Privacy policy for Schibsted employer branding and recruitment
Publication date: 27-02-2026
1. Our processing of personal data
At Schibsted (Schibsted Media AS for Norway and Schibsted News Media AB for Sweden and Finland), we manage our employer branding and recruitment process through our career page ("Career Page") and by using a related application management system. We are the data controller when we process your personal data in accordance with this privacy policy (Schibsted Media AS for Norway and Schibsted News Media AB for Sweden and Finland, respectively).
In this privacy policy, we explain how we process your personal data if:
You visit our Career Page (you as a "Visitor")
You connect with us via our Career Page, create a profile with us and receive information about current or future vacancies with us (you as a "Connected Candidate")
You apply for a position with us via our Careers page or a third-party service (you as an "Applicant Candidate")
We collect information about you from other parties, websites and services because we believe your profile is of interest for our current or future vacancies (you as a "Sourced Candidate")
We receive information about you from our employees or partners because they believe your profile is of interest for our current or future vacancies (you as a "Referred Candidate")
We receive information about you from a Candidate who lists you as their reference (you as a "Reference").
This privacy policy also describes your rights when we process your personal data and how you can exercise those rights.
When we use the term "Candidate" in this privacy policy, we refer to each and everyone of the Connected Candidates, Applicant Candidates, Sourced Candidates and Referred Candidates, unless otherwise specified.
2. What personal data do we process?
All individuals
Device information - If you visit our Careers page, we collect information about your device, such as IP address, browser type and version, session behaviour, traffic source, screen resolution, preferred language, geographic location, operating system and device settings/usage.
Technical and statistical data - If you visit our Careers page, we collect technical and statistical data about your use of the website, such as information about the URLs you visit and your activity on the website.
Communication data - We will collect and store your communications with us, including the information you provide in your communications. This may include the content of emails, video recordings, social media messages, information you add to your account with us, surveys, etc.
Contact details - Such as your name, email address, telephone number and physical address.
Candidates
Data from interviews, assessments and other information from the recruitment process - Such as notes from interviews with you, assessments and tests taken, salary requirements.
Information in your application - Such as your CV, cover letter, work samples, references, letters of recommendation and education.
Information in your public profile - This means the information we collect about you from public sources related to your professional experience, such as LinkedIn or your current employer's website.
Candidates and references
Information provided by references - This means the information we receive from our employees or partners who refer you to us, or from people you have listed as your references.
3. Where do we get your personal data from?
All individuals
From the Careers page. If you visit our Careers page, we collect technical and statistical information about how you use the Careers page, and information from your device.
Directly from you. Most of the information we process about you is obtained directly from you, for example when you apply for a job with us or join us. You can always choose not to provide certain information. However, some personal data is necessary for us to process your application or provide you with the information you request from us.
References
From the person for whom you are a reference. If a Candidate lists you as their reference, we will collect your contact details from the Candidate in order to contact you.
Candidates
From public sources. We may collect personal data about you from public sources, such as LinkedIn or the website of your current employer.
From our references. We may receive information about you from our employees or partners (such as recruitment service providers) when they consider your profile to be of interest for our current or future vacancies.
From your references. If you provide us with references, we may collect information about you from them.
Data we create ourselves or in collaboration with you. Information about your application and profile is usually created by us, or by us in collaboration with you, during the recruitment process. This may include, for example, notes from interviews with you, assessments and tests taken.
4. For what purposes do we process personal data?
To protect and uphold our rights, interests and the interests of others, for example in connection with legal claims.
Data subjects: The person or persons affected by the legal issue – this may include persons from all categories of persons listed above.
Categories of personal data used: All categories of personal data listed above may be used for this purpose.
Legal basis: Legitimate interests in maintaining our rights, interests and the interests of others.
Share your personal data with other recipients, for the purposes set out in Section 5.
Data subjects: Varies depending on the purpose of the sharing, see Section 5.
Categories of personal data used: All categories of personal data listed above may be used for this purpose.
Legal basis: Varies depending on the purpose of the sharing, see Section 5.
Collect information about your use of the Career Site, using cookies and other tracking technologies, as described in our Cookie Policy.
Persons concerned: Visitors.
Categories of personal data used: Device information.
Legal basis: Consent. For the use of cookies and similar technology necessary for functionality, our legal basis is our legitimate interest in ensuring that the Career Page functions as intended.
Maintain, develop, test and otherwise ensure the security of the Career Site.
Data subjects: Visitors.
Categories of personal data used: Device information, technical and statistical data.
Legal basis: Our legitimate interest in maintaining the security of the solution.
Analyse how the Career Site and its content are used and perform, to obtain statistics and to improve operational performance.
Data subjects: Visitors.
Categories of personal data used: Device information; technical and statistical data.
Legal basis: Our legitimate interest in understanding and improving our solution.
Provide you with updates on job vacancies with us.
Data subjects: Connected Candidates.
Categories of personal data used: Contact details; Communication data.
Legal basis: The processing is necessary to take steps at the request of the employee prior to entering into an employment contract, as well as our legitimate interest in hiring new employees and finding qualified candidates. In certain situations, we may ask for consent when necessary.
