask the Reference to provide information about a Candidate, and evaluate the information that the Reference provides.
Affected individuals: References, Candidates.
Categories of personal data used: For References: Contact details; Communications data. For Candidates: Information provided by References.
Legal basis: A balancing of interests, based on our legitimate interest in creating an effective, smooth and thorough recruitment process for Stravito and for our Candidates.
5. How we use AI, profiling and automated processing in our recruitment process
We use AI tools to make our recruitment process faster and more consistent. This section explains what those tools do, what they don't do, how they relate to the decisions we make about you, and what you can ask us for. We have written it in plain language on purpose — if anything here is unclear, please contact us at jobs@stravito.com.
5.1 What we use AI for
The purposes for which we process your personal data are listed in Section 4. We use AI tools within the following of those purposes:
To review profiles and applications sent to us, and to communicate with you about your application, we use AI tools to:
Read and structure your application — for example, extracting your work history, education and skills from your CV and populating the fields of your candidate profile, so that a recruiter does not have to retype them.
Summarise your application — producing a short summary of your CV, cover letter and answers, so the hiring team can get an overview quickly.
Compare your profile against the criteria we have set for the role. We define, in advance and in writing, the skills, experience and qualifications a role requires. An AI tool then checks your application against those criteria and produces an indicative assessment — for example, which criteria appear to be met, and a score or ordering that helps us decide the sequence in which to review applications. This output is a starting point for a human review, not a decision.
Suggest interview questions based on the role and on what you have written in your application.
Draft our messages to you, including where we are letting you know that you have not been selected. A person reviews and sends every such message.
To collect and evaluate your professional profile on our own initiative, and to consider you for future vacancies, we use AI tools to:
Where you have consented to us recording an interview with you, we use AI tools to:
Transcribe the recording, and produce a summary of the conversation and draft answers to our pre-set interview questions from that transcript. We do not use AI to analyse how you speak, look or behave — see Section 5.2.
To write our job adverts and general outreach, we use AI tools to draft and improve copy. This does not involve your personal data unless we are writing to you individually.
5.2 What we do not use AI for
To be explicit, we do not:
Make the important decisions about you. No AI tool rejects an application, advances a candidate, or makes any other decision that matters to your progress on its own. A named person at Stravito makes every such decision, and does so having looked at your actual application — not only at an AI-generated summary or score. Section 5.6 explains this in more detail, including the automated processing we do carry out.
Analyse your emotions, personality, facial expressions, tone of voice or body language. We do not use emotion recognition, affect analysis, voice analysis or automated video assessment of any kind.
Infer or use protected characteristics. We do not use AI to infer, and we do not allow role criteria to include, characteristics such as your ethnicity, nationality, religion, health, disability, age, gender, sexual orientation, trade union membership or political opinions.
Let AI providers train their models on your data. All the AI tools we use are covered by contracts under which your personal data is processed only on our instructions and is not used to train or improve the providers' general models.
Use free or personal AI accounts. Our recruiters are not permitted to paste your application into consumer AI services. Only the approved, contracted tools listed in Section 5.4 may be used, and only within our approved workflows.
5.3 How we keep a human in charge
Every AI-assisted assessment is reviewed by a member of the hiring team before it affects your application.
Reviewers are instructed and trained to treat AI output as one input among several, to check it against your actual application, and to override it where it looks wrong or incomplete.
The criteria we ask the AI to assess against are set by us, based on the requirements of the role, and are documented.
We periodically review a sample of AI-assisted assessments to check that the outputs are accurate, that they are consistent with what a reviewer would independently conclude from the same application, and that the criteria we assess against remain relevant to the role. Where we find a problem, we change the criteria, the configuration, or the tool.
People involved in our recruitment receive training on the capabilities, limitations and risks of the AI tools they use.
5.4 Which AI tools we use
We currently use the following AI tools in our recruitment process:
Teamtailor, provided by Teamtailor AB (Sweden). This is our applicant tracking system. We use its built-in AI features to parse CVs, summarise applications, produce indicative matches against the criteria we have set for a role, and help us draft our communications with you.
Claude, provided by Anthropic PBC (USA). We use it to summarise and structure application material, to help us draft our communications with you, and to prepare interview questions.
ChatGPT, provided by OpenAI Ireland Ltd. (Ireland). We use it to summarise and structure application material, to help us draft our communications with you, and to prepare interview questions.
Gemini, provided by Google Cloud EMEA Limited (Ireland). We use it to summarise and structure application material, to help us draft our communications with you, and to prepare interview questions.
Each of these providers acts as our data processor. They may only process your personal data on our documented instructions, under a data processing agreement, and may not use it for their own purposes, including to train their AI models. Section 8 explains how we protect your data when it is transferred outside the EU/EEA.
We keep this list up to date. If we start using a materially different AI tool, or use AI in a materially different way, we will update this policy.
5.5 What you can ask us for
In addition to the rights set out in Section 10, and regardless of whether they strictly apply, we will honour the following if you ask:
An explanation. You can ask us to explain, in plain language, how AI was used in the handling of your application, what criteria were applied, and what the AI-generated output about you said.
