GDPR & Data Protection

TrustBee is designed around purpose limitation, data minimisation, accuracy, controlled access and transparency. We use role-based access and database policies to limit access to the workflows a user is authorised to perform.

Keeada AB controls core TrustBee operations. Employers, recruiters and providers may become independent controllers for their own lawful recruitment or programme duties. They must give their own information and follow applicable law when they use data received through TrustBee.

Recruiters cannot see a seeker’s name, email, phone number or address through the protected candidate workflow unless the seeker accepts a contact request with a stated purpose. A seeker may accept or decline. Acceptance permits that recruiter to use the disclosed details for the stated recruitment contact purpose, not unrelated marketing.

When a seeker applies to an internal vacancy, TrustBee may store a private snapshot of the submitted CV so the authorised recruiter can review the version actually sent. External vacancies may redirect the seeker to a third-party service; that service’s privacy information then applies.

You can submit an account-deletion request from TrustBee. The request is reviewed by an authorised administrator before the account is removed, with status notifications. Removal is not represented as immediate, and limited records may remain where law, security, dispute handling or documented audit duties require them.

You may have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Send requests to kontakt@trustbee.se. We may ask for information necessary to verify identity and protect the account.

Contact kontakt@trustbee.se first if you have a concern. You also have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection, or the competent authority where you live or work.