Employee Privacy Notice

This version was published, and is valid from 2026/07/20, v2.0

This notice provides information on the Volvo Group’s processing of personal data of its employees (“Privacy Notice”). If you are or have been an employee of a Volvo Group company, we may process personal data about you.

For the purpose of this notice, the “Volvo Group” means AB Volvo (publ.) and entities directly or indirectly controlled by AB Volvo, including but not limited to entities belonging to any of the Volvo Group’s principal Business Areas and Truck Divisions (as may exist from time to time) such as Volvo Trucks, Volvo Buses, Volvo Construction Equipment, Renault Trucks, Volvo Penta, Mack Trucks, Volvo Financial Services, Volvo Group Connected Solutions, Volvo Technology, Volvo Group Purchasing, Volvo Group Real Estate, Volvo Treasury, Volvo Information Technology, Volvo Group Trucks Operations, Volvo Autonomous Solutions and Volvo Energy. 

This Privacy Notice applies only when Volvo Group is collecting or otherwise processing personal data for Volvo Group’s purposes (i.e., when Volvo Group (either alone or in common with other entities) is a controller and therefore determines the purposes for which and the manner in which any personal data is processed).

This Privacy Notice does not apply when Volvo Group is collecting or otherwise processing personal data on behalf of another company, such as Volvo Group’s independent dealers, importers, suppliers and customers.

In addition to this Privacy Notice, some Volvo Group systems, applications, and processes (for example the Whistleblowing system) may contain their own privacy notices, which provide additional details about what specific personal data is collected and how it is stored, used, and transferred.

Select language

The Volvo Group company that you are or have been employed by (below referred to as “Volvo”) is the controller of the personal data that Volvo obtains from you and the other sources described below.

“Controller” means that it is Volvo that decides on the purpose and means for the processing of your personal data. Volvo is responsible for the processing of your personal data under applicable data privacy laws and regulations.  

If you have questions regarding the processing of your personal data, please contact the Volvo Chief Privacy Officer at gpo.office@volvo.com or by post or phone at:

AB Volvo,
Att: Group Privacy Office, Dept AA14100, VGHQ
SE-405 08
Göteborg, Sweden 
+46 (0)31 66 00 00

If you are in the United Kingdom, Volvo Group UK Limited is Volvo’s representative in the United Kingdom, contact details below:

Volvo Group UK Limited,
Att: Legal Department
Wedgnock Lane
Warwick
United Kingdom
CV34 5YA

For the purposes of this Privacy Notice, “personal data” is any information about a specific individual or that identifies or may identify a specific individual. In other words, it is any piece of information than can be linked to you.  

For the purposes of this Privacy Notice, the term "process” or “processing” means any use of personal data, including but not limited to the collection, recording, organization, storing, adaptation, alteration, transferring, making available, blocking, deletion or destruction of personal data.

Legal ground

Volvo may process your personal data based on any one or more of the following legal grounds, see also further details below.

  • Contractual obligation Volvo may process your data if such processing is necessary to fulfil a contractual obligation towards you e.g. to be able to pay your contractually agreed salary, pension and other benefits.
  • Legal obligation. Volvo may process your personal data if such processing is necessary to comply with a legal obligation, e.g. to report your income to the tax authorities or to comply with court orders and legal reporting requirements.
  • Legitimate interests. Volvo may process your personal data if such processing is necessary for the purposes of a legitimate interest pursued by Volvo or a third party. It is generally considered to be in Volvo’s legitimate interest to manage its daily operations, secure its facilities and equipment and keep internal control. In order to base its processing of personal data of its employees on the legitimate interest-basis, Volvo makes an assessment on case-by-case basis. For example, Volvo needs to process certain personal data to enable administration of your business-related travels where Volvo’s legitimate interest is to manage its daily operations; or Volvo needs to process certain personal data to review the status and location of its IT-equipment where Volvo’s legitimate interest is to secure its equipment.

    Where it is stated herein that Volvo relies on its legitimate interests for a given processing purpose, Volvo is of the opinion that its legitimate interests are not overridden by your interests, rights or freedoms given (i) the transparency Volvo provides on the processing activity, (ii) Volvo’s privacy by design approach, (iii) Volvo’s regular privacy review and (iv) the rights you have in relation to the processing activity. If you wish to obtain further information on this balancing test approach, please contact the Volvo GroupChief Privacy Officer via the contact details set out above.
  • Consent. In exceptional cases or if no other legal ground can be applied, Volvo may ask for your explicit consent to process certain personal data. Your consent is free and informed, you have the possibility or not to give it as well as to withdraw it at any time.

