I.A.R. Systems AB

Privacy Policy Appendix - Country specific provisions for India

Last updated: December 4th 2025

1. Introduction

1.1. This Appendix contains country specific provisions applicable to the Career Site for India and for job openings located in India. This document outlines variations to the IAR Privacy Policy (the “Policy”) and is not a stand-alone document, hence it shall be read in conjunction with the Policy. If no deviation is mentioned in this Appendix A, the text as it stands in the Policy shall apply. 


1.2. At IAR, we are committed to safeguarding the privacy of our stakeholders. We recognize the importance of protecting personal information and ensuring compliance with applicable local laws. As part of our dedication to privacy, we strive to adhere to the Data Protection and Privacy Act, 2023 (DPDPA) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules). Our goal is to maintain the highest standards of data protection and privacy, ensuring that all personal information is handled with the utmost care and respect.


1.3. For personal data collected and processed of data subjects in India, the following shall apply. 

2. Definitions 

2.1. For the purpose of this Appendix A, the terms listed below as they are used in the Policy, shall mean the following: 
(i)    Data controller refers to data fiduciary. 
(ii)    Data subject refers to data principal.
(iii)    Public authorities refer to local, regional and/or national authorities in India.

3. Data fiduciary

3.1. Your personal data will be collected and processed by IAR Systems AB, reg. no. 556230-7107, a Swedish corporation, with registered office at Strandbodgatan 1, SE-753 23 Uppsala, Sweden (“IAR”, “we”, “us” or “our”). 

4. Legal basis and retention 

4.1. For this Appendix A, the main legal basis on which the personal data is collected and processed, is the Data Principal’s consent. To withdraw your consent or to exercise your rights, please see Section 7 of this Appendix A.

4.2. Moreover, we retain personal data only for as long as necessary to fulfil the purposes for which the data was collected, or as required under applicable laws. Where personal data was originally collected based on consent, and such consent is withdrawn or the purpose is fulfilled, we may continue to retain certain data if required to comply with legal obligations under Indian law, including but not limited to tax, employment, or regulatory requirements. In such cases, the legal basis for retention is Section 8(7) of the Digital Personal Data Protection Act, 2023.

4.3. The above, has the following impact on the different subsections under Section 5 Career in the Policy: 

5.2 Applying candidates

Purpose

Processing performed

Categories of personal data
For the selection and recruitment of candidates for job openings within IAR. 
 
To communicate with you during and after the recruitment process.
 
To determine whether the conditions for employment and work in the relevant country are met. 
 
To maintain a pipeline of potential candidates open to be contacted for specific future job opportunities.
 
To request feedback through voluntary surveys.
  • Collection of information, CVs and cover letters
  • Storage of collected personal data in our applicant tracking system
  • Recording of video and/or audio (with consent), transcribing summaries of such recordings
  • Use for communication with you, evaluating your fit with the job opening and the company
  • Matching of opening roles
  • Interviews and reference takings
  • Personality and intelligence tests
  • Control of citizenship and residence/work permit
  • Notification to relevant public administration bodies in the specific region, such as the Tax Agency, Labour, Social Insurance and Pension bureaus, and the Migration Agency, as applicable
  • First and last name
  • Address
  • Professional title, and past professional and educational experiences
  • Contact information such as e-mail address and phone number
  • Picture (where applicable)
  • Information obtained during reference taking, such as reviews from previous employers
  • Test results
  • Other information obtained from your public profile on third party sites, or provided by you in application documents and interviews
  • Documentation to support local regulation to confirm a candidate’s right to work and reside in the relevant country
Sources of data: 
  • Public professional profiles (e.g. LinkedIn, company websites)
  • Interviews with you
  • Reference taking
  • Tests such as personality and intelligence tests
  • Public authorities and documentation to support local regulation to confirm a candidate’s right to work and reside in the relevant country
Legal bases: 
  • Voluntary provision of data for the purpose of applying for a job opportunity and take part in a recruitment process.
  • Written and documented consent from you, the data principal.
  • In the event the consent is withdrawn, we may still retain the personal data collected for the purpose of complying with a legal obligation. 

