Last updated on: 2026-03-20
1. INTRODUCTION
This Candidate Privacy Notice (“Privacy Notice”) explains how we handle your personal data in connection with our recruitment process and our recruitment platform, Lever.co (“Service”). It applies to individuals who apply for opportunities with us and individuals who are sourced or referred for potential opportunities.
Please note that if you are named as a reference by a candidate, please see the section “Information to Reference Persons” at the end of this notice for information about how we process your personal data.
For the purposes of this Privacy Notice, Fatalist Development AB is the data controller for the processing of your personal data. Fatalist Development is part of Avalanche Studios Group. Our company information is:
Fatalist Development AB
556755-2418
Box 11238
SE-10061 Stockholm, Sweden
2. YOUR DATA, YOUR RIGHTS
Under data protection laws, including the European General Data Protection Regulation, you have certain rights over the processing of your personal data.
- Right of access. You have the right to request information concerning if we process your personal data and if we do, you have the right to know what kind of personal data.
- Right of rectification. You have the right to request that we correct and rectify any inaccurate or incomplete personal data concerning you.
- Right to erasure. You have the right to request that we delete your personal data. Note that we may retain information in certain situations, including when needed to comply with our legal obligations, resolve disputes or prevent fraud.
- Right to restriction of processing. You have the right to request that we temporarily or permanently cease processing of some or all of your personal data.
- Right to data portability. In some instances you have the right to receive a copy of your personal data for the purpose of transferring them to another service provider.
- Right to not be the subject of automated decision making. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or otherwise significantly affects you.
- Right to withdraw consent. You may at any time withdraw your consent to the processing of any personal data based on your consent, without it affecting the lawfulness of any processing done before you withdrew your consent.
- Right to object. You have the right to object to our processing of your personal data for a certain purpose or to object to your personal data being used for direct marketing.
If you wish to exercise any of the above rights regarding your personal data, please contact us at [email protected].
If you have any questions about your privacy, your rights, or how to exercise them, please contact us using the information provided to you in the “How to contact us” section of this Privacy Notice.
If you have concerns regarding the processing of your personal data, we hope you can work with us to solve them. However, you also have a right to lodge a complaint with regulatory authorities. To exercise this right, you can contact the Swedish Data Protection Authority or your local data protection authority. The contact details to the Swedish Data Protection Authority and other national data protection authorities in the EU can be found here.
3. OUR PROCESSING OF PERSONAL DATA
This section details i) whom we process personal data about, ii) the sources for personal data, iii) the specific categories of personal data we process, and iv) the legal basis and purposes for which we use it.
3.1 Whom we process personal data about
We process personal data regarding the following categories of data subjects.
- Applying candidates. We collect and process personal data about you when you apply for an opportunity.
- Sourced candidates. We collect and process personal data about you when we conduct sourcing. Sourcing is the process of proactively scouting you for an opportunity.
- Referred candidates. We collect and process personal data about you when you are referred by someone for an opportunity.
3.2 Sources of personal data
We collect personal data about you from the following sources.
- Directly from you. Information that you provide with your application and during interviews.
- Recruitment agencies. Information provided by third party agencies who refer you to us.
- Publicly available professional profiles: Information from professional networks (e.g., LinkedIn) or corporate websites where your professional details are published.
- Reference persons. Information provided by your named reference persons.
- Background check providers. Results from third-party screening services (where applicable).
- Internal referrals: Information provided by our current employees who recommend you.
3.3 Categories of personal data that we process
We process the following categories of personal data about you.
- Application data. Information you provide to us when applying for an opportunity, including your CV or resume, cover letter, contact details, academic history, employment history, professional qualifications and portfolio.
- Interview data. Information generated during the interview process, including interviewer notes.
- Test data. Results and reports from tests and technical assessments, including coding, art and design assignments.
- Background check data. Information verified or provided by third party screening services to validate your identity and history. Depending on the seniority and nature of the role, this may include verification of education and employment history, credit history, right-to-work documentation and credit check information.
- Sourced data. Information we collect about you from professional networking sites or corporate websites where your professional details are published. This includes information about your previous roles and employment and other information you have provided on professional networking sites.
- Referral data. Information provided by an employee or contact who recommends you for an opportunity. This includes your contact details, your resume, the reason for the recommendation and other information related to your professional experience.
- Reference check data. Feedback and employment verification details obtained from persons you have named as references. This includes confirmation of your previous roles, dates of employment and performance feedback.
- Right to work data. Information regarding your eligibility to work in the relevant location. This includes your nationality, citizenship status, the type of work or residence permit you hold, the validity dates of such permits, and any restrictions on your employment status.
- Diversity data. Information about your personal sense of your gender (gender identity).
Providing us with Diversity data is fully optional and refusal to provide it will not subject you to any adverse treatment or affect your job application. Categories other than Diversity are required for us to assess your job application and potentially enter into an employment agreement with you. Failure to provide such information may result in our being unable to properly process or evaluate your application, and could ultimately prevent us from moving forward with your candidacy or entering into an employment relationship.
3.4 How we use your personal data and our legal basis
The table below explains why we collect your personal data during the recruitment process and the legal basis that allows us to do so.

