Privacy Policy

Data controller

Nordic Skilled, Teglgårdsvej 18A, 6000 Kolding, Denmark, is the data controller for the processing described here.

Contact: info@nordicskilled.com · WhatsApp +1 555 307 5759

What we collect

From companies using the contact form: company name, registration number, contact person, email, phone, trades needed, headcount, desired start date and message.

About companies we are in dialogue with or contact ourselves: company name, registration number and the contact person's name, work email and phone number, plus notes on our dialogue and documents such as offers and agreements. The legal basis is our legitimate interest in running and following up on our business relationships (GDPR Article 6(1)(f)). You can object at any time, and we will delete the data.

From job candidates using the application form: full name, city, email, phone/WhatsApp, trade, years of experience, school, English level, desired start date, and any files you upload yourself (typically a diploma and CV, which may contain your date of birth and other identifying details).

About candidates and workers we are in a specific process with, we may also register a CPR number and a criminal record certificate. See the section ‘Residence and work permit’.

Automatically: IP address and browser information, used to protect the forms against fraud and spam.

Online test for candidates

We may send candidates a link to a short online test in English, safety at work and their trade. We store the answers, the scores, the time used and how many times the page was left during the test, together with the application.

The test is one of several inputs to our assessment. A person at Nordic Skilled always reviews the result together with the CV, documents and interview, and no decision is made on the basis of the test alone (GDPR Article 22).

The test result is deleted together with the application.

Job interviews

We hold job interviews as video meetings in Google Meet. The invitation is sent from our Google account (Google Workspace).

If you agree at the start of the interview, we record it and get an automatic transcript through Otter.ai, so we remember the conversation correctly. If you say no, we do not record.

Otter.ai is based in the USA, so the recording is transferred to the USA on the basis of your explicit consent (GDPR Article 49(1)(a)). We delete the recording at Otter.ai once we have made a decision, and keep only our own short notes with the application.

Residence and work permit

If you are not an EU/EEA or Swiss citizen, live in Denmark and we move forward with your application, we ask you three things: what your current Danish permit allows you to do (for example work for any employer, or only for one specific employer), when it expires, and whether it is tied to a specific employer. You provide this yourself, and we only note your answer. If you do not live in Denmark, we do not ask.

The application form does not ask for a copy of your passport, residence card or permit, your CPR number or a criminal record certificate. Please do not send them to us unless we explicitly ask you to. If we have registered your CPR number in our system, it is kept separately from your other data, and only our administrators can see it. It is deleted no later than together with your other data held by us. A criminal record certificate in our system is deleted automatically 6 months after we received it.

We use the information to assess whether and how you can be employed by a Danish employer – for example whether the employer needs to apply for a new permit before you can start. The legal basis is our legitimate interest in introducing you to relevant employers, cf. Article 6(1)(f) of the General Data Protection Regulation. You can object, but then we usually cannot introduce you.

When we introduce you to an employer, the employer receives these three pieces of information. The employer is the one who hires you, and the employer must check your passport and permit before you start. The employer may ask you for other information under its own rules.

The information is deleted together with your application.

Check-in for temporary workers

Temporary agency workers employed by Nordic Skilled (EU/EEA citizens only) with whom we have agreed it can register when they arrive at and leave the work site using a personal link on their phone. We store the time and, if the worker allows it, the phone's location at the moment the button is pressed. There is no tracking between the two presses.

The purpose is to document attendance at the work site and to calculate the hours that are billed. The legal basis is our legitimate interest in correct time registration (GDPR Article 6(1)(f)), and the worker is informed before the link is used.

The location is deleted automatically after 30 days. The times are kept as the basis for hours and invoices.

Purpose and legal basis

We process this data to answer enquiries, assess applications and introduce skilled candidates to Danish companies, which hire them directly. Only EU/EEA citizens can be employed by us and hired out as temporary agency workers.

The legal basis is your consent, given by ticking the box on the form, and, once you are in an active process, performance of or steps prior to a contract (GDPR Article 6(1)(a) and (b)).

How long we keep it

Applications and enquiries that do not lead to a placement are kept only for as long as we use them to assess you for a job. You can always have them deleted by writing to info@nordicskilled.com.

Deals with companies that do not become clients are deleted automatically 12 months after the last contact, together with their documents.

Data on workers in an active or completed placement is kept as long as needed for the employment relationship, and afterwards for up to 5 years where Danish bookkeeping law requires it for related invoices.

Information about residence and work permits is deleted together with the application.

Recordings of job interviews are deleted once we have made a decision.

Company records and check-in locations are deleted automatically. Weekly database backups are stored encrypted in the EU and deleted after no more than 4 weeks, and IP addresses from our spam filter are deleted after 30 days.

Who processes your data for us

We use these providers (processors), which may only use the data on our instructions:

Supabase – database and files (applications, tests) and our visitor statistics. Stored in the EU (Frankfurt).

Vercel – website hosting. Processed mainly in the USA.

Resend – sending e-mails from our forms. Processed in the USA.

LetsBot – our WhatsApp channel (your number and messages). Stored in the USA. We do not use LetsBot's AI features.

Google (Google Workspace) – email, calendar and video meetings. Processed partly in the USA.

Otter.ai – records and transcribes job interviews, only when the candidate has agreed to it (see Job interviews). Stored in the USA.

Transfers to the USA: When data is processed in the USA, this is based on the European Commission's Standard Contractual Clauses (GDPR Art. 46). You can get a copy by writing to info@nordicskilled.com. Under US law, US authorities may in some cases access data held by US providers.

Do not send your passport, CV, health information or other sensitive documents via WhatsApp. Use the upload field in the application form.

If you contact us via WhatsApp, that conversation is covered by WhatsApp's (Meta's) own terms and privacy policy.

We never sell your data, and candidates are never charged to be placed.

Security

Access to data requires a login and is limited to the people at Nordic Skilled who need it for their work.

All traffic is encrypted (HTTPS/TLS), and the database is protected by row-level access policies so only approved accounts can read the data.

Your rights

Under GDPR you have the right to access, correct, delete and restrict processing of your data, the right to object, and the right to data portability.

To use your rights, or to withdraw your consent, write to info@nordicskilled.com.

You can lodge a complaint about our processing with the Danish Data Protection Agency, datatilsynet.dk.

Cookies and local storage

The site sets no cookies and uses no marketing or cross-site tracking.

We count visits with our own cookie-free statistics tool. We do not store IP addresses. To count unique visitors within a day, a short one-way code is calculated from the IP address, the browser and a random key that is replaced and deleted every day, so a visit cannot be recognised the next day or traced back to you. We store only which page was viewed, which website the visit came from, campaign codes in the link (UTM), device type, browser, operating system, page language and country based on the browser's time zone. The data is kept at Supabase in the EU and deleted after 13 months. The purpose is to improve the site and see which pages lead to enquiries and applications, and the legal basis is our legitimate interest (GDPR Article 6(1)(f)).

We store one small technical value in your browser's local storage (localStorage) so we only show the Albanian-language suggestion once. It is never sent to us and can be cleared by clearing your browser data.