Retention time: Data collected about you in connection with your application for a job with us is deleted as a starting point no later than three (3) years after the recruitment process has ended  for the purpose of complying with a legal obligation, e.g. if we need to take measures in order to establish, exercise or defend legal complaints.
If you have given your consent for IAR to contact you for specific future job opportunities, your data will be retained for a period of two (2) years as of the date of your consent, or until the consent is withdrawn.

Sharing of personal data: We will share your personal data with our affiliates (to the extent relevant), our supplier of recruiting system and services.

 

5.3 Sourced and referred candidates

Section 5.3 in the Policy is not applicable for the purpose of this Appendix A.  

5.4 Connecting candidates 

Purpose

Processing performed

Categories of personal data
To distribute and share information about IAR and job opportunities.
To administer and send notifications about current job opportunities, according to your subscription preferences. 
  • Creation of a profile
  • Collection of personal and professional information
  • Use for communication with you
  • Matching your preference to opening roles

 
  • First name and last name
  • Contact information such as e-mail address and phone number
  • Application documents such as CVs and cover letters 
  • Other information provided by you when creating a profile

Sources of data: 
-    Provided by you when creating a profile on our Career Site

Legal basis:

When you create a profile on our Career Site, you give us your express consent to process your personal data as per this Policy and in particular this Section 5.4.

Retention time: Data is retained while you remain connected via our Career Site, or until consent is withdrawn.
If you have given your consent for IAR to contact you for specific future job opportunities, IAR will process your data as per Section 4.1 Applying candidates.

Sharing of personal data: We will share your personal data with our supplier of recruiting system.

 

 

5.5 References

Purpose

Processing performed

Categories of personal data

For the selection and recruitment of a candidate for job openings within IAR.

To communicate with you during an active recruitment process.

  • Reference takings
  • Storage of collected personal data in our applicant tracking system
  • ·First and last name
  • Professional title and relationship with the applying candidate
  • Contact information such as e-mail address and phone number

Sources of data:

  • Obtained from the applying candidate and you, the reference.

Legal bases:

-    When a candidate lists you as a reference, we will contact you to obtain your documented and written consent for your personal data to be collected and processed by us within the recruitment process.

Retention time: Retained as long as the associated applying candidate’s data is stored or until you withdraw your consent.
 
In the event the consent is withdrawn, we may still retain the personal data collected for the purpose of complying with a legal obligation.

Sharing of personal data: We will share your personal data with our supplier of recruiting system.

 

5. Where we process your personal data


5.1. We process your personal data inside and outside of India, mostly within the EU/EEA where our IT-systems are located. Your personal data may also be shared with service providers who, either themselves or by their sub-contractors, are located or have business activities in a country outside of India. In such cases, we are responsible for ensuring that the transfer is made in accordance with applicable data protection legislation before it occurs, e.g. by ensuring that the recipient ensures an adequate level of security to safeguard your rights and freedoms.

6. Complaints with the supervisory authority 

6.1. In India, the Data Protection Board of India is the authority responsible for supervising the application of current data protection legislation. If you believe that we process your personal data in a wrongful manner, we encourage you to contact us so that we can review your concerns. However, you may file a complaint with the Data Protection Board at any time. 

7. How do I exercise my rights or withdraw my consent?

7.1. To exercise your rights (further described in Section 9 of the Policy), or if you have any questions or concerns, please contact our grievance officer. 

7.2. To withdraw your consent, you can either do so via email to our grievance officer or directly in your candidate account on the IAR Career Site if you are an applying or connecting candidate (go to Settings  Data & Privacy). 

7.3. Our grievance officer can be contacted via email on privacy@iar.com. 
site-footer-cta

Get started today.
Our worldwide sales team is here to guide you.