Recruitment register

1. Controllers and contact information in register matters

Nor-Maali Oy (Business ID 3257285-5)
Vanhatie 20, 15240 Lahti
tietosuoja@nor-maali.fi

Nor-Maali Group Oy (Business ID 2735929-1)
Vanhatie 20, 15240 Lahti
tietosuoja@nor-maali.fi

2. What is the purpose and basis for processing personal data

The purpose of processing personal data is to manage Nor-Maali Oy´s and Nor-Maali Group Oy’s recruitment processes. The legal basis for processing your personal data is our legitimate interest, which is based on the job application and recruitment process and with your consent, such as personality and aptitude assessments and information collected from the references.

3. What data we process and where do we collect the data?

We process the following personal data:

• Identification data: name, surname, date of birth
• Contact details: address, phone number, e-mail address
• Information regarding job application and CV, such as information regarding work history, education, skills and confidential posts
• Information regarding interviews and tests
• Other possible information you have provided us.

Primarily, the register contains data entered by you as a job applicant or based on your consent, received from references or tests. Other information includes data related to the recruitment process. Other sources of information are used within the limits allowed by the applicable legislation.

4. To whom we disclose or transfer data, and do we transfer data outside the EU or EEA?

We won´t disclose your personal data or transfer data to countries outside the EU or EEA.

We may use external service providers for concluding personality and aptitude assessments and recruitment process. We shall make data processing agreements with service providers and any Nor-Maali company that participate in the processing of personal data and ensure that our collaboration partners process personal data only to the extent that is necessary for the provision of the service in question.

5. How do we protect the data and how long we store data?

Only those persons, who take part in the recruitment process have the right to process personal data of job applicants. We ensure data protection in outsourcing situations by concluding data processing agreements with the subcontractors that process personal data.

Job applicants´ personal data for open applications will be stored for six months from the submission of the application. Applications for a specific task and personal data collected in the recruitment process will be stored for one year after the end of recruitment process.

Your rights as a data subject

The requests concerning data subject rights must be submitted using the contact details mentioned in section 1. As a data subject, you have the following rights:

• Right to access, correct or delete your personal data
  • You have the right to inspect the personal data stored in the register concerning yourself and the right to demand rectification or erasure of the data.
• Right to withdraw your consent
  • You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of processing before the withdrawal of the consent.
• Right to object and restrict the processing
  • You have the right to object or to demand restriction of the processing and the right to have your personal data transmitted.
• Right to lodge a complaint with the supervisory authority
  • You have the right to lodge a complaint with the supervisory authority concerned, especially in the EU Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes applicable data protection regulation.