Oy Duell Bike-Center Ab (2464132-0)
Kauppatie 19
65610 Mustasaari
Sami Ilvonen sami.ilvonen (at) duell.eu
Legitimate interest
The purpose of the register is the recruitment of personnel for the company. The recruitment register has been established for the purpose of recruiting employees for the controller. The controller has the right to use subcontractors to manage the recruitment process. In such cases, personal data may be transferred to subcontractors to the extent necessary for the performance of the services (e.g. to store the data on a server managed by a third party on behalf of the Controller). In the case of personality tests, psychological assessments and similar, the legal basis for processing is the data subject's consent.
The job applicant (and the employee) can reasonably expect that their personal data will be processed for the purposes described in the privacy notice and that the processing is justified on the basis of a balance of interests between the controller and the data subject, because the processing will have a favourable effect on the data subject (processing of personal data for recruitment purposes) and is subject to measures that protect the interests of the data subject (balancing test). The controller is entitled to process personal data on the basis of a legitimate interest, except where the interests of the data subject require the protection of personal data or where such interests are overridden by fundamental rights and freedoms.
Name, contact details, visual information, educational and professional data.
The controller's staff for whom the personal data are necessary for the performance of their work. In addition, the data may be disclosed to service providers who process personal data on behalf of the Controller in accordance with the confidentiality and data protection obligations of the contract. Personal data may also be disclosed to the extent permitted and required by applicable law, for example to public authorities entitled to receive the data.
The right to withdraw consent where the legal basis for the processing is consent: By notifying the controller at the contact details indicated in the contact point.
- name - address - telephone number - email address - photo (or video) - initial education and qualifications and dates obtained - other education and training received - skills in using applications and software, other specific skills - language skills - current responsibilities (employer, job title and job description) - main previous responsibilities (employer, job title and job description) - referees - possible profile of the candidate - CV - any other information provided by the data subject
The primary source of the data stored in the register is the data subject, i.e. the jobseeker himself. In addition, the data consists of information recorded during the recruitment process. Other possible data sources are used within the limits set by law. The provision of personal data is a legal requirement for the jobseeker in order to conclude an employment contract.
The personal data of registrants will be kept in the register for 2 years after the job application is submitted, after which it will be anonymised.
The data in the register will not be disclosed to third parties unless it is necessary for recruitment purposes.
The data in the register will be transferred outside the EU or EEA to the UK. It is also possible that service providers outside the EU/EEA are used for processing or that the clouds of service providers are located outside the EU/EEA, in which case SCC standard clauses are used as the basis for data transfer and additional safeguards are implemented for data transfers, such as internal guidelines (on pseudonymisation of personal data and the like) and possibly TIA analysis where appropriate.
Employment contracts are kept in a locked cabinet, accessible only to the archivist. All other material relating to the register is in electronic format only and data is processed electronically only. Access to the information in the register is limited to those and to the extent necessary for the management, supervision, payroll or other administration of the employment relationship. The register is stored on a secure server located in Finland. The data in the register are protected and processed in accordance with the provisions and principles of the Data Protection Act, the regulations of the authorities and good data processing practice.
Access to the data in the register is limited to those and to the extent necessary for the management of matters related to recruitment measures. The register is stored on a secure server located in Finland. The data processed in the data systems are protected from external access by means of a network access log-in and user-specific access rules. The data in the register are protected and processed in accordance with the provisions and principles of the Data Protection Act, the regulations of the authorities and good data processing practice.
The processing of personal data in recruitment does not involve automated decision-making. If any part of the recruitment process involves an assessment of the personal characteristics of a job applicant that includes profiling, consent will be sought for the specific purpose of the processing.
The data subject has the right to check what information about him or her is in the register. The request for inspection must be made in writing by contacting the company's customer service or by means of a verifiable e-mail address.
Where a legitimate interest is used as a ground for processing, the data subject does not have the right to transfer his or her data from one system to another.
Taking into account the purposes of processing, any data stored in the filing system that is inaccurate, unnecessary, incomplete, or outdated must be erased or rectified. A written request for rectification, signed by hand, should be sent to the company’s customer service or the personal data filing system’s administrator. The request should specify what information should be rectified and on what grounds. Rectification shall be carried out without delay. Notification of rectification will be sent to the party who provided the inaccurate data or to whom the data were disclosed. If a request for rectification is denied, the responsible person of the filing system will provide a written document stating the grounds for the denial of the request for rectification. The data subject concerned may then pass the matter along to the Data Protection Ombudsman.
The data subject has the right to request restriction of processing, for example if the personal data in the register are inaccurate. Contact the person responsible for the register.
The data subject has the right to request personal data concerning him or her and the right to request the rectification or erasure of personal data. Such requests may be addressed to the contact person of the register.
If you consider that an infringement of the General Data Protection Regulation has occurred in the processing of your personal data, you have the right to lodge a complaint with a supervisory authority. The complaint can also be lodged in a member state where you are a permanent resident or where you are employed. Contact information for the Finnish national supervisory authority: Office of the Data Protection Ombudsman PL 800, Lintulahdenkuja 4, 00530 Helsinki tel. +358 29 566 6700 tietosuoja@om.fi www.tietosuoja.fi/en/
The data subject has the right to object to the disclosure and processing of his/her data and/or to be completely forgotten after the end of the employment relationship.