Privacy notice

Purpose of this privacy notice

This Privacy Notice explains Fairsight’s data processing practices.

Who we are

We are Fairsight AS (henceforth referred to as “Fairsight”, “we”, “us”, or “our”) a company registered in Norway, with the address;

Fairsight AS
Oslo Science Park
Gaustadalléen 21
0349 Oslo
NORWAY
gdpr@fairsight.com

We specialize in online assessment, helping organizations making fair, accurate, and informed decisions in selection for hiring and for development of personnel. We provide digital assessment-related solutions and consultancy services relevant for these purposes.

Who is responsible for your information

For the purpose of Data Protection Legislation, Fairsight typically acts as data processor in relation to the processing of your personal data, whereas our clients act as controllers of those data. It is the entity for whom you are completing an assessment, or otherwise provide personal information to, through the platform who is responsible for decisions about the processing of your personal data.

When and how we collect your information

We collect your personal data by you entering data yourself directly by using our platform and/or by our clients providing the data to us.

What information we collect

We collect information that is relevant to us providing our services.

Demographic information: for example, name, birth year, gender, title, education level.

Technical information: for example, IP address, browser activities and settings, device information, and time of platform access.

Assessment information: for example, your activity in assessments, results.

Platform information: for example, use of features in the platform.

Feedback: for example, feedback you provide regarding aspects of our services or features in the platform, opinions, responses, and feedback regarding another individual.

Sensitive or special information: for example, ethnicity, nationality, needs for assessment accommodations due to, for example, a disability.

How we use the information and its legal basis

The main purposes of the processing of personal information are to provide our services and to develop and improve them.

We process your personal data only in accordance with the instructions included in the contract with the data controller. Our legal grounds for processing your data derive from those of the data controller, typically the employer/potential employer you are connected with. These include:

Legitimate interest

• to provide our online assessments and any other of our products and services.
• to help enable the Client Organization (the employer/potential employer with whom you are connected) to make fair, accurate, and informed decisions for their own selection and/or development purposes.
• to provide feedback on any assessment outcomes to you as the individual.
• to keep our records up to date.
• to conduct research and development to improve our products and services.

Performance of a contract

• to enable the performance of a contract (such as an existing contract of employment) or to take steps prior to the entering into of a contract (such as a potential new contract of employment for a new prospective recruit).

Consent

• with respect to the processing of Sensitive of Special data.

Generally, we always process anonymized data to the extent possible, even when not required to do so. For data processing related to Research and Development and improvement of our services and products, we always use anonymized data unless we have your consent and the need to process data without anonymizing it.

For how long we keep your personal information

We will process your personal data for as long as necessary to fulfill the above stated purpose with a retention period decided by the data controller (in most cases the Client Organization, the employer/potential employer with whom you are connected). Unless we are otherwise directed by the data controller, personal data collected in our platform will be either irrevocably anonymized or deleted after 18 months.

With whom we share personal information

We share your personal information with the data controller, that is, the entity with which we have a contractual arrangement. Other than that, we may share your data with third parties for the purposes set out below:

Subsidiaries of Fairsight:

We may share your personal information with other Fairsight entities and subsidiaries to provide our assessment services.

Third parties (acting as sub-processors):

Your personal data will be processed by carefully selected service providers. Such service providers are, for example, suppliers who provide IT, system administration, and platform services to us, as well as suppliers providing any other services connected to the services we provide. Any third-party service provider is restricted contractually from using or disclosing the information except as necessary to perform services on our behalf or to comply with legal requirements. These third parties appropriately safeguard your data, and their activities are limited to the purposes for which your data was provided.

In certain cases, we may also be required to disclose your personal data to public authorities or other third parties in connection with, for example, audits and legal processes.

We do not sell or otherwise disclose personal information with unaffiliated third parties.

International data transfers

Fairsight is currently located within the EEA (which includes the EU, Iceland, Liechtenstein, and Norway), and data is primarily processed within this region. In the case that data were to be transferred to a country outside the EEA, we will take all reasonably necessary measures to ensure that your personal data is protected and that the transfer is carried out in accordance with this Privacy Notice and with applicable law. For example, we ensure transfers are covered by agreements based on the EU Commission's standard contractual clauses, or other similar mechanisms under applicable local law.

Data security

We ensure that all reasonable necessary steps are taken to protect against the potential loss, unauthorized access, use, alteration, and disclosure. We use appropriate security technologies and procedures, such as encryption and limited access, so that only authorized individuals have access your personal information.

Your rights

You have certain rights in relation to your personal information, which you can exercise by contacting us. We will make every reasonable effort to honor your request promptly or inform you if we require further information to fulfil it. Please note that your request will be shared with the data controller, who has the final responsibility for responding to your request.

Right to access

You have the right to request information on our use of your personal data, and you have the right to access your personal information.

Right to rectification

You have the right to request us to correct your personal data where it is inaccurate or out of date.

Right to erasure (right to be forgotten)

In certain circumstances you have the right to request for the data we hold about you to be erased from our records. Your information can only be erased if your data is no longer necessary for the purpose for which it was collected, and we have no other legal ground for processing the data.

Right to restrict processing

You have the right to restrict the processing of your personal information under certain circumstances: you have requested rectification of your personal data, while we are verifying the accuracy of the data; the processing is unlawful, but you do not want the personal data to be erased; the personal data is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise, or defend legal claims; you have objected to a processing activity, and overriding grounds are in process of being verified.

Right to data portability

You have the right to receive the personal information we process to you or another controller in a commonly used, machine readable format, if the processing of that information is based on your consent or the performance of a contract with you.

Right to object to processing

You have the right to object to the processing of your personal data, but only where we base that processing on our legitimate interests. If you object to such processing, we will stop the processing unless we have a compelling legitimate reason for the processing which outweighs your rights and freedoms.

Right to object to automated processing

Features in the platform make it easier for clients to make fair, accurate, and informed decisions based on personal data. Such features may make use of statistical models developed by us based on our own research or publicly available scientific findings. This type of model may form the basis for automatic decisions, for example, a pre-defined algorithm used to combine assessment results where the combined score is used to decide which candidates are moved from one stage to another in a selection process.

You have the right to obtain human intervention in automated decisions and/or profiling made, express your point of view, and to challenge a decision. If you wish to do so, please contact gdpr@fairsight.com or the data controller directly.

Withdrawal of consent

When processing of your personal data is based on your consent, you have the right to withdraw this consent at any time. To withdraw your consent, please contact gdpr@fairsight.com or the data controller directly.

Right to file a complaint

You have the right to make a complaint regarding our processing of your personal data to your Supervisory Authority or other relevant responsible authority/body.

Updates to this privacy notice

We may update this Privacy Notice from time to time. The most recent version of the Privacy Notice will be published on our website.

This Privacy Notice was last updated May 2023.