Last updated: November 10, 2026
At Co-Worker Technology, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, share and protect personal information in connection with our recruitment, staffing, consulting and employment services, our business relationships and our websites.
1. Data Controller
Co-Worker Technology operates through companies in Sweden, Norway, Denmark, Finland and India.
Co-Worker Technology Sweden AB (Company Registration No. 556803-6585) is the data controller for processing activities where it determines the purposes and means of processing.
Other companies within the corporate group may, depending on the service, recruitment process and contractual relationship, act as independent data controllers, joint data controllers or data processors.
Personal data may be processed by authorised employees within the corporate group to provide recruitment, staffing, consulting and related administrative services.
You may contact us for information about which company is responsible for processing in a specific case.
2. Personal Data We Collect
Depending on your relationship with us, we may process the following categories of personal data:
- Identification and Contact Information: name, address, email address, telephone number, date of birth and, where necessary, national identification numbers or equivalent identification details.
- Professional Information: CV, education, employment history, skills, certifications, references, professional profiles and relevant projects.
- Recruitment and Assignment Information: applications, interviews, availability, salary expectations, preferred work location, work permits, candidate assessments and information relating to current or previous assignments.
- Employment and Financial Information: employment terms, compensation, bank account details, tax information, timesheets and other information required for employment or contract administration.
- Communication Data: emails, messages, meeting notes and other relevant correspondence.
- Technical Data: IP addresses, browser information, cookies and other technical information collected through our digital services.
- Special Categories of Personal Data: such as health information, only where processing is necessary, legally permitted and meets the specific requirements of applicable data protection legislation.
We aim to process only personal data that is relevant and necessary for the intended purpose.
3. Sources of Personal Data
We may collect personal data directly from you, for example when you apply for a position, register a candidate profile, contact us or enter into an agreement.
We may also obtain information from other relevant sources, including:
- professional networks and publicly available professional profiles,
- recruitment platforms and job portals,
- clients and business partners,
- referees, where relevant,
- other companies within our corporate group.
Where personal data is obtained from other sources, we provide information in accordance with applicable data protection legislation.
4. How We Use Personal Data
We may process personal data to:
- manage recruitment processes, candidate assessments and skills matching,
- identify and contact candidates regarding relevant employment and consulting opportunities,
- present candidates and consultants to clients following the necessary approval,
- provide recruitment, staffing, consulting, Try & Hire, interim, Employer of Record (EOR) and external consultant management services,
- administer employment relationships, consulting agreements, assignments, payroll, compensation, invoicing and related obligations,
- manage client relationships, supplier contacts and other business relationships,
- communicate current and future career opportunities,
- develop and improve our services, processes and digital systems,
- maintain information security and prevent misuse,
- comply with legal obligations and manage potential legal claims,
- carry out relevant marketing activities where an appropriate legal basis exists.
5. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds, depending on the purpose and circumstances of the processing:
- Contractual Necessity: where processing is necessary to perform a contract with you or take steps at your request before entering into a contract.
- Legal Obligation: where processing is required to comply with applicable laws and regulations, including employment, tax and accounting requirements.
- Legitimate Interests: where processing is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by your rights and freedoms. This may include recruitment, candidate matching, business communication, information security and the management of legal claims.
- Consent: where we rely on your freely given, specific and informed consent for a particular processing activity, such as retaining your candidate profile for future opportunities.
The applicable legal basis is determined by the specific processing activity. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
6. Recruitment, Candidate Presentation and Future Opportunities
When you apply for a position or consulting assignment, we process your personal data to manage the recruitment process and assess your profile against relevant requirements.
Before presenting your CV and relevant personal information to a specific client, we obtain your approval. If we later wish to present your profile to another client or for a new assignment, we will contact you again.
We may also offer you the option to voluntarily allow us to retain your candidate profile for future recruitment and consulting opportunities. Such consent is handled separately from your approval to be presented to a specific client.
You may contact us at any time to update your profile or withdraw your consent to continued retention for future opportunities.
7. Legitimate Interests
Where we process personal data based on legitimate interests, we assess the necessity of the processing and its potential impact on individuals’ rights and freedoms.
Such processing may include:
- identifying and contacting potential candidates,
- matching professional skills with relevant assignments,
- managing and developing client and business relationships,
- IT and information security,
- preventing fraud and misuse,
- improving services and operational processes,
- managing disputes and legal claims.
You have the right to object to processing based on legitimate interests.
8. Digital Tools, AI and Automated Decision-Making
We may use digital tools, including AI-based features, to support information management, administration, candidate sourcing, skills matching and recruitment processes.
These tools are used in accordance with applicable data protection legislation and relevant requirements concerning transparency, security and human oversight.
We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect individuals unless permitted under applicable law and the required safeguards are implemented.
