1. Data controller

Suliffissat.gl, CVR 43898914, 3905 Nuussuaq, Greenland, is the data controller for personal data processed through the platform. Questions about privacy and personal data can be sent to info@suliffissat.gl.

2. Personal data we process

When an account is created and used, we may process name, email address, authentication and account information, and the user role on the platform. For candidates, we may also process phone number, address, profile photo, profile text, job preferences, salary expectations, driving licences and certificates, availability, work experience, education, languages, skills, CV versions and job application information. For employers, we process information including company profiles, contact details, job advertisements, change requests and information connected with recruitment processes.

3. CVs and direct job applications

When a candidate submits a CV, a PDF version and a snapshot of the information used to generate that CV are stored. When the candidate chooses to apply for a job using their Suliffissat profile, the selected CV version is attached to that application. The company that owns the relevant job advertisement then receives access to the application and the attached CV. Other companies do not receive access to that CV through the application function.

4. Purposes and legal basis

We process personal data to create and administer accounts, provide candidate and company profiles, generate and store CVs, receive and transmit job applications, administer job advertisements, moderate content, provide support, send necessary account and operational emails, and protect platform security. Processing takes place where necessary to provide the service or agreement requested by the user, where Suliffissat has a legitimate interest in secure and responsible operation, where processing is required by law, or on the basis of consent where consent is required.

5. Recipients and service providers

Personal data may be processed by providers necessary for operating the platform. Suliffissat uses services including Supabase for database, authentication and private file storage, Netlify for hosting the web platform, and Resend for sending emails. Providers may process information only as part of providing their services. When a candidate submits a job application, the relevant application information and selected CV are disclosed to the company that posted the job.

6. Security and access

Candidate data, CV files and profile photos are stored with access controls. CVs and candidate files are not public. Candidates can access their own information, administrators may access information for operation and support, and an employer receives access only to the CV version that the candidate attached to an application for that employer’s own job. Technical access rules and private storage areas are used to restrict access.

7. Retention and deletion

Personal data is not retained longer than necessary for the purposes for which it was collected. Information may be retained while an account, candidate profile, job advertisement or recruitment process is active and for a subsequent period where necessary for documentation, security, disputes or legal obligations. When information is no longer necessary, it should be deleted or anonymised. You may contact info@suliffissat.gl to request a review or deletion of information about you.

8. Sensitive information

Suliffissat does not normally ask for sensitive personal data such as health information, political or religious beliefs, trade union membership or information about sexual matters. Do not include such information in free-text fields or your CV unless it is necessary and there is a lawful basis for processing it.

9. Cookies

Suliffissat uses necessary technical cookies for functions including login, sessions and security. These cookies are necessary for services requested by the user. If you choose to allow preference cookies, we also store your cookie preference and may remember whether you use the candidate or employer view for up to one year. If you choose Necessary only, that viewing preference is not stored. Suliffissat currently does not use analytics or marketing cookies. Your cookie choice can be changed through Cookie settings in the site footer.

10. Your rights

Under the Greenlandic Personal Data Act, you may have rights including information about processing, access to information about you, and correction, deletion or blocking of inaccurate, misleading or unlawfully processed information in accordance with the Act. The exact rights depend on the processing concerned. Requests can be sent to info@suliffissat.gl.

11. Complaints to the Data Protection Authority

If you believe Suliffissat processes personal data about you contrary to the Greenlandic Personal Data Act, you may first contact Suliffissat so the matter can be investigated. You may also complain to the Danish Data Protection Authority, which supervises the Greenlandic Personal Data Act.