The Rabbit Hole is a cybersecurity challenge platform operated by DNV Cyber. This privacy notice explains what information we collect, how we use it, and your rights regarding your personal data.
When you use The Rabbit Hole, we collect the following information:
Account Information: When you sign up, we collect your email address to authenticate you and send verification codes. We generate a random pseudonym for the scoreboard to protect your identity.
Challenge Progress: We store your challenge submissions and scores to track your progress and display rankings on the scoreboard.
Browser Storage: The website stores an access token in your browser after logging in. This is required to keep track of who solved what. You can clear it from the browser's local storage, but then the site will not work properly.
Server Logs: On the backend we store IP addresses of visitors in standard webserver logs for security monitoring purposes. Logs older than one year are automatically erased.
You can view and change your consent preferences at any time on your profile page. This includes withdrawing your consent to be contacted about work opportunities — simply uncheck the relevant option and save your profile.
You can delete your Rabbit Hole account and all associated data at any time via the account deletion page. For any questions about your data, contact us at dataprotection@dnv.com.
If you choose to be contacted about work opportunities at DNV Cyber, the following applies:
DNV Cyber processes your information for recruitment purposes when you submit your application to us via our application system. We process the applications and applicant information to assess your knowledge and experience. We strive to identify the most suitable person for the open position as well as for future positions that may become available. The processing is based on your consent and DNV Cyber's legitimate interest to hire the most competent professionals.
We use your information for contacting you and communicating with you about the recruitment process. We analyze the information you have given to us and compare the information to the defined requirements.
We process information that is necessary in order for us to evaluate your knowledge and expertise. All the information is collected on your consent.
We collect your name and contact details to be able to contact you. To be able to assess your suitability for open positions, we process the information you have given to us. This information includes: education, job history, salary expectations, preferred location to work at and other information you have provided for us in your application and attachments.
If you receive a job offer from us, we may conduct background checks or other suitability checks, to the extent permitted by the applicable law, and that you give your consent to during the recruitment process.
We collect the information from the job applicants themselves. During the recruitment process, we may also request information from possible referees with candidate's permission.
We store your information for future open positions for twelve months from the application so that we can contact you if a suitable future position becomes available. Your application and candidate profile will be automatically deleted after 12 months unless you reconsent for us to store your details for further 12 months.
At DNV Cyber your information is processed only by hiring managers and People Operations personnel, also colleagues if you proceed to interview stages. If you wish to be contacted about open positions in the future your information may be reviewed within DNV Cyber group by hiring managers and People Operations looking for possible candidates. DNV Cyber is also using external partners for recruiting.
We also use third-party service providers for recruiting software and systems. These service providers have limited access to your personal information only in order to provide their services as data processors acting on our instruction.
If you wish to use your privacy rights in relation to recruitment, follow the instructions underneath or contact us by email dataprotection@dnv.com.
To withdraw your consent to be contacted about work opportunities, visit your profile page and uncheck the "Contact me about work opportunities" option.
You can view your information by logging in to DNV Cyber's recruitment system with your personal credentials you created when you submitted your application. You can rectify your information by logging in to DNV Cyber's recruitment system. If you wish to delete your information, you can request deletion by logging in to the DNV Cyber's recruitment system (Data & Privacy section) or contact dataprotection@dnv.com. We will delete your information within one month from the date of your request. You can object to the processing and withdraw your consent by erasing your information or by informing us that you don't want to be part of the ongoing recruitment process and/or to be taken into account for the possible future positions that may become available.
If you have any questions regarding the processing of your personal information in connection with our recruitment activities, please contact us by emailing dataprotection@dnv.com.