Privacy notice for applicants and job candidates

At PNO Holding A/S (“PNO”, “we”, “us” or “our”) we value your right to privacy. This notice describes how we process personal information about applicants and job candidates and contains the information we are obliged to provide in accordance with Regulation (EU) 2016/679 (“GDPR”) and the Danish Act number 502 of 23 May 2018 on supplementary provisions to the regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“DDPA”).

1 Data controller

The data controller for the processing of your personal information is

PNO Holding A/S
CVR-no.: 26101409
Århusgade 118
2150 Nordhavn
Denmark
E-mail: info@pnorental.com

2 Processing activities

2.1 Recruitment

When you apply for or is otherwise a candidate for a position at PNO, we process personal information about you for the purpose of selecting the candidate that we consider to be the best match for the position in question.

Our processing of personal information about you for these purposes includes:

1. Your name and contact information, including home address, private email address and home telephone number
2. Information on current and prior occupation
3. Information on educational background, including exam results
4. Information on other relevant competencies, such as languages spoken (or for IT persons IT programming languages mastered)
5. DISC profile (personality test)
6. References
7. Information retrieved from your social media profiles
8. Any other information you provide to us in your application or CV or otherwise during the recruitment process

The legal basis for the processing is

• GDPR article 6(1)(b), as the processing is necessary for taking steps in preparation of possibly entering into a contract with you
• GDPR article 6(1)(f), as the processing is necessary in order for us to pursue our legitimate interest in identifying the candidate we consider to be the best match for the position in question.

The information is deleted shortly – and no later than 6 months – after conclusion of the recruitment process. However, for candidates not hired, we may be interested in keeping the information for an extended period – typically to be able to get in touch if we at a later time have an open position, where we believe, you would be a good match. In these situations, we will request your consent to retain your information for longer and will store the information in accordance with the consent, you provide.

3 Retention and deletion of information

The retention periods described in sections 2.1 above are the default retention periods. However, information may be retained for longer if necessary to comply with legal obligations or if necessary for PNO to establish, defend or exercise legal claims.

4 Recipients of personal data

We may disclose your personal information to external advisors (for example recruiters and legal advisors) supporting our business, and to law enforcement authorities or other public authorities if we are required to do so through a court order or similar measures, or if such disclosure is necessary in order for us to establish, defend or exercise legal claims.

Finally, we may also make personal information available for companies supporting our business in the role of data processors – for example providers of the systems we use for mapping of personality profiles at the later stages of the recruitment process.

5 Transfer of personal data to countries outside EU/EEA

We do not transfer personal data to countries outside EU/EEA as part of the recruitment process. Should the need to do so occur in special situations, we will ensure to take the necessary steps to ensure that such transfers will take place in accordance with the requirements set out in GDPR chapter V.

6 Your rights

You have the following rights as a data subject:

• Access: You have the right to obtain access to the data we process about you and a number of additional data.
• Rectification: You have the right to have personal data about you rectified.
• Erasure: In special circumstances, you have the right to have personal data about you erased, before the time for our ordinary erasure.
• Restriction: In certain cases, you have the right to have the processing of your personal data restricted. If the right applies, we may then only process the data – except for retention – with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another person or for reasons of important public interest.
• Data portability: In certain cases, you have the right to receive a copy of the personal data you have provided in a structured commonly used and machine-readable format.
• Right to object to processing of personal data: Where the processing of your personal data is based on GDPR article 6(1)(f), you have the right to object to the processing on grounds relating to your particular situation. If you do so, we will cease the processing, unless we can justify that our legitimate interests override your interests, rights and freedoms, even after duly taking your particular situation into consideration, or the processing can be based on an alternative legal basis. You have a particular and unconditional right to object to your personal data being processed for the purpose of direct marketing.

If you wish to exercise your rights, please contact us using the contact information in section 1 above. Your request will be processed in accordance with the legislation in force at the given time. To the extent necessary, we will contact you and ask for additional information required to handle your request correctly.

Please be aware that certain limitations and exemptions to apply to some of the rights. Therefore, we are not necessarily obliged to meet your request in all situations.

You do, however, have an unconditional right to file a complaint with a supervisory authority – in Denmark that would be Datatilsynet – if you believe that our processing of your personal data is in conflict with applicable data protection legislation.

If you would like to learn more about your rights, please visit the website of the Danish Data Protection Agency, www.datatilsynet.dk, where you can also find further information on how to file a complaint.

7 Updating our privacy Notice

We may update this privacy Notice on an ongoing basis when this is necessary to provide a fair description of our processing of personal data.

In the event of material changes to our processing of your personal data already in our possession, you will be notified directly of the update (e.g. by email).

This privacy Notice was last updated in January 2026