Job Application Privacy Notice
1. Data Controller
Yousician Oy
Siltasaarenkatu 16
FI-00530 Helsinki
FINLAND
privacy@yousician.com
2. Person in charge of data on register
Asko Kauppinen, VP People
Yousician Oy
Please contact us at privacy@yousician.com
3. Purpose of processing personal data
The purpose of processing your personal data is to handle the
recruitment process in question and to use the data to contact
you about future recruitment opportunities if you have given consent
to do so. We process your data pursuant to applicable laws (such as
the General Data Protection Regulation (GDPR)) and only to the extent
necessary for the recruiting process.
We need to process data to take steps at your request prior to entering
into a contract with you and may also need to process your data to enter
into a contract with you, either with Yousician Oy or with a subsidiary
or affiliate company of Yousician Oy. In some cases, we need to process
data to ensure that we comply with legal obligations. For example, it is
mandatory to check a successful applicant’s eligibility to work in the
country where our respective office is located before employment starts.
We have a legitimate interest in processing personal data during the
recruitment process and for keeping records of the process. Processing
data submitted by job applicants allows us to manage the recruitment
process, assess and confirm a candidate’s suitability for employment
and decide to whom we offer a job. We may also use the data for running
analytics and for developing our recruitment services. We may also need
to process data from job applicants to respond to and defend against legal claims.
Although some of the data processing may be automated, we do not make decisions
solely based on automated decision making or profiling, which would have an effect
on the rights or obligations of applicants.
4. The data that we handle
When you submit your application, you are required to provide the following
information: name, email and phone number. You also have the option to provide
your social media profiles and your website. Also, you may attach your cover
letter and/or resume/CV to your application which may contain personal data on
e.g., your education, degrees, work experience and other personal data you share
with us as, such as your skills, hobbies or interests, and may provide more information
during the potential selection process e.g. through skill tests, interviews or the like.
Please note that if you are a US-applicant, we cannot accept a resume or CV that
includes a picture of you.
5. Retention time of your personal data
We retain the data of the unselected applicants 12 months from the date of completion
of the recruitment decision regarding the position you applied for. However, your data
shall be stored for future job opportunities with your consent. In all cases, your data
shall be deleted after 24 months has passed from the time of the last contact between us.
6. Sources of information
Sources of information, apart from the data provided by you in the initial application
phase or later during possible interview phases, are possible referees provided by you,
or our staff members involved in the selection process. In addition to this, to find
suitable candidates we use publicly available sources such as Linkedin and may have
originally contacted you through such services. In the event that the recruitment process
involves a candidate assessment consented by you, we receive personal data about you from
our partner performing the assessment.
7. Third parties
In some cases we use third parties to operate under our direction with data processing
agreements and sufficient technical and operational safeguards in place. The third parties
have a clear role and only access data as needed. The cases for using third parties are:
- We may from time to time use direct search services to help with the recruitment
process. These services may assess candidates for us in accordance with our instructions. - We use the tools of external service providers to store and manage the applications. We
may use also tools of third party service providers to test and evaluate candidate skills.
8. Principles of data security
Access to your personal data is restricted to our staff members involved in recruitment and
selection as well as to our partners involved in the process as described in this privacy
notice. We do not store data in paper form. Digitally stored data is accessible by personal
usernames and passwords only and there are adequate safeguards in place to ensure that data
processed is protected.
9. Transfers of data outside the EU/EEA
Apart from the partners we use for the purposes of our recruitment processes as described
in this privacy notice, we do not transfer your data outside Yousician group.
Since we operate internationally and have Yousician affiliates e.g. also in the USA, your
data may be transferred outside the EU/EEA. In these cases, we take steps to ensure that
there are adequate safeguards in place, which may include the use of standard contractual
clauses approved by the EU Commission and the Privacy Shield certification in cases of
transfers to the USA.
10. Your rights
The GDPR regulation gives citizens in the European Union important rights to control
their own personal data. You have the right to access your own personal data held by
us. Simply make a request to privacy@yousician.com
to get a copy of your personal data stored by us. You can also request that we update your
personal details on your candidate profile if anything changes or happens to be incorrect.
You also have the right to be forgotten and a right to object to or restrict to the
processing of your personal data: just contact us and we will delete your candidate
profile and all associated information that we have about you, unless in special
cases there are legal grounds to retain the data. You also have the right to have
your data transferred to another data controller in a machine readable format, if
this is technically possible.
If you have any complaints about our handling of personal data or want to know
about something very specific in this regard, please email us at
privacy@yousician.com.
We take these matters seriously and will look into all requests and complaints.
Applicants from the European Union member states also have the right to lodge a
complaint to the data supervising authorities of their country.