Reviewing profiles and applications sent to us. This also includes communicating with you about your application and your profile.
Data subjects: Connected Candidates; Applicant Candidates.
Categories of personal data used: All categories of personal data listed above may be used for this purpose.
Legal basis: The processing is necessary to take steps at the request of the data subject prior to entering into an employment contract, as well as our legitimate interest in hiring new employees and finding qualified candidates. In certain situations, we may ask for consent when necessary.
Collect and evaluate your professional profile on our own initiative. This also includes communicating with you regarding your profile.
Data subjects: Sourced Candidates; Referred Candidates.
Categories of personal data used: All categories of personal data listed above may be used for this purpose.
Legal basis: The processing is necessary to take steps at the request of the employee prior to entering into an employment contract, as well as our legitimate interest in hiring new employees and finding qualified candidates. In certain situations, we may ask for consent when necessary.
Contact you directly about specific future vacancies with us.
Data subjects: Candidates.
Categories of personal data used: All categories of personal data listed above may be used for this purpose.
Legal basis: The processing is necessary to take steps at the request of the employee prior to entering into an employment contract, as well as our legitimate interest in hiring new employees and finding qualified candidates. In certain situations, we may ask for consent when necessary.
Recording interview(s) with you.
Data subjects: Candidates.
Categories of personal data used: Communication data.
Legal basis: The processing is necessary to take steps at the request of the employee prior to entering into an employment contract, as well as our legitimate interest in hiring new employees and finding qualified candidates. In certain situations, we may ask for consent when necessary.
Contacting you to request your participation in surveys.
Data subjects: Candidates.
Categories of personal data used: All categories of personal data listed above may be used for this purpose.
Legal basis: Our legitimate interest in hiring new employees and finding qualified candidates. In certain situations, we may ask for your consent when necessary.
Contact you to ask you to provide information about an applicant and evaluate the information you provide.
Data subjects: References.
Categories of personal data used: Contact details; Communication data.
Legal basis: Our legitimate interest in hiring new employees and finding qualified candidates. In certain situations, we may ask for consent when necessary.
5. Who do we share your personal data with?
Our service providers. We share your personal data with our suppliers who provide services and functions in our employer branding and recruitment process. This includes, for example, recruitment service providers and the provider of our Career Site and associated candidate tracking system.
Our group companies. We share personal data with other companies within the Schibsted group. This means that even if you apply for a position at a specific Schibsted company, we may share your personal data with other companies, for example if we believe you may be a suitable candidate for a position at that other company. This sharing is based on our legitimate interests in assessing suitable candidates for positions within our group companies. The sharing is therefore not consent-based.We also share your personal data with our group companies when they provide us with services and functions for our employer branding and recruitment process, such as access to specific systems and software.
Companies that provide cookies on the Career page. If you agree, cookies will be placed by companies other than us, which will use the data collected by these cookies in accordance with their own privacy policies. You can find information about which cookies this applies to in our Cookie Policy.
To authorities and other public bodies – when we are ordered to do so. We will share your personal data with authorities and other public bodies when we have a legal obligation to do so.
To parties involved in legal proceedings. If necessary to protect or defend our rights, we will share your personal data with public authorities or other parties involved in a potential or existing legal proceeding. This could be, for example, in the case of claims of discrimination.
Mergers and acquisitions, etc. In connection with a potential merger, sale of company assets, financing or acquisition of all or part of our business to another company, we may share your personal data with other parties involved in the process.
6. On what legal basis do we process your personal data?
In order to process your personal data, we need to have a so-called legal basis. A legal basis is a reason for processing personal data that is justified under the GDPR.
When we process your personal data for the purposes described in this privacy policy, the legal basis we rely on is normally that the processing is necessary for our legitimate interest in being able to recruit talent with the skills relevant to us. We have concluded that we have a legitimate interest in being able to process personal data for this purpose, that the processing is necessary to achieve this purpose, and that our interest outweighs your rights and interests in not having your data processed for this purpose. Read more about the legal basis for each purpose in Section 4.
You can contact us if you would like more information about how this assessment was made. See Section 10 for our contact details.
There may be specific circumstances where processing is only carried out if and when you provide your consent to the processing. See Section 9 for more information about your right to withdraw your consent.
7. When do we transfer your personal data outside the EU/EEA and how do we protect it?
We always strive to process your personal data within the EU/EEA.
However, some of our service providers process your personal data outside the EU/EEA. We also use suppliers whose parent company, or whose subcontractor's parent company, is based outside the EU/EEA. In these cases, we have taken into account the risk that personal data may be disclosed to countries outside the EU/EEA, for example due to a request from a public authority.
In cases where another recipient of your personal data (as described in Section 5 above) is based outside the EU/EEA, this also means that your personal data will be transferred outside the EU/EEA.
When we, or one of our suppliers, transfer your personal data outside the EU/EEA, we will ensure that a protection recognised by the GDPR is used to enable the transfer. We use the following safeguards:
A decision by the European Commission that the country outside the EU/EEA to which your personal data is transferred has an adequate level of protection, which corresponds to the level of protection provided by the GDPR. In particular, we rely on the European Commission's adequacy decision for the United States via the so-called EU-US Data Privacy Framework, and adequacy decisions for the United Kingdom.