Volvo may process the following categories of data which, in itself or in combination with other data, may constitute personal data and for the general purposes stated in Table 1 below.

Volvo will not necessarily process all the data listed below about you, and some of the purposes for processing will overlap and there may be several purposes which justify our use of your personal data.

Table 1 – Categories, Purpose and Legal Ground for Processing

Categories of Personal Data

Purposes of Processing

Legal Ground for Processing

Individual data, such as name, date of birth, social security number (or equivalent), gender, nationality, visa and work permit (if applicable), preferred language, marital status and photo 

·       Enabling registration of an employee in Volvo’s IT systems  General administration of employment  Enabling verification of work permit 

·       Performance of a contract  Legitimate interest (to manage the workforce)  Comply with legal obligation (employment legislation) 

 Organizational data, such as employee number, job description, position, place of work, business unit, department, manager and direct reports

·       Enabling keeping an up-to-date organization chart and record of employees, including production of internal reports and statistics  Enabling internal reorganizations and merger and acquisition projects 

·       Performance of a contract  Legitimate interest (to manage the workforce)

 Contact data, such as work address, home address, email and telephone number

·       Communicate with employees  Maintain accountability of business records

·       Performance of a contract  Legitimate interest (to manage and communicate with the workforce)

Compensation and benefits data, such as salary, salary reviews, tax deductions, pension information, expenses, tax code and bank account details

·       Enabling payment of salary, pension, expenses and other benefits to employees, as well as reviews of salary, including production of internal reports and statistics  Enabling reporting to authorities and making any deductions, as required by law, such as tax legislation

·       Performance of a contract  Comply with legal obligation (e.g. tax legislation)  Legitimate interest (to manage  the workforce)

Employment administration data, such as employment contract and other agreements between you and Volvo, applications or other forms regarding e.g. parental leave and information about hiring date and termination date 

·       Maintain accountability of business records  General administration of employment

·       Performance of a contract  Comply with legal obligation (e.g. bookkeeping requirements)  Legitimate interest (to manage  the workforce)

Time data, such as working hours, worked time, vacation and leaves of absence (parental leave, sick leave etc.)

·       Enabling keeping track of working time / leaves of absences / vacations, for remuneration as well as invoicing purposes

·       Comply with legal obligation (employment legislation)  Legitimate interest (to manage  the workforce)  Legitimate interest (to manage  the workforce)

Union membership data, if applicable and relevant and subject to that it is allowed to process such personal data under applicable law 

·       Enabling fulfilment of Volvo’s obligations as per collective bargaining agreements with unions or by Labor law 

·       Performance of a contract  Comply with legal obligation (employment legislation)

 Security data, such as access cards, access rights and use of access cards and access rights, personal addresses, professional experience, place of birth, family members data, phone numbers, travels for the 5 past years, social media accounts, education level, passport and ID data

·       Enabling fulfilment of Volvo’s obligations to provide a safe work environment (including control and prevention of unauthorized access to Volvo’s premises or equipment) and other work environment obligations as set out by work environment or Labor laws  Enabling access to restricted premises  Enabling granting of defence accreditation  

·       Comply with legal obligation (employment and work environment legislation)  Legitimate interest (to maintain safety)

 Health and safety data, such as information about work related incidents, sick-leave, rehabilitation plans, work related incidents and health examinations (including results from potential alcohol- and drug tests), disability information

·       Manage health and safety at Volvo Group facilities  Managing reasonable adjustments  Enabling emergency services in case of emergency situations such as fire, accident, sudden illness or physical assault 

·       Comply with legal obligation (employment and work environment legislation  Performance of a contract  Legitimate interest (to maintain safety and manage workforce)

Performance and evaluation data, such as evaluations, assessments and disciplinary records, if any, as well as personal preferences e.g. on mobility and career paths 

·       Enabling activities regarding competence development / improvement as well as performance evaluations and assessments  Succession planning  Enabling and suggesting learning and training activities

