Privacy Policy for Applicants

When you apply for a job at Siemsens Gaard, we process the information you give us in order to assess your application – and only for that. Here you can read what information this is, why we have it, how long we keep it, and what rights you have.

Data controller

SG Bornholm ApS is the data controller for the processing of your information.

Company: SG Bornholm ApS, CVR no. 46183150
Address: Havnebryggen 9, 3740 Svaneke, Denmark
Email: hotel@siemsens.dk

Write to us if you have questions about how we process your information. We do not have a Data Protection Officer (DPO), as we are not required to have one.

What information we process

We only process the information you give us yourself in the application:

Name, email and phone number
Your CV or up to three previous jobs, if you choose to provide them
When you can start and finish, and how much you can work
Whether you have the right to work in Denmark (yes, no or don't know)
Whether you need accommodation, if the position offers it
Languages, your motivation and your answers to any extra questions
Where you saw the position, if you came via a link

During the process we add our own notes from interviews and the status of your application.

We do not ask for your age, date of birth, CPR number, photo, gender, nationality, health, pregnancy, religion, political views, sexual orientation, trade union membership or current salary. Please do not include this in your application or CV. If you do, we will not attach any weight to it.

We only contact references if you have said yes to it.

While you fill in the application, your answers are stored only in your own browser until you submit it. A CV you upload along the way is deleted after 24 hours if you do not submit the application. We anonymously count how many people reach each step of the application, without cookies and without your answers.

Why we process it, and our legal basis

To assess your application, contact you and hold interviews: Legal basis: Necessary to take steps you have requested before a possible employment (GDPR Art. 6(1)(b))
To be able to document how the recruitment was carried out, if it is challenged: Legal basis: Our legitimate interest (GDPR Art. 6(1)(f))
To contact you about future positions (talent pool): Legal basis: Your consent (GDPR Art. 6(1)(a))
To transfer your information to our HR system if you receive an offer: Legal basis: Necessary to enter into an employment contract with you (GDPR Art. 6(1)(b))

If you give us sensitive information yourself, we process it in accordance with section 12 of the Danish Data Protection Act and only to the extent necessary.

It is your own choice whether to apply. Without a name and contact details, however, we cannot process your application.

Talent pool

You can say yes to us keeping your application for 6 months after your consent, so that we can contact you about other positions. This is voluntary, and it has no bearing on your current application.

You can withdraw your consent at any time via the link in your confirmation email or by writing to us. We will then remove you from the talent pool immediately. This does not affect the processing that took place before you withdrew your consent. After 6 months we delete your information, unless you give a new consent.

Who sees your information

Only the managers and employees involved in hiring for the position you applied for can see your application.

We use suppliers for hosting, file storage, virus scanning and email. They only process the information on our behalf and under a data processing agreement. All data is stored in the EU, and we do not transfer it to countries outside the EU/EEA.

If you receive a job offer, we transfer your name, email, phone number and the terms of the offer to our own HR and rota system so that we can prepare your contract. Your CV, notes and motivation are not included.

We do not sell or pass on your information to others.

How long we keep your information

You are rejected or withdraw your application: We delete it 6 months after the process has ended
You are in the talent pool: We delete it 6 months after your consent, or immediately when you withdraw it
You are hired: We delete it 30 days after you have signed the contract. The information we need for your employment is then kept in our HR system
Incomplete application with an upload: We delete it 24 hours after the upload

Deletion happens automatically and also covers your CV and our notes. We only keep anonymous figures, for example how many people applied for a position.

No automated decisions

A human being always reads your application and makes the decision. We do not use artificial intelligence or automated systems to sort, score or reject applicants.

Your rights

You have the right to:

access the information we hold about you
have incorrect information corrected
have your information deleted
have the processing restricted
object to processing based on our legitimate interest
receive the information you have given us in a common file format
withdraw your consent

You can withdraw your application via the link in the confirmation email. Send any other enquiries to hotel@siemsens.dk. We will reply within one month.

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, tel. +45 33 19 32 00, datatilsynet.dk.

Changes

We update the policy when our processing changes. The version that applied when you applied is stored together with your application.

Version 1.0, effective from 9 November 2026.