Conclusion of the European Commission's standard clauses with the recipient of the personal data outside the EU/EEA. This means that the recipient guarantees that the level of protection for your personal data provided by the GDPR still applies and that your rights are still protected.
When your personal data is transferred outside the EU/EEA, we also implement appropriate technical and organisational safeguards to protect the personal data in the event of a disclosure. The exact safeguards we implement depend on what is technically feasible and sufficiently effective for the transfer in question.
If you would like more information about the cases in which your personal data is transferred outside the EU/EEA, please contact us using the contact details in Section 10.
8. How long do we store your personal data?
All individuals
If we process your personal data for the purpose of protecting and enforcing our rights, we will retain the personal data until the relevant legal issue has been fully and finally resolved.
Visitors
We store your personal data for one (1) year for security reasons. The storage periods for cookies are specified in our Cookie Policy. We store your personal data to analyse the performance of the Career Page for as long as we store personal data about you for other purposes.
Candidates
If you are a Connected Candidate (only), we will store your personal data for as long as you are connected with us.
For other types of Candidates, we store your personal data to determine whether you are a suitable candidate for the relevant vacancy/vacancies with us.
If you do not progress beyond the initial recruitment process, we will retain your personal data for as long as necessary to consider, and possibly contact you about, relevant future vacancies. Read more about sharing between group companies in Section 5.
If you are hired, we will store your personal data during your employment for purposes other than those listed above, which you will be informed about.
References
We will retain your personal data for as long as we retain the personal data of the Candidate for whom you acted as a reference.
9. What rights do you have and how can you exercise them?
In this section, you will find information about your rights when we process your personal data. As described below, some of the rights only apply when we process your personal data on a specific legal basis.
If you wish to exercise any of your rights listed here, we suggest that you:
Visit the Data and Privacy page on our Careers page;
Log in to your account with us, where you can use the settings in your account to exercise your rights; or
Contact us directly. See Section 10 for our contact details.
Right to obtain information
You have the right to obtain information about how we process your personal data. You also have the right to be informed if we plan to process your personal data for any purpose other than that for which it was originally collected.
We provide you with such information through this privacy policy, through updates on our Careers page (see also Section 11) and by responding to any questions you may have for us.
Right to access your personal data.
You have the right to know if we process personal data about you and to receive a copy of the data we process about you. When you receive a copy of your data, you will also receive information about how we process your personal data.
Right to access and request the transfer of your personal data to another recipient ("data portability").
You may request a copy of the personal data concerning you that we process in order to fulfil a contract with you, or based on your consent, in a structured, commonly used, machine-readable format. This allows you to use this data elsewhere, for example to transfer it to another recipient. If it is technically feasible, you also have the right to request that we transfer your data directly to another recipient.
Right to have your personal data deleted ("right to be forgotten").
In certain cases, you have the right to have us erase your personal data. This is the case, for example, if it is no longer necessary for us to process the data for the purpose for which we collected it, if you withdraw your consent, if you have objected to the processing and there are no overriding legitimate grounds for the processing. (For separate right to object, see below.)
Right to object to our processing of your personal data.
You have the right to object to the processing of your personal data based on our legitimate interest, by referring to your personal circumstances.
Right to restrict processing.
If you believe that the personal data we process about you is inaccurate, that our processing is unlawful, or that we do not need the information for a specific purpose, you have the right to request that we restrict the processing of such personal data. If you object to our processing, as described above, you may also request that we restrict the processing of this personal data while we assess your request.
When our processing of your personal data is restricted, we will (with the exception of storage) only process the data with your consent or to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons relating to an important public interest.
Right to rectification.
You have the right to request that we correct inaccurate data and that we supplement data about you that you consider incomplete.
Right to withdraw consent.
When we process your personal data based on your consent, you have the right to withdraw that consent at any time. If you do so, we will stop processing your data for the purposes for which you withdrew your consent. However, this does not affect the lawfulness of the processing based on your consent before its withdrawal.
Right to lodge a complaint.
You have the right to complain about our processing of personal data to the Data Protection Authority.
For complaints regarding the use of cookies and similar tracking technologies, you can contact the Swedish Post and Telecom Authority.
10. Where can you turn with comments or questions?
If you want to get in touch with us to exercise your rights, or if you have any questions, comments or feedback about how we handle your personal data, you can contact our privacy team or our data protection officer via this contact form in Swedish or this contact form in Norwegian. We will respond as quickly as possible, and usually within 30 days.
Schibsted News Media AB
Org. no. 559343-3666
Västra Järnvägsgatan 21
111 64 Stockholm
Sverige
Schibsted Media AS
Org.nr. 996 334 767
Postboks 490 Sentrum
0105 OSLO
Norge
11. Updates to this Privacy Policy
We update this privacy policy as necessary – for example, if we start processing your personal data in a new way, if we want to make the information even clearer for you, or if it is necessary to comply with applicable data protection laws.
We encourage you to check this page regularly for any changes. You can always check the top of this page to see when this privacy policy was last updated.