Consent to the processing of personal data – recruitment register
Updated 15.1.2020
1. REGISTER HOLDER
Digidoit Oy (Business ID: 2813549-2)
Lönnrotinkatu 5, 00120 Helsinki
Puh. +358 10 274 2000
2. CONTACT FOR MATTERS RELATING TO DATA PROTECTION
Data protection officer
tel: +358 10 274 2000
e-mail: info (at) digido.fi
Contact requests relating to data protection are to be addressed to info (at) digido.fi
3. NAME OF THE REGISTER
Digidoit Oy’s recruitment register
4. LEGAL GROUNDS AND INTENDED USE OF PERSONAL DATA
The legal grounds for the use of personal data is the registered person’s consent. A job application and its possible attachments, submitted by a registered person, are considered to constitute consent.
5. THE DATA CONTENT OF THE REGISTER
By its nature, the content of the register cannot be completely determined per person, as it may contain information that is provided freely by the person. In general, the register will include at least the following information:
– first and last name
– contact information (such as address, email address, telephone number)
– date of birth
– wishes concerning the job’s content and compensation
– information concerning education, work experience, and skills profile
– other, additional information, freely provided by the person in question
– additional information submitted as attachments, such as CV, work samples, etc.
6. REGULAR INFORMATION SOURCES
Primarily, the information source is the registered person. In addition, more limited information about recruitment candidates may be collected, for example, through collaboration partners. Where necessary, personal data may be collected and updated from public or private registers and sources providing information services, and through collaboration partners.
7. RELEASE OF CONTENT IN THE REGISTER
The content of the register which has been collected with the registered person’s consent, may be released to the personnel of DigiDoit Oy involved in the recruitment process , as well as to potential assignment commissioners, who are clients and partners of Digidoit Oy.
Personal information may be disclosed in the form of attachments to customer offers or as a part of customer inquiries required by the business.
Furthermore, information may be released, for example to authorities, on the basis of a legal requirement.
Contents of the register are not transferred outside of the EU and European economic area.
8. PROTECTION OF THE REGISTER
The register exists in electronic form on the firm’s high-security classified cloud service and is protected by the most appropriate administrative and technical protection methods. Furthermore, parts of the register may be printed as paper copies.
Access to the register is only possible over an encrypted connection and with a personal username and password. Use of the register is confidential and the right of usage is limited exclusively to the register holder’s own staff, whose tasks require the right to use the register. The register holder’s staff are bound to secrecy and have received appropriate training regarding data security and data protection.
Applicant information is processed through our electronic job application system, located on the Cinode Service (SWE). In this context, the information of the applicant may be transferred outside the EU or the EEA within the limits set by data protection law, to the extent necessary for the technical implementation of the service.
When submitting the application, the applicant shall agree to the possible transfer of his / her personal data. The privacy statement of the service is available at: https://cinode.com/en/privacy-policy/.
9. DURATION OF INFORMATION STORAGE
The data collected in the register will be reviewed every one (1) year, and the data for which the recruitment process has not resulted in an employment relationship will be deleted. The data controller may also delete the data concerning the data subject before this.
10. REGISTERED PERSONS’ RIGHTS
Registered person have the right to verify the data concerning him/her.
All requests for information and other contact must be made in writing and signed to the address mentioned in section 1. Digidoit Oy will respond to requests for inspection in writing.
Registered persons have the right to request that incorrect or ambiguous personal information concerning themselves be corrected or supplemented.
Registered persons have the right to request the removal of personal information concerning themselves if:
– the personal information is no longer needed for the original intended use
– the personal information has been processed unlawfully
Registered persons also has other rights related to personal data processing in accordance with the law.
11. MORE INFORMATION
All inquiries and other communications should be made to the Registrar at the contact address mentioned in section 2.