At a glance
- We process data about candidates, interim leaders, clients, and visitors to agilegruppen.no to carry out interim management, executive search, and board recruitment assignments.
- When you share your CV with us, we may share it with clients who have a relevant assignment without asking you first. You can opt out at any time.
- We use AI to support our work, but all assessments are made by an adviser.
- We retain candidate data for up to four years after the last contact.
- Questions, access requests, or deletion: hilde.lekven@agileas.no or 952 82 591.
Who is responsible
This policy applies to Agile Gruppen AS (organisation no. 927 233 525) and its subsidiaries Agile Interim AS (organisation no. 894 168 722) and Agile Executive Search AS (organisation no. 965 950 044), which also operates Agile Styrerekruttering.
Interim, Executive Search, and Styrerekruttering each have their own candidate database. Agile Interim AS is the data controller for the interim database, and Agile Executive Search AS for the executive search and board recruitment databases. Agile Gruppen AS is the data controller for the website, newsletters, and marketing.
Contact for all privacy questions: Hilde Lekven, Managing Partner, hilde.lekven@agileas.no, phone 952 82 591.
What data we process
About candidates and interim leaders: contact details, CVs, work experience, salary and salary expectations, notes from conversations, and our assessments. In specific processes, we also process test results and references. For interim leaders with an agreement, we process the data needed for contracts, pay, and invoicing.
About clients and reference providers: name, position, employer, contact details, and their dialogue with us. For reference providers, this also includes what they tell us about the candidate.
About website visitors: technical information such as IP addresses and how you use the site.
Most data comes directly from you. We also obtain data from public sources such as LinkedIn, our network, references you have provided, and clients after interviews.
We do not request sensitive data such as health information, religion, or political views, and we delete any such data we receive that is not necessary. Providing data is voluntary, but without it we cannot consider you for assignments.
How we use the data
The legal basis under Article 6 of the GDPR is shown in parentheses.
Candidate database and sharing CVs
When you share your CV with us, either unsolicited or in connection with a specific assignment, we add it to our candidate database. We may share it with clients who have an assignment we believe suits you, without asking you first. In a specific process, we may also share our assessments, test results, references, and salary expectations. If you prefer to be asked first, or do not want to be presented to particular businesses, let us know. (Legitimate interest: finding the right leaders for our clients and considering you for relevant roles.)
Candidate mapping
In search assignments, we identify relevant candidates through public sources and our network. Your name, position, and employer may be included in an overview for the client before we have contacted you. We inform you when we get in touch. (Legitimate interest: finding the best-qualified candidates.)
Tests and references
We use tests and references only in specific processes. You receive a digital review of the test results, and we obtain references only by agreement with you. (Legitimate interest: giving the client a better basis for decisions.)
Agreements and client relationships
We use the data to enter into and perform agreements with interim leaders and clients, pay salaries or fees, issue invoices, and meet requirements under legislation including the Norwegian Bookkeeping Act. Without the data, we cannot enter into an agreement. (Contract, legal obligation, and legitimate interest.)
Newsletters
We send newsletters to clients and contacts in their professional capacity, and to others who have subscribed, and measure opens and clicks. You can unsubscribe in every email. (Legitimate interest for clients and contacts; otherwise, consent.)
The website
We use analytics and marketing cookies only with your consent. (Consent.)
Use of artificial intelligence (AI)
We use AI tools from Anthropic (Claude) and OpenAI (ChatGPT) for tasks including summarising CVs, searching the candidate database, analysing test results, and drafting candidate presentations.
AI makes no decisions about you. An adviser makes all assessments and checks the quality of AI-generated content, and the client decides who moves forward.
We use business versions in which the providers do not use the data to train their AI models.
Who we share data with
- Clients, as described above.
- Interim, Executive Search, and Styrerekruttering share data with each other when you are being considered for an assignment in another business area. (Legitimate interest: considering you for relevant assignments across the group.)
- Providers that process data on our behalf under a data processing agreement: Recman, HubSpot, Microsoft, Assessio (tests), Refapp (references), Anthropic, and OpenAI.
- Google, for analytics and advertising measurement when you have consented. For advertising measurement, Google is an independent data controller.
- Meta, which owns Facebook and Instagram, for advertising measurement when you have consented. We and Meta are joint data controllers for the collection and transfer of data to Meta, and Meta is an independent data controller for subsequent processing.
- Our accountant and auditor, and public authorities when required by law.
Anthropic, OpenAI, HubSpot, Microsoft, Google, and Meta may process data in the United States. Transfers are based on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the EU’s Standard Contractual Clauses.
How long we retain data
We retain candidate data for up to four years after our last contact with you. We retain client data for as long as the client relationship or dialogue is active, accounting records for as long as required by the Norwegian Bookkeeping Act, and website analytics data for 14 months. You receive newsletters until you unsubscribe.
You may ask us to delete the data earlier, unless the law requires us to retain it.
Cookies
Necessary cookies enable the website to function and do not require consent. Only if you consent do we additionally use Google Analytics and HubSpot to understand how the website is used, and Google Ads, Meta, and HubSpot to measure the effectiveness of our advertising.
If you have completed a form or clicked a link in one of our newsletters, HubSpot may link your visit to you.
You can change your consent at any time through “Cookie settings” at the bottom of the page.
Your rights
You may request access to the data we hold about you, and ask for it to be corrected, deleted, or its processing restricted. Data you have provided yourself can be supplied to you in a machine-readable format. You may withdraw consent at any time, without affecting processing carried out before withdrawal.
You may object at any time to processing based on legitimate interest, such as our sharing your CV with clients, and opt out of marketing.
Send your request to hilde.lekven@agileas.no, and we will respond within one month. If you believe we are processing your data incorrectly, you may complain to the Norwegian Data Protection Authority.
Changes
We update this policy when we change how we process personal data. Last updated 8 October 2026.