GDPR

Privacy Policy

How TrueQ collects, uses and protects your personal data. We comply with the General Data Protection Regulation (GDPR).

Last updated: 19 August 2026

1. Data controller

TrueQ Group, Sweden, is the controller for the processing of your personal data. You can reach us on data protection matters at info@trueq.se.

2. What data we process

  • Contact details: name, email, phone and location.
  • Professional information: CV, competence, experience, education, certifications and languages.
  • Availability and desired compensation.
  • Information you provide in applications and contact forms.
  • Technical information via cookies (see our cookie policy).

3. Purpose and legal basis

We process your data to show you relevant assignments and career opportunities, administer our network and communicate with you. The legal basis for this core processing is our legitimate interest in running a consultancy and recruitment business (Article 6(1)(f)). When you apply for a specific role, we also process your data to take steps at your request prior to a possible contract (Article 6(1)(b)).

To keep your profile in our network for future opportunities, and to represent you proactively, the legal basis is your consent (Article 6(1)(a)) – the matching mandate you choose yourself in the candidate portal (see below). You can withdraw consent at any time, or object to processing based on legitimate interest. We never assume a mandate you have not given.

4. Your matching mandate

You decide how actively TrueQ may work on your behalf. You choose between three levels in the candidate portal, and no level is pre-selected:

  • I apply myself: we show you opportunities but never present you to any employer unless you actively apply.
  • Suggest matches to me: we may contact you with matching opportunities, and you decide each time.
  • Represent me proactively: we may present your profile to employers on strong matches, within the mandate, without obtaining new approval each time.

You can change or withdraw your mandate at any time, with effect going forward. Every choice is logged with a timestamp and the version of the text you accepted. You can list employers we must never present you to. We never mass-distribute your profile, never present you to an excluded employer, and never guarantee an interview or employment. You can see the full history, both your choices and every time your profile has been shared with an employer, under the Matching tab in the portal.

5. How we handle your CV

Your CV and documents are stored in a private, access-controlled storage area. Only you and authorised TrueQ staff can open them. They are never made public and are not indexed by search engines. TrueQ never sends your CV or personal data to an external AI service (such as OpenAI or similar) for automated processing – the editorial work on job listings is done by a human.

6. Automated decision-making

We use tools that suggest how well your profile matches an assignment, as support for our recruiters. This is decision support – no decisions producing legal or similarly significant effects are made solely by automated means. A human always assesses and decides. You can request a manual review and express your point of view.

7. Retention period

How long we keep your data depends on the purpose:

  • If you apply for a specific role, we keep the application while the recruitment is ongoing and for a short period afterwards (so the process can be concluded properly).
  • If you choose to remain in our network for future opportunities (matching mandate), we keep your profile for as long as your consent applies. We ask you to reconfirm your choice periodically, and you can withdraw it at any time.

After that the data is deleted or anonymised. You can always request earlier deletion.

8. Your rights

  • The right to a copy of the data we hold about you.
  • The right to rectify inaccurate data: you can update your profile at any time.
  • The right to be erased (“the right to be forgotten”).
  • The right to withdraw consent and to object to processing.
  • The right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

9. Requesting deletion or changes

You can update your details directly in the candidate portal. There you can also delete your account and all your data (profile, CV, applications and saved assignments) yourself. You can also request deletion by contacting us at info@trueq.se. We handle your request within 30 days.

10. Sharing of data

We share data with potential employers only in line with the matching mandate you have chosen, never with an employer you have excluded, and never as a mass distribution. Every such sharing is logged and shown to you in the portal. We also share data with data processors (e.g. hosting and storage providers) bound by data processing agreements. If any processing takes place outside the EU/EEA, we ensure appropriate safeguards. We never sell your data.

11. Security

We protect your data with technical and organisational measures: access control so only authorised staff can reach candidate data, private and encrypted storage of CVs and documents, and passwords stored hashed (never in clear text). Access is granted on a need-to-know basis.