This is a registry and Privacy Statement in accordance with Arado's EU General Data Protection Regulation (GDPR).
Drawn up on 6.5.2021. The previous change made on 26.8.2021.
Arado Oy, Tykistökatu 4, 20520 Turku
Anssi Soinu, email@example.com, +358 40 178 0300.
The register for job applicants of Arado
The purpose of the job application register is to receive, process and store job applications from jobseekers who are interested in Arado Oy as an employer. The applicant can assign the application to the desired job position or submit an open application. People involved in the recruitment can also combine the application with any other suitable job.
Applicant information will always be kept confidential and application information provided by applicants will not be disclosed outside the recruitment process. Confidentiality means that candidate information is only available to those who are authorized to use it (people involved in the recruitment).
The data is not used for automated decision making or profiling.
We will retain personal data for as long as is necessary for the purpose for which it is used, only if the job seeker consents to the storage and use of personal data also in subsequent recruitment processes. In this case, the information can be used for one (1) year in recruitment processes. The data will be destroyed within two (2) years at the latest. If a job seeker becomes our employee, we will retain the information he or she provides as a job seeker and related to the job search as part of his or her personnel profile in accordance with our employee information policy.
The information content of the register is the information provided by the job seeker in the application itself and its appendices, as well as the additional information recorded by Arado during the recruitment process.
The register stores the following information about the job seeker that is necessary for the recruitment process and the job:
The information stored in the register can be obtained from e-mails sent to firstname.lastname@example.org. Job seeker information is stored in Arado's Notion cloud service. The information security of the system is taken care of by the service provider on a contractual basis.
The information of the person selected for the job is stored in the systems necessary for the employment relationship when the employment contract is drawn up and when the employment relationship begins. There is a separate privacy statement for the processing of this information.
Recruitment information is for Arado's internal use only. The personal data of job seekers stored in the register will be disclosed to persons handling recruitment within Arado with the consent of the job seeker. The information is not in general disclosed to other parties. Information may be published to the extent agreed with the job seeker.
We disclose personal data in a manner permitted and required by applicable law to parties with a legal and / or contractual right to access the register.
The data in the Arado registry is hosted on a cloud service whose servers may be located outside the EU or the EEA in the United States.
The register is handled with care and the information processed by the information systems is properly protected according to the roles. When registry information is stored on servers, the physical and digital security of their hardware is adequately taken care of. The controller shall ensure that the data stored, as well as the access rights to the servers and other information critical to the security of personal data, are treated confidentially and only by the employees whose job description it includes.
Every person in the register has the right to check the information stored in the register and to request the correction of any incorrect information or the completion of incomplete information. If a person wishes to check the data stored about him or her or request a correction, the request must be sent in writing to the registrar at email@example.com. The controller will respond to the customer within the timeframe set out in the EU Data Protection Regulation (generally within one month).
Personal data will only be processed for the purpose mentioned in the section "Purpose of processing personal data". Personal data will not be disclosed for direct marketing or other secondary purposes and will not be used for automatic decision making (eg profiling).
A person in the register has the right to request the removal of personal data concerning him or her from the register. Data subjects also have other rights under the [EU General Data Protection Regulation] (http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679#d1e2144-1-1) such as restricting the processing of personal data in certain situations. Requests must be sent in writing to the registrar at firstname.lastname@example.org. The controller will respond to the customer within the time limit set by the EU Data Protection Regulation (generally within one month).
The data subject has the right to refer a matter concerning the lawfulness of the processing of his or her personal data to the Data Protection Commissioner.
Arado reserves the right to change this Privacy Statement when the legislation changes or to develop its business operations. Arado shall post the revised Policy on the same webpage where it published this Policy. Arado may also use email or other means for notifying job applicants of such policy changes. The revised Policy (or, as applicable, the new one) will be effective when posted as described unless the document itself specifies a later time for its entry into force.