By submitting my application, I acknowledge that Alveus Therapeutics, Inc. (with its principal office at Two Logan Square, Suite 1930, Philadelphia, PA 19103, USA) will collect, store, and process my personal information (including my resume and contact details) for recruitment-related purposes in accordance with applicable data protection laws. Alveus Therapeutics, Inc., and its Danish affiliate Alveus Therapeutics ApS (Palaegrade 4, 3rd Floor, 1261 Copenhagen Denmark), act as joint data controllers for this processing.
My data will be retained only for as long as necessary to complete the recruitment process and, unless applicable law requires longer retention, for up to 12 months thereafter. Data will then be securely deleted in accordance with the EU General Data Protection Regulation (GDPR), the Danish Data Protection Act, and relevant U.S. privacy and record-retention laws. I understand that I may exercise my rights of access, rectification, erasure, data portability, objection to processing, and withdrawal of consent, where applicable.
We collect and process the following categories of personal data in connection with the recruitment process:
(a) Identification and contact data: your name, postal address, email address, telephone number, and other contact details;
(b) Professional and educational data: your résumé or curriculum vitae, cover letter, employment history, educational qualifications, professional certifications, and references;
(c) Recruitment process data: interview notes, assessment results, and other evaluations generated during the recruitment process;
(d) Publicly available professional information (e.g., LinkedIn profiles) to assess your qualifications; and
(e) Any additional information you voluntarily provide in support of your application.
Where you voluntarily disclose special categories of personal data within the meaning of Article 9 GDPR (for example, information relating to a disability for the purpose of reasonable accommodation), we will process such data only on the basis of your explicit consent under Article 9(2)(a) GDPR or as necessary for the purposes of carrying out our obligations in the field of employment law under Article 9(2)(b) GDPR.
To the extent that we obtain personal data from sources other than you directly (such as publicly available professional profiles, recruitment agencies, or references you have nominated), we will inform you of the categories of data obtained and the specific source from which they originate, in accordance with Article 14 GDPR.
We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
We process your personal data to evaluate your qualifications and to manage recruitment and potential employment.
For applicants in the EEA (including Denmark), processing is based on:
(a) the necessity of taking steps at your request prior to entering into an employment contract under Article 6(1)(b) GDPR;
(b) our legitimate interests under Article 6(1)(f) GDPR, provided that such interests are not overridden by your fundamental rights and freedoms – specifically, our legitimate interests in:
(i) verifying the qualifications, skills, and professional background of candidates,
(ii) assessing suitability for the relevant position,
(iii) maintaining a fair, effective, and legally compliant hiring process, and
(iv) establishing, exercising, or defending legal claims arising in connection with the recruitment process; and
(c) where required, your consent under Article 6(1)(a) GDPR.
Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to such withdrawal.
Where special categories of personal data are processed, the applicable legal bases under Article 9 GDPR are as set out in Section 1 above.
For U.S. applicants, processing aligns with applicable federal and state privacy and employment laws, including, where applicable, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other state privacy laws.
The provision of the personal data described in Section 1 above is necessary in order for us to assess your application and to take steps at your request prior to potentially entering into an employment contract. You are not under a statutory obligation to provide your personal data; however, if you do not provide the information required to evaluate your application, we may be unable to process your candidacy or to take your application further in the recruitment process.
Your data may be shared with the following categories of recipients:
(a) authorized HR staff and relevant hiring managers within Alveus Therapeutics, Inc. and Alveus Therapeutics ApS;
(b) IT service providers and recruitment platform providers supporting our recruitment systems, acting as data processors on our behalf pursuant to written data processing agreements; and
(c) professional advisors (e.g., legal counsel) where necessary in connection with the recruitment process.
We do not sell or share applicant data for marketing purposes.
Personal data is retained only for the period necessary to complete the recruitment process and, unless required by applicable law to keep it longer, for up to 12 months after the recruitment process concludes. This retention period is consistent with applicable U.S. federal record-retention requirements, including those under EEOC regulations. Records will then be securely deleted or anonymized.
Depending on your location, you may have the following rights with respect to your personal data: the right to access, correct, or delete your data; the right to restrict or object to the processing of your data; the right to data portability; and the right to withdraw consent where processing is based on consent. To exercise any of these rights, please contact us at: hr@alveustx.com
You also have the right to lodge a complaint with a competent supervisory authority. For applicants in Denmark, the relevant authority is the Danish Data Protection Agency (Datatilsynet).
For applicants in other EEA Member States, you may lodge a complaint with the supervisory authority in your Member State of habitual residence, place of work, or place of the alleged infringement. For U.S. applicants, complaints may be directed to the relevant federal or state privacy oversight authority, as applicable.
We may update this Recruitment Privacy Notice periodically. The effective date will appear at the top of this notice.