A human review. You can ask a person at Stravito to reconsider your application, and to explain their reasoning.
A review without AI assistance. You can ask us to review your application without using AI tools to summarise or assess it. This will not disadvantage your application, and it may take us a little longer to get back to you.
Correction. If an AI tool has extracted something from your CV incorrectly, tell us and we will fix it.
To make any of these requests, email jobs@stravito.com.
5.6 Profiling and automated decision-making
Some of what we describe above involves evaluating your personal characteristics automatically in order to assess how suitable you are for a role. Under the GDPR this is called profiling, and we want to be straightforward that we do it. Specifically:
We screen profiles against criteria we have set for a role, and sort them according to how many of those criteria they appear to meet.
We use AI tools to assess which candidates already in our database might suit a new opening.
Where a role involves a test or structured assessment, the results are scored automatically and used as one input in evaluating your suitability.
We use pre-set rules in our applicant tracking system that can move an application forward automatically based on defined conditions — for example, your location, your right to work in the country of the role, or your answers to specific application questions.
What we do not do is rely on automated processing alone to make decisions that matter to your progress — such as whether to interview you, or whether to make you an offer. Every decision of that kind is made by a person at Stravito who has reviewed your application. You are therefore not subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you, within the meaning of Article 22 GDPR.
You can ask us whether we have carried out profiling in relation to your application, and what it involved — see "Right to access your personal data" in Section 10. You can also object to that profiling — see "Right to object against our processing of your personal data" in Section 10.
6. Whom do we share your personal data with?
Our service providers. We share your personal data with our suppliers who provide services and functionality in our employer branding and recruitment process. This includes:
Recruitment service providers, and the supplier of our Career Site and related applicant tracking system. These suppliers act as our data processors.
The providers of the AI tools listed in Section 5.4. These providers act as our data processors.
The partner used to conduct tests, when required in the recruitment process. This partner is Alva Labs AB, and they act as a data controller when processing your personal data.
The partner used to conduct background checks, when required in the recruitment process. This partner is Zinc Work Ltd, and they act as a data controller when processing your personal data.
Teamtailor in turn uses its own sub-processors to deliver its service to us. Teamtailor maintains a current list of these, which you can find here.
Our group companies. We share your personal data with our group companies, when they provide us services and functionality to our employer branding and recruitment process, such as access to particular systems and software.
Companies providing cookies on the Career Site. If you consent to it, cookies are set by other companies than us, who will use the data collected by these cookies in accordance with their own privacy policy. You can find information about which cookies this applies to in our Cookie Policy.
To authorities and other public actors — when we are ordered to do so. We will share your personal data with authorities and other public actors when we have a legal obligation to do so.
To parties involved in legal proceedings. If needed to protect or defend our rights, we share your personal data with public authorities or with other parties involved in a potential or existing legal proceeding. This can for example be in case of discrimination claims.
Mergers and acquisitions etc. In connection with a potential merger, sale of company assets, financing, or acquisition of all or part of our business to another company, we may share your personal data to other parties involved in the process.
7. More about our legal basis
To be able to process your personal data, we need to have a so-called legal basis. A legal basis is a reason for processing the personal data that is justified under the GDPR. The legal basis we rely on for each of our purposes is set out against that purpose in Section 4.
Where we rely on a balancing of interests, we have assessed in each case that we have a legitimate interest in the processing, that the processing is necessary in order to achieve that interest, and that our interest is not overridden by your rights and freedoms. You can contact us for more information about how we made that assessment for any particular purpose — see Sections 10 and 11 below.
8. When do we transfer your personal data outside of the EU/EEA, and how do we protect it then?
We always strive to process your personal data within the EU/EEA area.
However, some of our service providers process your personal data outside of the EU/EEA. This includes some of the AI tools described in Section 5.4, whose providers are based in the United States. We also use suppliers whose parent company, or whose subcontractor's parent company, is based outside the EU/EEA. In these cases, we have taken into account the risk that the personal data may be disclosed to countries outside the EU/EEA, for example because of an authority request.
In cases where another recipient of your personal data (as described in Section 6 above) is based outside the EU/EEA, this will also mean that your personal data is transferred outside the EU/EEA.
When we, or one of our suppliers, transfer your personal data outside the EU/EEA, we will ensure that a safeguard recognized by the GDPR is used to enable the transfer. We use the following safeguards:
When your personal data is transferred outside the EU/EEA, we also implement appropriate technical and organizational safeguards, to protect the personal data in case of a disclosure. Exactly which protective measures we implement depends on what is technically feasible, and sufficiently effective, for the particular transfer.
If you want more information about the cases in which your personal data is transferred outside the EU/EEA you can contact us using the contact details in Sections 10 and 11 below.
9. For how long do we keep your personal data?
All individuals
If we process your personal data for the purpose of being able to protect and enforce our rights, we will keep your personal data until the relevant legal issue has been fully and finally resolved.
Visitors
We keep your personal data for one (1) year for security purposes. The retention periods for cookies are set out in our Cookie Policy. We keep your personal data to analyse the performance of the Career Site for as long as we keep personal data about you for other purposes.