·       Performance of a contract  Comply with legal obligation (employment legislation)  Legitimate interest (to manage  the workforce)

Competence data, such as learning records and training activities and relevant work authorizations

·       Managing education, workforce planning, training and development

·       Comply with legal obligation (compliance requirements)  Legitimate interest (to manage the workforce)

Travel administration data, such as information on business trips, booking details, passport number, company credit card number, travel invoices and allowances

·       Enabling business travels

·       Comply with legal obligation (compliance requirements)  Performance of a contract  Legitimate interest (to manage the workforce)

IT-related data, such as user-ID, passwords, log-in details as well as data and logs about your use of Volvo’s IT equipment, application or services, as per Volvo’s IT policies, as applicable from time to time

·       Enabling the performance of work tasks, such as writing emails, establishing documents, reports, presentations, drawings etc.  Enabling proper license usage  Enabling follow-up of Volvo’s policies, including Volvo Group Code of Conduct and Volvo’s IT policies, as applicable from time to time, to ensure that such policies are adhered to and to investigate suspected prohibited  Maintaining system logs for the purpose of ensuring security, troubleshooting and performing audits 

·       Performance of a contract  Comply with legal obligation (compliance and security requirements)  Legitimate interest (to manage  business processes and systems, access, data protection and cyber security in general)

 Help desk and support data, such as questions from you/your manager/HR relating to your employment or IT-equipment or support provided to you in relation to the same

·       Enabling answering questions from you / your manager / HR regarding your employment or IT-equipment / services or provision of support necessary for the performance of your work tasks 

·       Performance of a contract  Legitimate interest (to manage  business processes and systems)

Apprenticeship data

·       Enabling performance of employer responsibilities  Ensure eligibility for funding

·       Performance of a contract   Comply with legal obligation

Maintenance / repair / service data and telematics, such as tracking and logging of activities undertaken by you in connection with use, maintenance, repair or service on a company car or department car

·       Enabling providing employment benefits to you such as a company car or car allowance (including calculation of mileage for expense claims), involving the use of vehicle related data or vehicle generated data when you have used a company car or department car

·       Legitimate interest (to manage the workforce and maintain Volvo assets)

Insurance claim data

·       Enabling management of insurance coverage

·       Legitimate interest (to manage insurance coverage)

Vehicle data, such as vehicle related data or vehicle generated data which is automatically generated if you use a Volvo-owned vehicle, such as a truck

·       Enabling research and development activities related to Volvo products (e.g. trucks), involving the use of vehicle related data and or data generated when you have used a Volvo-owned product

·       Legitimate interest (to maintain and develop products, solutions, services and applications)

Image material, such as video footage that is being recorded on a Volvo Group company closed-circuit television system (“CCTV”) installed on the applicable Volvo Group company premises or other video and related security / monitoring systems and where applicable monitor automated production whether on Volvo Group premises or not but to which we have a legitimate purpose in viewing / accessing

·       Manage safety and security at Volvo Group facilities  Quality and efficiency improvement  Developing and/or refining the production process

·       Legitimate interest (to maintain security and safety, prevent fraud or theft; and (where applicable) to assist with regulatory compliance)

Next of kin data, such as the name and contact details of persons indicated by you to be contacted in case of an emergency

·       Communicate with emergency contacts of employees

·       Legitimate interest (to manage   and communicate with the workforce)

External involvement data such as board memberships and other employments or engagements outside of the Volvo Group

·       Manage conflict of interest matters.

·       Legitimate interest (to ensure anti-corruption and compliance with code of conduct)

Forklift usage: Behaviour and location data, such as speed data, driving pattern, driver alerts, instantaneous geopositioning data and location data (with time stamps and operating hours)

·       Monitor that required maintenance and servicing is being done  Flow optimization based on actual driving times between different geopositions.

·       Legitimate interest (to maintain security and safety and to optimize flows of material and forklift usage)

Specifically, about special categories of personal data

It is specifically noted that union membership and some aspects of health and safety data may be regarded as special categories of personal data under applicable data privacy laws and shall be handled with extra care and require additional protective measures. Volvo will only process special categories of personal data if Volvo is authorized by collective bargaining agreement to process such data, has a legal obligation or a legitimate business need to process such data (including but not limited to prudent practices to help manage widespread health emergencies). In such cases, Volvo will inform you and (if required by law to do so) seek your explicit consent to process such data. You should be aware that it is not a condition of your contract with us that you agree to any request for consent from us.