Where required by law, we provide additional information about automated processing and the rights available to affected individuals.
9. Sharing and Disclosure of Personal Data
We may share personal data with recipients where relevant and necessary for the purposes described in this Privacy Policy.
Recipients may include:
- clients and prospective employers,
- other companies within Co-Worker Technology,
- recruitment systems, client portals and other digital service providers,
- IT, cloud and communication service providers,
- payroll, accounting and HR administration providers,
- legal advisers, auditors and other professional service providers,
- public authorities where required by law,
- other relevant business partners involved in delivering our services.
We limit data sharing to information relevant to the intended purpose and apply appropriate contractual, technical and organisational safeguards.
10. International Processing and Data Transfers
Co-Worker Technology operates through companies in Sweden, Norway, Denmark, Finland and India. Personal data is stored in systems located in the Nordic countries and may be processed by authorised employees within the corporate group, including recruitment and administrative personnel in India.
Processing is carried out in connection with our recruitment, staffing and consulting services and related administration. Access to personal data is restricted according to employees’ responsibilities and business needs.
Where personal data is transferred outside the EU/EEA, applicable requirements under the GDPR must be met, including requirements for lawful transfer mechanisms and appropriate technical, organisational and contractual safeguards.
For further information about international processing of personal data and applicable safeguards, please contact us.
11. Data Retention
We retain personal data for as long as necessary for the purposes for which it was collected and processed, or as required by applicable law.
Retention periods may vary depending on the nature of the information, the relevant recruitment process, the candidate’s continued interest in future opportunities, ongoing business relationships, contractual arrangements and applicable legal obligations.
Candidate profiles retained for future recruitment and consulting opportunities are kept for as long as there is a valid purpose and legal basis for continued processing. We periodically review the need for continued retention.
When personal data is no longer required for its intended purpose and no other legal basis justifies its retention, it is securely deleted or anonymised.
12. Cookies and Website Technologies
We use cookies and similar technologies on our website. Necessary cookies keep the website working and remember your cookie choice. Other cookies are only used if you give your consent in our cookie banner:
- Analytics – helps us understand how the website is used, for example which pages are visited and where visitors come from (Google Analytics, Google Ireland Ltd).
- Functional – enables embedded content and extra features, such as videos and meeting booking from other providers.
- Marketing – helps us measure and target our advertising on LinkedIn (LinkedIn Insight Tag, LinkedIn Ireland Unlimited Company).
Your choice is saved for up to 12 months. You can change or withdraw your consent at any time via Cookie settings, which is also found at the bottom of every page. If you withdraw your consent, the cookies concerned are deleted. Google and LinkedIn may process data outside the EU/EEA; such transfers are covered by the EU–US Data Privacy Framework or standard contractual clauses.
We use Vercel Web Analytics to measure how the website is used, for example which pages are visited. The service does not use cookies and does not store IP addresses. Visitors are counted using an anonymised identifier that is reset every 24 hours, and we only see the statistics in aggregated form.
If you book a meeting, the booking calendar is provided by Microsoft Bookings. Messages sent via our contact form are delivered to us through Formspree. These services process the information you submit in order to deliver it to us.
If you send a job description via the form on our website, we process the information you provide – name, company, email, phone and any attached file or text about the role or assignment – to answer your request and find matching candidate profiles. The information is delivered to us through Formspree. The website also saves a small setting in your browser (local storage) if you close the language suggestion, so that it is not shown again. It is not used for tracking.
13. Your Rights
Under applicable data protection legislation, you may have the right to:
- receive information about how your personal data is processed,
- request access to your personal data,
- request correction of inaccurate or incomplete information,
- request deletion of personal data,
- request restriction of processing,
- object to processing based on legitimate interests,
- request data portability where applicable,
- withdraw consent where processing is based on consent,
- exercise applicable rights concerning automated decision-making.
Certain rights may be subject to legal limitations or depend on the legal basis for processing.
To exercise any of your rights, please contact us using the details below.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or another competent data protection supervisory authority.
14. Information Security
We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration and unlawful processing.
These measures may include access restrictions, authentication, encryption where appropriate, security procedures and personal data breach management.
Security measures are adapted to the nature, scope and risks of the processing activities.
15. Changes to This Privacy Policy
We may update this Privacy Policy when necessary, for example due to changes in our business operations, services or applicable legislation.
The latest version will be published on our website together with the date of the most recent update. Where required by law, we will provide additional information about material changes.
16. Contact Us
If you have any questions about this Privacy Policy or our processing of personal data, please contact:
Co-Worker Technology Sweden AB
Company Registration No. 556803-6585
Waldenströmsplan 2
802 50 Gävle, Sweden
Email: info@co-workertech.com
Phone: +46 10 160 06 55
Website: www.co-workertech.com