Recruitment Register Privacy Notice

This is Norex Selected Brands Oy’s register and privacy notice in accordance with the Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). This notice also applies to the parent company, Norex International.
Last updated 26 November 2018.

1. DATA CONTROLLER

Norex Selected Brands Oy (Business ID: 0954463-7)
Piispansilta 9 B, 3rd floor
02230 Espoo

2. CONTACT PERSON FOR REGISTER MATTERS

Tea Haaranen
Phone: +358 50 5122 402
Email: gdpr@norex.fi

3. NAME OF THE REGISTER

Norex Selected Brands Oy’s recruitment register

4. PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

We collect and use the information you provide regarding the position you have applied for in order to assess your suitability for it and to make a decision on whether you are the person we are looking for. The legal basis is your consent.

5. DATA CONTENT OF THE REGISTER AND SOURCES

We collect and process personal data that
• you have provided to us by email when you contact us, or
• you tell us during possible job interviews

We collect and process the following categories of personal data:
• basic information, such as name and contact details;
• matters related to education, work experience, or other competence
• your salary expectations, possible starting date
• your description of your suitability for the position
• any other matters you have mentioned in your CV, application, or interview situations

6. TRANSFERS AND DISCLOSURES OF PERSONAL DATA

We disclose personal data to third parties:
• For Finnish authorities when they so require.
• Our IT support has technical access to our systems and thereby to personal data. A DPA agreement has been concluded with them.
• With your consent, to parties covered by the consent.

7. TRANSFERS OF PERSONAL DATA OUTSIDE THE EU OR EEA

We do not transfer personal data outside the EU or the European Economic Area.

8. DATA SECURITY PRINCIPLES OF THE REGISTER

We implement appropriate measures (including physical, digital, and administrative actions) to protect personal data from loss, destruction, misuse, and unauthorized access or disclosure. Access to personal data is limited to relevant personnel only. Even appropriate measures cannot prevent all possible data security breaches. In the event of personal data security breaches, we will notify you in accordance with applicable laws.

9. YOUR RIGHTS

You have the right to access your personal data. You may also at any time request the correction, updating, or deletion of your personal data. You have the right to object to or restrict the processing of your personal data to the extent required by applicable law.
In certain cases, you have the right to transfer the personal data you have provided to us from one system to another, i.e., the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer your personal data to another data controller, in accordance with applicable law.
When we process your personal data based on consent, you have the right to withdraw your consent at any time. We will not process personal data thereafter unless there is another legal basis for processing.
You can exercise your rights by sending us a message at gdpr@norex.fi. The right of access is free of charge once a year. The data controller will respond as soon as possible, at the latest within the time stipulated in the EU Data Protection Regulation (within one month of receipt of the request).

10. RETENTION OF PERSONAL DATA

Personal data is retained only for as long as necessary to fulfill the purposes defined in this notice. We retain your data only until the end of the probationary period of the person selected for the position. Personal data obtained during recruitment is retained for the selected employee in accordance with the employee register. We retain information about the consent you have given and, in connection with it, your name, when and how the consent was given.

11. AMENDMENTS TO THIS NOTICE

We have the right to amend this notice. We will notify you of changes by email if your personal data is in our possession at the time of the change due to an open recruitment or probationary period.

12. CONTACT US

You can ask about this Notice or the processing of your personal data by contacting us at gdpr@norex.fi.