Specifically, about CCTV monitoring

Volvo may use company closed circuit television (CCTV monitoring) on its premises where permitted by law. Please note that the processing of CCTV-related personal data is not covered by this Privacy Notice but by the Privacy Notice for Visitors.

Specifically, about automated decision-making

Volvo does not regularly and systematically perform automated decision making producing a legal effect concerning individuals or that would have a similarly significant effect. In the event that you are interacting with a Volvo company that is performing such automated decision making you should receive a specific notice that outlines the details of the automated decision making. 

Specifically, about surveys

Surveys are commonly used in Volvo Group. These surveys and reports are used to provide quantitative, qualitive, numeric trends, attitudes or opinions to study and manage the workforce. The data that Volvo Group collects are done under genuine and legitimate reason and always to achieve the above stated purpose. Data collected will contain either data this is directly or indirectly connected to you, but in most instances completely anonymously.

More notably, Viva Glint i.e. Volvo Group Pulse surveys. These survey responses are anonymized and aggregated so that replies cannot directly identify you. The collected survey responses, along with the data that Volvo Group provides about you (name, company email address and other demographic data) are for the purpose of administrating a survey, creating reports and providing related analytics on employee engagement, experience, perception, performance, leadership effectiveness and how you act according to Volvo Group values. Though Volvo Group has asked the service provider for a specific aggregated threshold (or conducted further de-identification process) an individual’s identity might still be possible to determine based on the information provided by you in the comments/free text fields, however before potential analysis of comments/free text fields the material will be even further anonymized. Though, it’s still of importance that you try to avoid identifying yourself or another person directly or indirectly in those fields.

Furthermore, Volvo Group might also utilize AI technologies to improve insights, in reports and surveys i.e. Volvo Group Pulse. Though always while ensuring that all personal data is processed in accordance with has been stated above as in compliance with data privacy regulations to protect your privacy and rights.

Volvo will primarily obtain your personal data from yourself, e.g. during the application and on-boarding process, throughout the duration of employment, and, in some cases where permitted, upon separation.

Your personal data may also be obtained via your manager or Human Resources, or other third party to whom you have directed us to obtain your personal data, e.g. when we contact references that were provided to Volvo by you.

Some personal data might also be automatically generated from Volvo’s IT-system, or equivalent, for example when creating your user-id to Volvo systems.

Except for certain information that is required by law, your decision to provide any personal data to Volvo is voluntary. You will therefore not be subject to adverse consequences if you do not wish to provide Volvo with your personal data.

However, please note that it is necessary for Volvo to process certain personal data relating to you to administer your employment with Volvo, such as the employment contract, the provision of IT tools and services, access rights to Volvo’s premises and the payment of salary and benefits. 

Your personal data may be shared with other Volvo Group companies and with certain categories of third parties (as further detailed below), which may involve transferring your personal data to other countries.

Sharing of personal data within the Volvo Group

The Volvo Group is a global organization with offices and operations throughout the world, and your personal data may be transferred or be accessible internationally throughout the Volvo Group’s global business and between its various entities and affiliates. Any transfers of your personal data to other Volvo Group companies (including transfers from within the EU/EEA to outside the EU/EEA and/or from the UK to outside of the UK) will be governed by an intercompany agreement based on EU approved Standard Contractual Clauses or such other mechanisms as have been recognized or approved by the relevant authorities from time to time, and other required jurisdictional safeguards. Such agreement reflects the standards contained in European data privacy laws (including the EU General Data Protection Regulation). Having this agreement in place means that all Volvo Group entities have to comply with the same internal rules. It also means that your rights stay the same no matter where your data are processed by Volvo Group.

