Privacy Notice
Last updated: 18 June 2026
Effective date: 18 June 2026 Version: 2.0
Controller: ArbeidMatch Norge AS, Org. nr. 935 667 089, Norway
Contact: legal@arbeidmatch.no
1. Who we are
ArbeidMatch Norge AS ("ArbeidMatch", "we", "us") operates the recruitment platform available at ats.arbeidmatch.no and arbeidmatch.no. We are the data controller for personal data processed through our services.
2. What personal data we collect
We may collect and process the following categories of personal data:
| Category | Examples |
|---|---|
| Identity data | Full name, date of birth, national ID (where required) |
| Contact data | Email address, phone number, postal address |
| Professional data | CV, work history, education, skills, certifications |
| Application data | Cover letters, answers to screening questions, availability |
| Account data | Login credentials, account preferences, session tokens |
| Communication data | Messages sent via the platform, email correspondence |
| Technical data | IP address, browser type, device identifiers, log data |
| Usage data | Pages visited, features used, click events |
| Consent records | Records of consents given or withdrawn |
3. Legal bases for processing
We process your personal data on the following legal bases under the GDPR (Regulation (EU) 2016/679), as applicable in the EEA and Norway:
- Contract performance (Art. 6(1)(b)): Processing necessary to provide our recruitment services to you or your employer.
- Legitimate interests (Art. 6(1)(f)): Fraud prevention, platform security, improving our services, and direct marketing to business contacts.
- Legal obligation (Art. 6(1)(c)): Complying with Norwegian labour law, tax obligations, and anti-money laundering requirements.
- Consent (Art. 6(1)(a)): Where you have given explicit consent, for example to receive marketing communications or for processing sensitive data.
4. How we use your data
Your personal data is used for the following purposes:
- Recruitment facilitation: Matching candidates with job opportunities and presenting candidate profiles to relevant employers.
- Account management: Creating and maintaining your user account.
- Communication: Sending notifications about applications, interviews, and platform updates.
- Compliance: Meeting our legal obligations under Norwegian and EU law.
- Platform security: Detecting and preventing fraud, abuse, and unauthorised access.
- Analytics: Improving platform performance and user experience (using aggregated or anonymised data where possible).
- Marketing: Sending information about our services to recruiters and employers, where permitted.
5. Who we share your data with
We may share your personal data with:
- Employers and clients: Candidate profiles are shared with employers who have active job openings that match your profile, as part of the recruitment process.
- Service providers: Trusted third-party processors (e.g. cloud hosting, email delivery, analytics) acting under data processing agreements.
- Professional advisors: Lawyers, accountants, and auditors, under confidentiality obligations.
- Regulatory authorities: Norwegian Data Protection Authority (Datatilsynet), tax authorities, or other competent bodies when required by law.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.
We do not sell your personal data to third parties.
6. International transfers
Some of our service providers are located outside the EEA. Where we transfer personal data to countries that do not have an adequacy decision, we ensure appropriate safeguards are in place, such as the EU Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Data retention
| Data type | Retention period |
|---|---|
| Candidate profiles (active) | Duration of account + 3 years |
| Candidate profiles (inactive) | 2 years after last activity |
| Application records | 2 years from application date |
| Employee records (placed candidates) | 5 years (Norwegian accounting law) |
| Marketing consents | Until withdrawn + 1 year |
| Security logs | 1 year |
| Server access logs | 90 days |
When retention periods expire, data is securely deleted or anonymised.
8. Your rights
Under the GDPR, you have the following rights:
- Access (Art. 15): Request a copy of your personal data.
- Rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Erasure (Art. 17): Request deletion of your data ('right to be forgotten'), subject to legal obligations.
- Restriction (Art. 18): Request that we restrict processing of your data.
- Data portability (Art. 20): Receive your data in a structured, machine-readable format.
- Object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, contact us at legal@arbeidmatch.no. We will respond within 30 days.
You also have the right to lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority) at www.datatilsynet.no.
9. Cookies and tracking
We use cookies and similar technologies to operate the platform and improve user experience. For detailed information about the cookies we use, please see our Cookie Policy.
You can manage your cookie preferences through your browser settings or our consent manager.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
- TLS encryption for data in transit
- Encryption at rest for sensitive fields
- Access controls and role-based permissions
- Regular security reviews and penetration testing
- Two-factor authentication for platform users
11. Automated decision-making
We use automated matching algorithms to suggest relevant candidates to employers and relevant jobs to candidates. These suggestions are not binding decisions; final hiring decisions are always made by humans.
If we implement any automated processing that produces legal or similarly significant effects, we will inform you and provide the right to human review.
12. Children's data
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately at legal@arbeidmatch.no.
13. Changes to this notice
We may update this Privacy Notice from time to time. We will notify registered users of material changes by email or via an in-platform notification. The "effective date" at the top of this document indicates when the latest version took effect.
Previous versions of this Privacy Notice are available upon request.
14. Contact us
For any questions, requests, or concerns regarding your personal data, please contact:
ArbeidMatch Norge AS
Data Protection Contact
Email: legal@arbeidmatch.no
Postal: Sverre Svendsens veg 38, 7056 Ranheim, Norway
This Privacy Notice was last updated on 18 June 2026 and replaces all previous versions.