Privacy notice for document uploads
This notice covers your verified email address, message, CV and relevant qualification documents submitted when contacting us about work.
Controller and contact
Momentum El ApS, company registration (CVR) 35249575, Skinderskovvej 10, 2730 Herlev, Denmark, is the controller. Contact sh@momentum-el.dk or +45 70 20 38 39.
Information, purposes and legal basis
We process your verified email, message and submitted documents, including your name, contact details, work experience, education and relevant certificates. We use them to assess and respond to your enquiry about work, contact you and administer recruitment.
The basis for the current enquiry and necessary subsequent documentation is GDPR Article 6(1)(f): our legitimate interests in recruitment, handling enquiries and documenting the process. We limit the data and access to what is necessary. You may object to this processing.
You decide whether to provide information. Without an email address and relevant details, we cannot handle your enquiry through the upload form. You may contact us by telephone instead. Joining the talent pool is not a condition for handling your current enquiry.
Optional talent pool
Only if you actively tick the optional consent box may we also retain your email, message and submitted documents to contact you about future jobs for up to 12 months from consent. The basis is Article 6(1)(a). The box is not preselected.
You may withdraw consent at any time by emailing sh@momentum-el.dk, preferably including your submission reference. Withdrawal does not affect earlier lawful processing. Information still necessary for your current enquiry or its documentation may be retained on the separate basis described above.
Provide only necessary information
Do not upload national identification numbers (CPR), passports, banking information, health information, information about religion or trade union membership, criminal record certificates or other sensitive information. Remove such information from your CV and attachments first. Contact us before sending anything you believe is necessary. We must review submissions and remove material we have no basis to retain.
Access, recipients and decisions
Access is restricted to staff who need it for their work. Documents are stored with Nordicway ApS, CVR 40745769, acting as hosting processor with relevant service providers. Documents are not publicly accessible. Automatic Dropbox and OneDrive transfers are disabled. Automatic notification emails do not attach your documents.
If sharing your CV with a specific customer becomes relevant, we must first establish the purpose, necessity and legal basis and inform you about the recipient. Uploading does not automatically share your documents with customers. The upload function does not automatically collect references, profile applicants or make employment decisions.
Retention and deletion
For the current enquiry, we delete material once it is no longer necessary and at the latest 6 months after the recruitment process or enquiry closes. Open cases are reviewed regularly. Talent pool use ends no later than 12 months after consent, or when you withdraw it. If both purposes apply, material may be retained while at least one valid purpose remains, but may not be used for the talent pool once consent has ended.
If you are hired, necessary records must move to personnel administration under separate information and retention rules. Exceptional longer retention, such as a specific ongoing dispute, requires a separate documented assessment. Downloaded working copies follow the same deletion policy. Backups must follow the processing agreement, and recorded deletions must be reapplied after restoration.
Security, cookies and technical data
Uploads use HTTPS. A time-limited email code checks access to the entered mailbox, not your wider identity. Documents are stored outside the public website folder. Staff must retrieve documents over an encrypted connection and protect local copies.
The form uses a necessary session cookie for email verification, security and submission, not for marketing. Temporary pseudonymised counters help prevent abuse. Web and email servers may record IP addresses, timestamps and delivery status for operation and security; providers' log and backup periods must be included in our documented deletion procedure.
Your rights and complaints
You may request access, correction, erasure or restriction and object to processing. Data portability may apply to consent-based processing. These rights are subject to GDPR conditions and exceptions. Contact sh@momentum-el.dk. We verify identity appropriately and normally respond within one month. You may complain to the Danish supervisory authority, Datatilsynet.
Version 2026-10-24-v2. Updated 24 October 2026.