1. Data Controller
Yousician Oy
Toinen linja 7
FI-00530 Helsinki
FINLAND
privacy@yousician.com
2. Person in charge of data on register
Asko Kauppinen, VP People
Yousician Oy
Please contact us at
privacy@yousician.com
3. Purpose of processing personal data
The purpose of processing your personal data is to handle the
recruitment process in question and to use the data to contact
you about future recruitment opportunities if you have given consent
to do so. We process your data pursuant to applicable laws (such as
the General Data Protection Regulation (GDPR)) and only to the extent
necessary for the recruiting process.
We need to process data to take steps at your request prior to entering
into a contract with you and may also need to process your data to enter
into a contract with you, either with Yousician Oy or with a subsidiary
or affiliate company of Yousician Oy. In some cases, we need to process
data to ensure that we comply with legal obligations. For example, it is
mandatory to check a successful applicant’s eligibility to work in
the
country where our respective office is located before employment starts.
We have a legitimate interest in processing personal data during the
recruitment process and for keeping records of the process. Processing
data submitted by job applicants allows us to manage the recruitment
process, assess and confirm a candidate’s suitability for
employment
and decide to whom we offer a job. We may also use the data for running
analytics and for developing our recruitment services. We may also need
to process data from job applicants to respond to and defend against legal
claims.
Although some of the data processing may be automated, we do not make
decisions
solely based on automated decision making or profiling, which would have an
effect
on the rights or obligations of applicants.
4. The data that we handle
When you submit your application, you are required to provide the
following
information: name, email and phone number. You also have the option to
provide
your social media profiles and your website. Also, you may attach your
cover
letter and/or resume/CV to your application which may contain personal data
on
e.g., your education, degrees, work experience and other personal data you
share
with us as, such as your skills, hobbies or interests, and may provide more
information
during the potential selection process e.g. through skill tests, interviews
or the like.
Please note that if you are a US-applicant, we cannot accept a resume or CV
that
includes a picture of you.
5. Retention time of your personal data
We retain the data of the unselected applicants 12 months from the date of
completion
of the recruitment decision regarding the position you applied for. However,
your data
shall be stored for future job opportunities with your consent. In all
cases, your data
shall be deleted after 24 months has passed from the time of the last
contact between us.
6. Sources of information
Sources of information, apart from the data provided by you in the initial
application
phase or later during possible interview phases, are possible referees
provided by you,
or our staff members involved in the selection process. In addition to this,
to find
suitable candidates we use publicly available sources such as Linkedin and
may have
originally contacted you through such services. In the event that the
recruitment process
involves a candidate assessment consented by you, we receive personal data
about you from
our partner performing the assessment.
7. Third parties
In some cases we use third parties to operate under our direction with data
processing
agreements and sufficient technical and operational safeguards in place. The
third parties
have a clear role and only access data as needed. The cases for using third
parties are:
-
We may from time to time use
direct search services to help with the
recruitment
process. These services may assess candidates for us in accordance with our instructions. -
We use the tools of external service providers to store and manage the
applications. We
may use also tools of third party service providers to test and evaluate candidate skills.
8. Principles of data security
Access to your personal data is restricted to our staff members involved in
recruitment and
selection as well as to our partners involved in the process as described in
this privacy
notice. We do not store data in paper form. Digitally stored data is
accessible by personal
usernames and passwords only and there are adequate safeguards in place to
ensure that data
processed is protected.
9. Transfers of data outside the EU/EEA
Apart from the partners we use for the purposes of our recruitment processes
as described
in this privacy notice, we do not transfer your data outside Yousician
group.
Since we operate internationally and have Yousician affiliates e.g. also in
the USA, your
data may be transferred outside the EU/EEA. In these cases, we take steps to
ensure that
there are adequate safeguards in place, which may include the use of
standard contractual
clauses approved by the EU Commission and the Privacy Shield certification
in cases of
transfers to the USA.
10. Your rights
The GDPR regulation gives citizens in the European Union important rights to
control
their own personal data. You have the right to access your own personal data
held by
us. Simply make a request to
privacy@yousician.com
to get a copy of your personal data stored by us. You can also request that
we update your
personal details on your candidate profile if anything changes or happens to
be incorrect.
You also have the right to be forgotten and a right to object to or restrict
to the
processing of your personal data: just contact us and we will delete your
candidate
profile and all associated information that we have about you, unless in
special
cases there are legal grounds to retain the data. You also have the right to
have
your data transferred to another data controller in a machine readable
format, if
this is technically possible.
If you have any complaints about our handling of personal data or want to
know
about something very specific in this regard, please email us at
privacy@yousician.com.
We take these matters seriously and will look into all requests and
complaints.
Applicants from the European Union member states also have the right to
lodge a
complaint to the data supervising authorities of their country.