We may also use your personal data to create aggregated and anonymized statistical data. We use this information to analyze recruitment trends, monitor the effectiveness of our recruitment process, and generate internal reports.
4. AUTOMATED DECISION MAKING
We do not use any form of automated decision making or profiling that produces legal or other similarly significant effects concerning you in our recruitment process.
5. SHARING YOUR PERSONAL DATA
We share your personal data in the following ways.
- Third party service providers. To vendors and partners who provide specific services on our behalf. These include Lever Inc., which is our data processor for personal data processed in connection with the Service, and Google, which acts as our data processor for personal data processed during email communications or digital meetings.
- Mandatory disclosures. To authorities, unions, and other entities in order to comply with applicable laws, regulations, legal processes, or government requests.
- Legal claims. To auditors, insurers, and legal counsel for the purpose of dispute resolution or litigation.
- Business successors. To potential or actual buyers (and their agents) in the event of a merger, acquisition, or sale.
6. BACKGROUND CHECKS
For certain positions, and to the extent permitted by applicable laws, we may require a background check before making a final offer of employment. We perform these checks to verify the information you have provided during the recruitment process and to ensure the integrity and safety of our workplace. We engage a reputable third party service provider, 2Secure Sverige AB, to conduct these background checks on our behalf. We will always inform you before a background check is initiated, and where required by law, we will obtain your specific consent before proceeding.
These checks may include verification of your academic and employment history, references and professional qualifications, financial checks, social media checks, company engagements checks and checks related to criminal offenses. 2Secure Sverige AB is an independent data controller when conducting background checks and it has permission from the Swedish Data Protection Authority to process personal data related to criminal offenses. Such personal data is not further processed by us. 2Secure Sverige AB will always inform you about what information is collected in connection with the screening.
7. TRANSFERS TO COUNTRIES OUTSIDE THE EU AND EEA
We transfer and share your information to third parties (including service providers operating on our behalf) which are located in countries outside the EU and/or the EEA which may not have the same level of data protection laws as those in the country where you are located.
Our main service providers, Lever Inc. and Google, are located in the United States and are certified under the EU-U.S. Data Privacy Framework. Transfers to these providers are therefore covered by an adequacy decision adopted by the EU Commission, ensuring that your data is protected.
For other transfers to a country outside the EU/EEA that is not subject to an adequacy decision, the transfers will only occur if we have entered into EU Commission-approved standard contractual clauses with the receiving entity. These clauses are designed to offer sufficient safeguards with respect to the protection of your privacy and fundamental rights. You may obtain a copy of these clauses here.
8. KEEPING YOUR DATA SAFE
We care about privacy and security. To that end, we have implemented the appropriate technical and organizational measures to ensure that your personal data is collected, processed, and stored as securely as possible. For instance, we have implemented various policies including encryption, access, and retention policies to guard against unauthorized access and unnecessary retention of personal data. On top of this, we enforce contractual measures by way of non-disclosure agreements, data processing agreements, and other contractual clauses designed to keep your personal data safe.
9. DATA RETENTION AND DELETION
If your application leads to employment with us, your personal data will be transferred to and retained in our human resources information system and processed in accordance with our privacy policy for employees. Any personal data that is not relevant i) for the employment or, ii) for complying with legal obligations and for resolving potential legal claims, will be deleted or anonymized.
In other instances, the following retention periods will apply.

If we need to process your personal data to resolve a legal claim, we will retain it until the relevant legal matter has been fully and finally resolved.
8. HOW TO CONTACT US
If you have any questions, complaints, or comments regarding how we process your personal data or about this Privacy Notice, please contact us at:
Fatalist Development AB
Box 11238
SE-10061 Stockholm, Sweden
We have appointed a data protection officer. If you wish to contact our data protection officer specifically, then clearly state this on the subject line of your email to [email protected].
11. UPDATES TO THIS PRIVACY NOTICE
We may update this Privacy Notice from time to time to reflect changes in our recruitment processes, legal requirements, or operational practices.
The latest version will always be available on our website. If we make material changes that significantly affect your rights or how we process your personal data, we will notify you directly (for example, by email).
We encourage you to review this page periodically to stay informed about how we process your personal data. The date at the top of this Privacy Notice indicates when it was last updated.
INFORMATION TO REFERENCE PERSONS
If a candidate names you as a reference in the recruitment process, Fatalist Development AB will process limited personal data about you in order to verify the candidate’s professional background and suitability for the role.
We receive your personal data directly from the candidate who has applied for a position with us. The information we hold about you include your name, job title, and contact details.
We process your personal data with the purpose of contacting you to verify the accuracy of information provided by the candidate and assess their suitability for the opportunity.
We process the personal data on the basis of legitimate interest, which is to validate the professional background, qualifications, and performance history provided by the candidate, which allows us to make informed hiring decisions, ensure the integrity of our recruitment process, and protect the organization from potential hiring risks.
Your personal data is retained for as long as the personal data of the candidate is kept, normally two years from when the position which the candidate applied for is filled.
For more information about how to process your personal data, please consult Section 1 (Your data, your rights), Section 4 (Automated decision making), Section 5 (Sharing your personal data), Section 7 (Transfers to countries outside the EU and EEA), Section 8 (Keeping your data safe), Section 10 (How to contact us) and Section 11 (Updates to this Privacy Notice).