Recruitment Privacy Notice

1. General

In this Privacy Notice, we explain how we process your personal data during Skanska’s recruitment process. Data subjects include, for example, persons who apply for an open position at Skanska or otherwise interact with us in connection with job opportunities. We may also contact you directly regarding career opportunities.

2. Data Controller

Skanska Oy ("Skanska" or "we") acts as the data controller for the processing of personal data described in this Privacy Notice.

3. From which sources do we collect your personal data

During the recruitment process, we mainly collect personal data directly from you and, depending on the situation, also from the referees you have named and from our partners participating in recruitment, for example in connection with suitability assessments.

4. What data do we process

During the recruitment process, we typically process the following data about you:

(a) Identification and contact details

Contact details (e.g. name, email address, phone number)
Nationality and work/residence permit details
Information related to the applied position and related interests
Photograph

(b) Education and competence information

Education
Work experience and project references
Language skills
Certificates and qualifications
Other similar skills and education

(c) Suitability assessment information

Information collected in connection with personal and aptitude assessments concerning the applicant’s suitability
Information on the validity of the personal security clearance carried out by the Finnish Security and Intelligence Service (SUPO) and the level of security classification, on a project‑specific basis

(d) Referee information and information collected from referees

Referee’s contact details, title and relationship to the applicant
Information provided by the referee concerning the applicant’s performance at work

(e) Other information related to the applicant’s suitability

Credit history (e.g. in finance manager roles or other positions requiring particular trustworthiness)
Drug tests, if the position or role requires them
Any other information that you have voluntarily provided during the recruitment process or otherwise explicitly published for professional purposes (e.g. LinkedIn profile information)

5. Why and on what grounds do we process your personal data

During our recruitment process, we process your personal data to assess your skills, competence, motivation, interests and overall suitability for the position you are applying for. The scope of the personal data processed depends on the details of the position in question.

Our processing is based on the following legal grounds under data protection legislation:

Recruitment process

Contract. The processing of personal data is based on the implementation of pre-contractual measures at the request of the data subject.

Legitimate interest of Skanska to assess the applicant’s competence and suitability, and to verify the accuracy of the information provided and the appropriateness of the recruitment process

Consent. Some processing activities in our recruitment process are based on your consent. These may include, depending on the situation:

Direct search: Skanska may search for potential employees through direct recruitment. Direct searches may be conducted by Skanska’s HR specialists and/or with the assistance of partners. If you are interested in a position presented in a direct search, we process the personal data described above on the basis of your consent.
Referee interviews: Interviews with referees you have named are based on your consent.

Future career opportunities

You may join Skanska’s talent network if you wish, so that we can inform you about open or future career opportunities that may match your talent profile. We may also communicate with you about other topics related to the construction industry and Skanska as a workplace. This processing is based on your consent, which you may withdraw at any time.

6. To whom do we disclose your data

As a rule, the data is not disclosed to third parties. However, we may disclose your personal data in situations required or permitted by applicable law:

Other companies within the Skanska Group. Our group companies may process your personal data for the purposes defined in this Privacy Notice
Subcontractors acting on behalf of Skanska. These include, for example, IT service providers and recruitment and assessment consultants
In connection with legal proceedings or at the request of authorities. Personal data may be disclosed to competent authorities based on applicable law, a court order or an authority’s request.
To other parties with your consent. Based on your consent, we may also disclose your data to other parties

As a general principle, personal data is not transferred outside the European Union or the European Economic Area (EU/EEA). In certain situations, however, service providers or other processors involved in the processing of personal data may be located outside the EU/EEA.

Personal data may be transferred to third countries in accordance with applicable data protection legislation and subject to appropriate safeguards. Such safeguards include, among others, standard contractual clauses adopted by the European Commission, adequacy decisions, and other transfer mechanisms permitted under applicable data protection laws.

7. How long do we retain your data

Recruitment process

We process your personal data for at least the duration of the recruitment process. After the process ends, we retain the data for 24 months, after which it is deleted unless there is a lawful basis for further processing.

If you start employment with Skanska as a result of the recruitment process, your personal data will be processed in accordance with Skanska’s privacy practices applicable to personnel.

Future career opportunities

If you have given consent to receive information about future career opportunities, the retention period is primarily determined by the time when you withdraw your consent. Consent may be withdrawn at any time.

8. Your rights

In accordance with current data protection legislation, you have the rights specified below. We process your personal data to the extent necessary to exercise your rights.

Right of access to your data

You have the right to obtain confirmation from the controller whether your personal data is being processed or not. If your personal data is being processed, you have the right of access to the personal data we process about you. We may refuse to provide information if there is a legal basis for doing so.

Right to rectification, erasure or restriction of processing

You have the right to request us to rectify any incorrect information about you. In addition, you can request us to delete some information about you or request the restriction of processing on legal grounds.

Right to object to the processing of your data

You have the right to object processing on grounds relating to your particular personal situation, provided that we are processing your personal data on the basis of legitimate interest. You can submit your objection request to us by contacting tietosuoja[at]skanska.fi. You must specify the specific situation on the basis of which you object to the processing. Skanska has the right to refuse your request if the processing is necessary for the purposes of Skanska's or a third party's legitimate interests.

Right to withdraw your consent

You have the right to withdraw your consent to the processing of your personal data to the extent that the processing is based on your consent.

Right to data portability

To the extent that we process your data on the basis of a contract and the processing is carried out by automated means, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and the right to transmit such data to another data controller.

Right to lodge a complaint before a competent supervisory authority

If you consider that the processing of your personal data has not complied with the requirements of the applicable data protection legislation, you can always contact Skanska. You can also refer your case to the supervisory authority. In Finland, the supervisory authority responsible for data protection matters is the Data Protection Ombudsman (TSV).

9. Contact information

If you would like to know more about how we process your personal data at Skanska, or if you would like to exercise your rights as a data subject, please contact us as follows:

Jere Sundqvist
P.O. Box 114, 00101 HELSINKI
Nauvontie 18, 00280 HELSINKI
tietosuoja[at]skanska.fi

10. Changes and updates to this privacy notice

We regularly review our practices related to the processing of personal data. We may make changes to this Privacy Notice from time to time. The up-to-date version is available on Skanska's website and recruitment platform.

Last updated: 9 June 2026