Privacy Policy

1. Who we are

The Qualidex (“The Qualidex”, “we”, “us”) is a recruitment firm operating from Stockholm and London. We assess candidates on behalf of customer companies and present written profiles to support hiring decisions. For the purposes of the EU General Data Protection Regulation (GDPR) and the Swedish Data Protection Act (dataskyddslagen, SFS 2018:218), The Qualidex is the controller of personal data described in this policy.

You can reach us at info@thequalidex.com.

2. What data we collect

Depending on your interaction with us, we process:

• Candidate data: name, contact details, CV, work history, education, references, interview notes, results of functional tests and psychological style assessments, and any information you choose to share with us.
• Customer data: business contact details of representatives of customer companies, role briefs, and correspondence.
• Website data: limited technical data such as IP address, browser type, and pages visited, collected to operate and secure the site.

3. Why we process it and on what legal basis

• To evaluate candidates and produce written profiles for customer companies — legal basis: legitimate interest (Art. 6(1)(f) GDPR) in conducting professional recruitment, balanced against the rights of candidates.
• To deliver our services to customers and manage the engagement — legal basis: performance of a contract (Art. 6(1)(b)).
• To comply with bookkeeping, tax and other legal obligations under Swedish law — legal basis: legal obligation (Art. 6(1)(c)).
• To send relevant updates where permitted — legal basis: consent or legitimate interest, depending on context.

We do not knowingly process special categories of personal data (Art. 9 GDPR) unless you voluntarily provide it in the context of an assessment, in which case we rely on your explicit consent.

4. Who we share data with

Candidate profiles are shared with the specific customer companies considering you for a role. We also use a limited number of trusted processors (for example email, cloud storage, and analytics providers) under data processing agreements. We do not sell personal data.

Some providers may be located outside the EU/EEA. Where that is the case, transfers are protected by Standard Contractual Clauses or another lawful transfer mechanism under Chapter V GDPR.

5. How long we keep it

Candidate assessment data is kept for as long as it is useful for active and reasonably foreseeable recruitment processes, and at most two years from your last interaction with us, unless a longer period is required by law or you ask us to keep your profile on file for longer. Accounting records are kept for seven years in line with the Swedish Bookkeeping Act (bokföringslagen 1999:1078).

6. Your rights

Under GDPR you have the right to:

• Request access to and a copy of your personal data.
• Have inaccurate data corrected or incomplete data completed.
• Request erasure where one of the GDPR grounds applies.
• Request restriction of, or object to, certain processing.
• Receive data you have provided to us in a portable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email info@thequalidex.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) — see imy.se.

7. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Access to candidate assessments is restricted to The Qualidex team members and customer representatives involved in the relevant process.

8. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top reflects the most recent version. Material changes will be communicated through this page.