Sharing of personal data with third parties outside of the Volvo Group

In addition to the sharing of personal data between Volvo Group companies as set out above, Volvo may also share your personal data with certain categories of third parties, including:

  • Business partners, such as Volvo Group’s suppliers and service providers in connection with their provision of products and services to the Volvo Group, such as IT service providers, travel agencies, payroll agencies and benefit administrators, pension and insurance companies, occupational healthcare providers, company car service providers and company card providers.
  • Unions, if applicable, in connection with lay-offs, termination of employment matters, PPI (Plan for Personal Improvement) matters, internal reorganization projects and merger and acquisition projects.
  • Professional advisors, such as insurers, lawyers and other professional advisors in connection with insurance claims, audits and the receipt of advisory services.
  • Counterparties and their advisors, such as in connection with merger and acquisition projects and other projects or collaborations (including merger, acquisition projects, Insurance companies)..
  • Emergency service providers, such as the police, fire brigade, ambulance and roadside assistance in connection with emergency assistance.
  • Law enforcement, regulatory authorities, governmental agencies and other public and judicial bodies in connection with legal obligations such as court orders or legal reporting requirements or if considered necessary in exceptional cases to protect the vital interest of you or others.

Any third party service providers and professional advisors to whom your personal data are disclosed, are expected and required to protect the confidentiality and security of your personal data and may only use your personal data in compliance with applicable data privacy laws and regulations.

Transfer of data outside of EU/EEA

In the event that any Volvo Group company that is located within the EU/EEA transfers personal data to external third parties that are located outside of the EU/EEA the relevant Volvo Group company will satisfy itself that there are appropriate safeguards in place which provide adequate levels of protection of your personal data as required by applicable data privacy laws (including the EU General Data Protection Regulation). For example, this may include the use of EU approved Standard Contractual Clauses or such other mechanism as have been recognized or approved by the relevant authorities from time to time.

If you have questions about how Volvo will share your personal data, please contact the Volvo Chief Privacy Officer via the contact details set out above.

Volvo utilizes appropriate and reasonable legal, technical and organizational security measures, including information technology security and physical security measures, to adequately protect personal data.

These measures are appropriate to the risks posed by the processing of personal data and to the sensitivity of the personal data and take into account the requirements of applicable local law. In addition, the measures are continuously improved in line with the development of available security products and services.

Volvo requires all persons to abide by applicable security policies related to personal data when using Volvo systems. 

Volvo will normally keep your personal data during the employment and as documented in our data retention schedule and applicable supplements. After your employment has ended, Volvo will only process the personal data deemed necessary for the fulfilment of the purposes for which it was collected and only up and until such purpose has been fulfilled or, if later, for such time as may be required to comply with local legal, tax or benefits obligations or to satisfy any legal requirements in the event of an actual, threatened or anticipated dispute or claim.

You may be entitled, where provided for under applicable data privacy laws and regulations, to:

  • Request access to the personal data Volvo process about you: this right entitles you to know whether we hold personal data about you and, if we do, to obtain information on and a copy of the specific pieces and categories of personal data.
  • Request a rectification of your personal data: this right entitles you to have your personal data corrected if it is inaccurate or incomplete.
  • Object to the processing of your personal data: this right entitles you to request that Volvo no longer processes your personal data.
  • Request the erasure or deletion of your personal data: this right entitles you to request the erasure or deletion of your personal data, including where such personal data would no longer be necessary to achieve the purposes.
  • Request the restriction of the processing of your personal data: this right entitles you to request that Volvo processes your personal data only in limited circumstances, including with your consent.
  • Request portability of your personal data: this right entitles you to receive a copy (in a portable and, if technically feasible, readily usable format) of your personal data, or request Volvo to transmit such personal data to another data controller.
  • In the event that our processing of your personal data or part thereof is based on your consent, to withdraw at any time your consent, in which case Volvo will cease any further processing activities of your personal data or the relevant part thereof (however such withdrawal will not affect the legality of the data processing activities prior to the withdrawal).

Please note that Volvo may not always be obliged to comply with a request of deletion, restriction, objection or data portability. Assessment may be made on a case by case basis of Volvo’s legal obligations and the exception to such rights.

You also have the right to lodge any complaints you may have regarding Volvo’s processing of your personal data to a supervisory authority. For more information about these rights and how to exercise them, please contact the Volvo Chief Privacy Officer via the contact details set out above.

Volvo encourages the periodic review of this Privacy Notice to stay aware of any changes to it.

We reserve the right to amend this Privacy Notice as needed. When we do, we will note near the top of this Privacy Notice the date that any such changes are made and/or when they become effective.

EMPLOYEE Format PDF Size 158 KB