Candidate Privacy Notice

At a glance

We use your application, our interviews and tests to decide whether you fit the role. Our basis is our legitimate interest in recruiting, and your contract with us once we move forward.
We keep your application, interview notes and test results for 2 years after the recruitment process ends, mainly to be able to defend legal claims, such as discrimination claims. If you agree (you can tick a box), we may also consider you for other roles that may suit you during these 2 years and contact you about them.
For final candidates in some roles we run a background check. People assess your results; no decision is made by a machine alone.
You can object, ask for access or erasure and withdraw your consent. Contact: dataprotection@einride.tech.

1. Who is responsible for your personal data

The Einride company that is recruiting for the position you apply for (the “Recruiting Einride Company”) is the data controller. If you are unsure which company it is, ask the Einride contact for your application. Other Einride Group companies help with recruitment and may see your data as described below.

For ability tests, the Recruiting Einride Company and the test provider Alva Labs are joint controllers. Alva Labs designs the test, decides what it asks and shows you its own information in the test; we decide to use the result in our recruitment and give you the information in this notice. You can use your rights against either of us: if you contact one, the request is passed to the other, and Alva Labs gives you access to your test data through your candidate account. Alva Labs keeps your ability-test data in your candidate account for its own period, which you can also see there; this is separate from the period we apply to our own copy. For other tests, interviews and team-fit, Alva Labs works only on our behalf.

2. What we collect and where it comes from

From you: name and contact details, address, job title and employment history, education, CV, references you give us, salary expectations, work permit status and anything else you choose to send. We do not ask for your age or gender; please do not send sensitive details such as health, religion or political views.
From the recruitment process: test and assessment results, interview notes and evaluations.
From others: references from people you name, and public professional information such as your LinkedIn profile or other public sources. We also find candidates ourselves, sometimes with an AI-assisted search tool that only finds profiles and does not rank or decide, and we send you a link to this notice when we contact you.
For final candidates in some roles: a background check by a specialist provider (in Sweden 2Secure), to which we give your name, contact details, personal identity number, CV and ID copy. It checks identity, employment and education and, for some roles, financial standing, court cases and sanction lists; criminal records only where the law allows. The provider is a separate controller for what it collects itself.

If you do not give us the data we need to assess you, we cannot consider your application.

3. Why we use your data, on what basis, and for how long

The table lists every purpose. Where we rely on legitimate interest, the interest is stated in the basis column.

Purpose

What we do

Legal basis

Personal data

Kept for

Separate controllers (recipients)

Manage the recruitment process of employees and consultants

Efficiently organize employee/consultant recruitment process, including scheduling interviews and issuing employment contracts. We also keep the application and results for 2 years to defend legal claims.

Legitimate interest: the processing is necessary for our legitimate interest in efficiently running the recruitment process, including scheduling interviews and issuing employment contracts, and in defending ourselves against legal claims arising from it, such as discrimination claims.

Name, Address, Job title, Email address, Phone number, Employment history, Location data, Compensation details, Work permit status, Test results, Interview notes / evaluations

Deleted 2 years after the recruitment process has ended

None

Assess applicant suitability

Evaluate candidate qualifications and suitability for positions efficiently and thoroughly. Includes: Conduct reference checks; Review relevant experience; Evaluate skills and qualifications; Determine cultural fit.

Contract: steps you ask us to take before an employment agreement

Name, Address, Job title, Email address, Phone number, Employment history, Communication, Test results, Interview notes / evaluations

Deleted 2 years after the recruitment process has ended

Alva Labs (joint controller for ability tests, Art. 26)

Contact for future opportunities

Consider you for other roles that may suit you and contact you about them during these 2 years, subject to your consent. Your application and test results are already kept for 2 years under the purposes above.

Consent: you agree that we consider you for other roles that may suit you and contact you about them

Name, Address, Job title, Email address, Phone number, Employment history, Test results

Deleted 2 years after we have collected your personal data

None

Perform background checks

Conduct background checks for final candidates, based on role sensitivity. Includes: Verify employment history; Validate educational qualifications; Assess professional licenses.

Legitimate interest: the processing is necessary for our legitimate interest in protecting Einride from harm and financial loss caused by negligent hiring in sensitive roles.

Name, Address, Email address, Criminal records, Sanction list, Verified employment history, Personal identity number, CV, ID copy

Deleted 10 business days after being performed

Background-check provider (in Sweden 2Secure; separate controller)

4. Background checks (employees and consultants)

We run background checks on people who will have access to sensitive information or systems, whether they are employees or consultants. The check is normally made on the final candidate before the start date; if it was missed, or if your role changes, it can also be made shortly after you start. If you are a consultant, this section tells you how your data is used for the check, even though you are not applying for a job. What the check includes depends on the role: identity, employment and education and, for some roles, financial standing, court cases and sanction lists; criminal records only where the law allows. The provider (in Sweden 2Secure) is a separate controller for what it collects itself. The table above (Perform background checks) states the legal basis and how long we keep the data.

5. Who receives your data

Service providers that work on our behalf (processors) are not named here. They provide recruitment and applicant-tracking systems, assessment and testing tools, and collaboration and cloud tools. They may only use your data on our instructions.

Separate controllers (last column of the table): the background-check provider (in Sweden 2Secure) for the data it collects itself, Alva Labs for ability tests (jointly with us, see above), and authorities where the law requires. Colleagues in other Einride companies (for example HR and hiring managers in the USA and the UAE) may see your data where the role is located there or they help with recruitment.

6. Transfers outside the EU/EEA

Einride companies in the USA and the UAE may access the data to support the service. These transfers follow our intra-group data transfer agreement, which includes the EU Commission’s standard contractual clauses. Providers outside the EU/EEA are used only with standard contractual clauses or when they are certified under the EU–US Data Privacy Framework.

7. Automated decisions

We do not use automated decision-making, including profiling, that has legal or similarly significant effects on you.

8. Your rights

Access to your personal data, and a copy of it.
Correction of data that is wrong or incomplete.
Erasure, or restriction of our use, in the cases the law allows.
Objection to processing based on our legitimate interest. We then stop unless we have compelling reasons.
Data portability for data you gave us and that we process by contract or consent.
Withdrawal of consent at any time where we rely on it, without affecting what happened before.

If you think we handle your data wrongly, you can complain to the data protection authority in your country. In Sweden this is the Swedish Authority for Privacy Protection (IMY, imy.se).

9. Contact and changes

E-mail: dataprotection@einride.tech. Post: Einride AB, Stadsgården 6, Stockholm, Sweden. We may update this notice; the date of the latest version is at the end of this page.

Last updated: 16 October 2026

Platform