# Job Application Privacy Notice ### 1. Data Controller Yousician Oy Siltasaarenkatu 16 FI-00530 Helsinki FINLAND [privacy@yousician.com](mailto:privacy@yousician.com) ### 2. Person in charge of data on register Asko Kauppinen, VP People Yousician Oy Please contact us at [privacy@yousician.com](mailto:privacy@yousician.com) ### 3. Purpose of processing personal data The purpose of processing your personal data is to handle the recruitment process in question and to use the data to contact you about future recruitment opportunities if you have given consent to do so. We process your data pursuant to applicable laws (such as the General Data Protection Regulation (GDPR)) and only to the extent necessary for the recruiting process. We need to process data to take steps at your request prior to entering into a contract with you and may also need to process your data to enter into a contract with you, either with Yousician Oy or with a subsidiary or affiliate company of Yousician Oy. In some cases, we need to process data to ensure that we comply with legal obligations. For example, it is mandatory to check a successful applicant’s eligibility to work in the country where our respective office is located before employment starts. We have a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data submitted by job applicants allows us to manage the recruitment process, assess and confirm a candidate’s suitability for employment and decide to whom we offer a job. We may also use the data for running analytics and for developing our recruitment services. We may also need to process data from job applicants to respond to and defend against legal claims. Although some of the data processing may be automated, we do not make decisions solely based on automated decision making or profiling, which would have an effect on the rights or obligations of applicants. ### 4. The data that we handle When you submit your application, you are required to provide the following information: name, email and phone number. You also have the option to provide your social media profiles and your website. Also, you may attach your cover letter and/or resume/CV to your application which may contain personal data on e.g., your education, degrees, work experience and other personal data you share with us as, such as your skills, hobbies or interests, and may provide more information during the potential selection process e.g. through skill tests, interviews or the like. Please note that if you are a US-applicant, we cannot accept a resume or CV that includes a picture of you. ### 5. Retention time of your personal data We retain the data of the unselected applicants 12 months from the date of completion of the recruitment decision regarding the position you applied for. However, your data shall be stored for future job opportunities with your consent. In all cases, your data shall be deleted after 24 months has passed from the time of the last contact between us. ### 6. Sources of information Sources of information, apart from the data provided by you in the initial application phase or later during possible interview phases, are possible referees provided by you, or our staff members involved in the selection process. In addition to this, to find suitable candidates we use publicly available sources such as Linkedin and may have originally contacted you through such services. In the event that the recruitment process involves a candidate assessment consented by you, we receive personal data about you from our partner performing the assessment. ### 7. Third parties In some cases we use third parties to operate under our direction with data processing agreements and sufficient technical and operational safeguards in place. The third parties have a clear role and only access data as needed. The cases for using third parties are: - We may from time to time use **direct search services** to help with the recruitment process. These services may assess candidates for us in accordance with our instructions. - We use the tools of external service providers to store and manage the applications. We may use also tools of third party service providers to test and evaluate candidate skills. ### 8. Principles of data security Access to your personal data is restricted to our staff members involved in recruitment and selection as well as to our partners involved in the process as described in this privacy notice. We do not store data in paper form. Digitally stored data is accessible by personal usernames and passwords only and there are adequate safeguards in place to ensure that data processed is protected. ### 9. Transfers of data outside the EU/EEA Apart from the partners we use for the purposes of our recruitment processes as described in this privacy notice, we do not transfer your data outside Yousician group. Since we operate internationally and have Yousician affiliates e.g. also in the USA, your data may be transferred outside the EU/EEA. In these cases, we take steps to ensure that there are adequate safeguards in place, which may include the use of standard contractual clauses approved by the EU Commission and the Privacy Shield certification in cases of transfers to the USA. ### 10. Your rights The GDPR regulation gives citizens in the European Union important rights to control their own personal data. You have the right to access your own personal data held by us. Simply make a request to [privacy@yousician.com](mailto:privacy@yousician.com) to get a copy of your personal data stored by us. You can also request that we update your personal details on your candidate profile if anything changes or happens to be incorrect. You also have the right to be forgotten and a right to object to or restrict to the processing of your personal data: just contact us and we will delete your candidate profile and all associated information that we have about you, unless in special cases there are legal grounds to retain the data. You also have the right to have your data transferred to another data controller in a machine readable format, if this is technically possible. If you have any complaints about our handling of personal data or want to know about something very specific in this regard, please email us at [privacy@yousician.com](mailto:privacy@yousician.com). We take these matters seriously and will look into all requests and complaints. Applicants from the European Union member states also have the right to lodge a complaint to the data supervising authorities of their country.