Privacy Policy

2. What personal data we collect

We only collect personal data that is relevant and necessary for recruitment and assessment of candidates.

Examples of personal data we may collect:

• Full Name
• Email Address
• Date of Birth
• Nationality
• Phone Number
• Current Location
• Resume / CV and related documents
• Portfolio, LinkedIn, GitHub, or website links
• Diplomas and Certificates
• Employment history and contact details for referees
• Cover Note
• Work history, education, certifications and languages
• The industries and disciplines you work in
• Right to work, availability, notice period and earliest start date
• Your account details, and information about your use of your account, collected to keep it secure and working properly

Cookies and web analytics

We use cookies to provide essential site functionality and — with your consent — to collect anonymized analytics data. Essential cookies are strictly necessary for the website to function. Analytics cookies (for example Google Analytics) collect de‑identified and aggregated information such as page views, session duration and browser/technology data to help us improve the website.

On first visit we present a cookie consent tool that lets you choose your preferences. You may change these preferences at any time via the cookie settings on the site. Analytics data is processed in aggregated/de‑identified form and is not used to identify individuals for marketing purposes.

We do not intentionally collect sensitive personal data unless required by law.

3. How we collect personal data

Personal data is collected through:

• Our applicant portal, and previously our public job application form
• Direct communication (email or messages)
• Your applicant account and profile on our applicant portal
• Interviews or recruitment-related discussions

Providing personal data is voluntary. However, failure to provide necessary information may prevent us from processing your application.

Application tracking

Applications are submitted through our applicant portal (see Section 3c). Applications received before 1 October 2026 were submitted through a form provided by Atlassian (JIRA), which fed an internal board used as our applicant tracking system. Data from those applications is kept in our internal Human Resource Management (HRM) system and, until it is removed, on that board. Access is restricted to authorised HR and relevant internal staff on a need-to-know basis. Processing is based on your consent and/or our legitimate interest in recruitment. Where third-party providers process personal data on our behalf, this is governed by Data Processing Agreements (DPAs).

3a. Reference check submissions

When ENERSURS AS sends a reference check request to a reference provider (a person nominated by a job candidate), and that person submits a response via our secure reference form, we collect and store the following data:

• The responses provided in the reference questionnaire
• The date and time of submission
• Technical submission details (such as IP address and browser/device information) for identity verification and audit purposes

This data is processed on the basis of our legitimate interest (GDPR Article 6(1)(f)) in verifying the authenticity of reference responses and maintaining an accurate recruitment audit trail. It is retained as part of the candidate's recruitment record and is accessible only to authorised HR personnel.

A confirmation email containing a copy of the submitted responses is sent to the reference provider's email address as a record of their participation.

Reference providers may exercise their data subject rights (see Section 9) by contacting us at info@enersurs.no.

3b. Business inquiries (Contact form)

When you submit an inquiry through the contact form on our website (for example about recruitment, engineering consultancy, digital solutions, a business partnership, or a general question), we collect the personal data you provide, which may include:

• Full name
• Email address
• Phone number (optional)
• Company name (optional)
• The type of inquiry and any related details you choose to provide (for example, roles you are hiring for, project timeline, or product interest)
• The content of your message

This data is used solely to respond to your inquiry. It is processed on the basis of our legitimate interest in responding to business inquiries (GDPR Article 6(1)(f)) or, where your inquiry concerns a potential contract with us, steps taken at your request prior to entering into a contract (GDPR Article 6(1)(b)).

Submissions are protected by Google reCAPTCHA to help prevent automated and spam submissions. We do not store contact form submissions in a database — each inquiry is delivered directly to the relevant team by email and is retained only for as long as necessary to respond to and resolve it, consistent with our general email retention practices.

We do not use contact form data for marketing purposes without your separate consent, and we do not share it with third parties except as described in Section 7. You may exercise the data subject rights described in Section 9 in relation to any data submitted via the contact form by contacting us at info@enersurs.no.

3c. Applicant accounts

You can create an account on our applicant portal to keep one profile and apply for our vacancies with it. When you apply, your profile and your answers are passed to our internal HRM system, and our recruiters see your profile as it is when they open it.

We may use automated tools, including Artificial Intelligence (AI), to help organise the information in your profile. Decisions about your application are always made by our recruitment team and, where relevant, the hiring client.

We send you emails about your account and your applications.

4. Purpose of processing

We process personal data for the following purposes:

• To assess and process job applications
• To communicate with candidates during recruitment
• To verify qualifications and experience
• To manage and improve our recruitment processes
• To comply with legal and regulatory obligations

Personal data will not be used for purposes unrelated to recruitment without your consent.

5. Legal basis for processing

We process personal data based on:

• Steps prior to entering into a contract (to process and assess your job application)
• Legitimate interests (to administer recruitment, ensure security, prevent misuse, and improve our processes)
• Your consent (for optional processing, such as keeping your details in a talent pool beyond the standard retention period, and for analytics cookies)
• Legal obligations, where applicable

You may withdraw your consent at any time (see Section 9).

6. Storage and retention of data

Personal data is stored on dedicated cloud servers managed on our behalf. We apply appropriate technical and organisational measures to protect confidentiality, integrity and availability. Where possible we store and process data within the European Economic Area (EEA). Hosting provider and region details can be provided on request.

Our primary cloud hosting provider is Amazon Web Services (AWS), and we store data in the EU (Stockholm region, eu-north-1).

If personal data is transferred to or made accessible outside the EEA (for example through certain IT providers), we ensure a valid transfer mechanism and appropriate safeguards, such as EU Standard Contractual Clauses (SCCs).

We retain applicant data:

• For as long as the recruitment process is ongoing
• For up to 24 months after your last activity with us (for example your latest application, a profile update or contact with our recruiters), unless you withdraw consent or ask us to delete it sooner

Unsolicited applications or irrelevant data may be deleted earlier.

Applicant accounts and profiles are kept until you ask us to delete them. An account that has not been used for 24 months is closed and its profile deleted; we email you 7 days before, and signing in keeps your account.

7. Disclosure of Personal Data to Third Parties

We may disclose personal data to third parties only when necessary for recruitment-related purposes and only to the extent required.

Personal data may be shared with:

• Authorized internal personnel involved in recruitment and hiring
• Recruitment partners, consultants, or service providers supporting our recruitment process
• Clients or project partners where your candidacy is relevant, and only with your prior knowledge or consent

We do not disclose personal data to third parties for marketing or unrelated purposes, and we do not sell personal data.

Where third parties process personal data on our behalf, such processing is governed by appropriate data processing agreements and carried out in accordance with applicable data protection laws and regulations.

8. Data security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

Access to personal data is limited to authorized personnel only. Our systems are maintained with security best practices in accordance with applicable laws and regulations.

9. Your rights

As a data subject, you have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Request restriction of processing
• Object to processing based on legitimate interests
• Request data portability (where applicable)
• Withdraw consent at any time
• Lodge a complaint with the relevant data protection authority

You can correct most of your details yourself in your applicant account.

Requests can be made by contacting us at: info@enersurs.no. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet): www.datatilsynet.no.

10. Withdrawal of consent

If processing is based on your consent, you may withdraw it at any time. Withdrawal of consent may affect our ability to continue processing your application.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

Last updated: 28 October 2026