Candidates
If you are a Connecting Candidate (only), we keep your personal data for as long as you remain connected with us.
For other types of Candidates, we keep your personal data for as long as we need it to decide whether you are a suitable candidate for the vacancy or vacancies you are being considered for.
If you have consented to us considering you for future vacancies, we keep your personal data for twenty-four (24) (confirm) months from your application, or from our most recent contact with you, whichever is later. Before that period ends, we will ask you whether you would like us to keep your data for a further twenty-four (24) (confirm) months. If you do not reply, or if you withdraw your consent, we will delete your personal data.
If you have not consented to this, we delete your personal data once the recruitment process for the position you applied for has concluded, unless we need to keep it for one of the other purposes described in this policy.
AI-generated information about you is kept as part of your candidate record and is deleted at the same time as the rest of that record. Copies held temporarily by an AI provider in order to deliver the service to us are deleted in accordance with our agreement with that provider, and are not retained for the provider's own purposes.
If you are hired, we will keep your personal data during your employment, for other purposes than those stated above, which you will be informed of.
References
We keep your personal data for as long as we keep the personal data of the Candidate for whom you acted as a reference.
10. What rights do you have, and how can you exercise them?
In this section, you will find information about the rights you have when we process your personal data. As described below, some of the rights only come into play when we process your personal data under a particular legal basis.
If you want to exercise any of the rights listed here, we suggest that you:
Visit the Data & Privacy page on our Career Site, where we offer features to let you exercise your rights;
Log in to your account with us, where you can use the settings in the account to exercise your rights; or
Contact us directly at jobs@stravito.com.
Right to be informed
You have the right to be informed about how we process your personal data. You also have the right to be informed if we plan to process your personal data for any purpose other than that for which it was originally collected.
We provide you with such information through this privacy policy, through updates on our Career Site (see also Section 12 below), and by answering any questions you may have for us.
Right to access your personal data.
You have the right to know if we process personal data about you, and to receive a copy of the data we process about you. This includes the AI-generated information about you described in Section 2, and information about any profiling we have carried out in relation to your application, as described in Section 5.6. In connection with receiving the copy of your data, you will also receive information about how we process your personal data.
Right to access and to request a transfer of your personal data to another recipient ("data portability").
You can request a copy of the personal data relating to you that we process for the performance of a contract with you, or based on your consent, in a structured, commonly used, machine-readable format. This will allow you to use this data somewhere else, for example to transfer it to another recipient. If technically feasible, you also have the right to request that we transfer your data directly to another recipient.
Right to have your personal data deleted ("right to be forgotten").
In some cases, you have the right to have us delete personal data about you. This is for example the case if it's no longer necessary for us to process the data for the purpose for which we collected it; if you withdraw your consent; if you have objected to the processing and there are no legitimate, overriding justifications for the processing. (For the separate right to object, see below.)
Right to object against our processing of your personal data.
You have the right to object to processing of your personal data which is based on our legitimate interest, by referencing your personal circumstances. This includes the right to object to our use of AI tools to assess your application, and to the profiling described in Section 5.6; see Section 5.5 for how to ask.
Rights in relation to our use of AI
We do not make decisions about you based solely on automated processing. Even so, you can ask us for an explanation of how AI was used in handling your application, for a human review of a decision, for a review without AI assistance, and for correction of anything an AI tool has recorded about you incorrectly. See Section 5.5 for how to make these requests.
Right to restrict processing.
If you believe that the personal data we process about you is inaccurate, that our processing is unlawful, or that we don't need the information for a specific purpose, you have the right to request that we restrict the processing of such personal data. If you object to our processing, as described just above, you can also request us to restrict processing of that personal data while we make our assessment of your request.
When our processing of your personal data is restricted, we will (with the exception of storage) only process the data with your consent or for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons relating to an important public interest.
Right to rectification.
You have the right to request that we rectify inaccurate information, and that we complete information about you that you consider incomplete.
Right to withdraw your consent.
When we process your personal data based on your consent, you have the right to withdraw that consent at any time. If you do so, we will stop processing your data for the purposes you've withdrawn your consent for. However, it doesn't affect the lawfulness of processing that was based on your consent before it was withdrawn.
Right to raise a complaint.
If you have complaints about our processing of your personal data, you can raise a complaint with the data protection authority in Sweden. You can find their contact details here.
You can also lodge a complaint with your national data protection authority, which you can find listed here if you are based in the EU. If you are based in the UK, you can lodge a complaint with the Information Commissioner's Office, here.
11. Where can you turn with comments or questions?
If you want to get in touch with us to exercise your rights, or if you have any questions, comments or concerns about how we handle your personal data — including about our use of AI — you can reach us by sending an email to jobs@stravito.com.
Stravito also has a Data Protection Officer (DPO) who monitors our compliance with the GDPR. Stravito's DPO can be reached by email to privacy@stravito.com.
12. Updates to this Privacy policy
We update this privacy policy when necessary — for example, because we start processing your personal data in a new way, because we want to make the information even clearer to you, or if it's necessary to do so in order to comply with applicable data protection laws.
We encourage you to regularly check this page for any changes. You can always check the top of this page to see when this privacy policy was last updated.