Your application. Your personal data.
Version 2026-09-13
This notice explains how we use the information you provide when applying through systown.ai/join.
Who is responsible?
Systown, organisation number 559163-5031, is the data controller. Address: Kungsgatan 8, KG10, Stockholm, Sweden. Contact ai@systown.ai with questions about recruitment or your personal data.
Temporary attachments
Attachments are uploaded to private Vercel Blob storage in Stockholm and attached to the recruitment email. The temporary file is deleted after the email provider accepts the application. Abandoned uploads and files whose immediate deletion failed are cleaned up daily once older than 24 hours, normally within 48 hours. The copy in the recruitment email follows the retention criteria below.
What we collect and why
We process your name, email, selected role, description of relevant work, answers about Swedish language proficiency, a category B driving licence and Swedish citizenship, and acknowledgement of the security-vetting and privacy information. You may also provide a phone number, location, GitHub URL, LinkedIn URL, profile/project link, CV, working approach and availability. We use this to assess your experience for the role and communicate with you. Required fields and either a CV or link are needed to handle the application.
Legal basis and your acknowledgement
Processing for this recruitment relies on our legitimate interest in finding and hiring suitable employees, subject to a balancing assessment under GDPR Article 6(1)(f). The checkbox acknowledges this notice; it is not consent to marketing. The form records your acknowledgement and the notice version with your application. You may object to processing based on legitimate interests.
Who receives the information?
Your application is sent to Systown’s hiring contacts through Resend and handled in our email environment by people who need it for recruitment. Vercel hosts the website. A hidden spam field and temporary per-IP attempt limits help prevent automated submissions. CV files are not published on the website. This form does not add you to newsletters or a future-recruitment database.
Retention and international transfers
Application information is kept while recruitment is in progress and for as long as needed to conclude the process. It is then deleted unless limited information must be kept for a specific legal claim or legal obligation. Providers may process information outside the EU/EEA, including in the United States. Such transfers need applicable safeguards, such as the European Commission’s Standard Contractual Clauses. Contact us for details of the applicable safeguards and a copy.
People assess applications
The form does not use AI to rank, assess or automatically reject candidates. Security vetting is a separate process that will be explained later if relevant. Do not provide identity numbers, ID copies, health information or criminal-record information here. Do not share confidential material from other employers.
Your rights
You may request access, correction, deletion or restriction and object to processing. Conditions and exceptions can apply. Contact ai@systown.ai, ideally quoting your application reference, to exercise your rights or withdraw your application. You may complain to the Swedish Authority for Privacy Protection, IMY, or your competent supervisory authority.