Guidelines for managers on handling applications and supporting documents

Here, you can find guidelines for how to handle applications received in response to job advertisements, and also unsolicited applications


Applications received in response to job advertisements

Applications and supporting documents must be treated as confidential. This means that, other than the administrative case officers, it is only members of the appointment committee and the assessment committee who are allowed access to the material.

Application materials may only be stored for up to six months after the applicant has received notice of rejection. Applications may be saved for up to 12 months after the notification of rejection, provided that the applicant has given express consent thereto*. 

*Proposed consent text: “With reference to Article 6(1)(a) and Article 7(1)(a) of the General Data Protection Regulation and Sections 6(1)(e) and 7(1) of the Danish Data Protection Act, I, the undersigned, hereby give consent for my application with supporting documents for the position of [job title of the position applied for] at [name of unit] to be saved for up to one year after I have received notice of rejection for the position. I am aware that my consent may be revoked at any time.”


The application materials of the successful candidate will be saved by HR in the folder concerning the employee in workzone.

You have a duty to inform the employees who are part of the appointment committee that they have an obligation to store applications, with supporting documents, so that unauthorised persons cannot access them, and to erase electronic documents and shred all printed materials received from applicants immediately after the position has been filled.

Unsolicited applications

Unsolicited applications may not be forwarded to other managers at AU. If you receive an unsolicited application that you believe might be relevant for another manager, you should encourage the person who submitted the application to contact the relevant manager(s).  This ensures that the person submitting the application is responsible for his or her own data and that you do not need to consider obtaining consent for forwarding of the application.
 

a. If your immediate assessment is that you cannot use the application and you do not expect the applicant’s competencies to be relevant:

Proposed response text to be sent as soon as the application has been received and read:

“Dear [name],

Thank you for your application. Unfortunately, we are unable to offer you employment. However, you are welcome to check AU’s website for any new vacancies that may arise. Your unsolicited application has not been, and will not be, forwarded, and will be erased immediately. Aarhus University is the data controller for the processing. Our data protection officer can be contacted by email at: dpo@au.dk. You have the right to complain about the erasure of your data to the Danish Data Protection Agency at: dt@datatilsynet.dk

b. If your immediate assessment is that there is no current opportunity to offer employment, but you would like to save the application because you assess that a position may arise within the next six months:

Template for reply to be sent immediately after the application has been received and read:

“Dear [name],

Thank you for your application. We are unfortunately unable to offer you a position at this time, but we would like to retain your application for up to six months, so that we can contact you in the event that a relevant job opportunity arises. Your application with supporting documents will be erased no later than six months from today’s date, unless you request erasure at an earlier time. I will not forward your application to any other recipients at Aarhus University.  Aarhus University is the data controller for the processing. The legal basis for the processing of your data is Article 6(1)(e) of the General Data Protection Regulation. AU’s data protection officer can be contacted by email at: dpo@au.dk. You are entitled to access the data, to have incorrect data rectified or erased, and to complain about the data processing to the Danish Data Protection Agency at: dt@datatilsynet.dk.”

When you save the application, you must save it on a secure drive. You should also set up a reminder so that you can be sure you remember to delete the application after a maximum of six months.