We at MySpeaker are committed to protecting the privacy of job applicants and potential candidates. We ensure that the processing of your personal data takes place responsibly and in accordance with the applicable data protection legislation.
In this privacy policy we explain how we process your personal data as our job applicant or potential candidate, and describe what personal data we process and for what purposes, retention period of your personal data, to whom we may disclose your personal data and your rights as the data subject. We advise you to read this privacy policy carefully.
- Data controller and contact details
Controller: MySpeaker Oy
Business ID: 2907553-2
Address: Vuoritontuntie 22, 02200 Espoo
Email: info@myspeaker.fi
- Types of personal data we process
We typically process the following types of data relating to you:
- Basic information, such as name, address, phone number, email address, date of birth;
- Competence information, such as education, employment history and specific fields of competence;
- Other information you have provided to us on your resume or CV, during the interview or otherwise during the application process; and
- Other possible information relevant to the recruitment process, such as aptitude test results.
We receive the personal data and other information from you directly or from external sources during the recruitment process or when concluding an employment contract.
- Purposes and grounds of processing
We process potential candidates’ and job applicants’ personal data for the following purposes on following legal grounds:
- Legitimate interest: We may source potential candidates from various channels, such as LinkedIn. We have a legitimate interest to reach potential candidates to tell them about interesting job opportunities at MySpeaker. We may also process job applicant’s personal data for defence of legal claims on the basis of our legitimate interest. We have assessed that your interests or fundamental rights or freedoms do not override the legitimate interest described above.
- Consent: We process job applicant’s personal data on the basis of your consent to carry out the recruitment process. Based on your consent, we may also collect data relating to you from third parties and other external sources, such as aptitude tests and other evaluations to measure work-related cognitive capacity and your suitability for a role.
- Contract: In the final stages of the recruitment process, job applicant’s personal data is processed for the purposes of negotiating an employment contract.
We do not process personal data to make automated decisions which produce legal effects or would otherwise significantly affect you.
- Data retention
Personal data will be stored for the duration of the recruitment process in question. We may retain your personal data for longer if we have your consent to use your personal data in further recruitment processes or if the retention is necessary for legitimate reasons, such as for the defence of legal claims.
- Disclosures and transfers of your personal data
We do not disclose your personal data to any third parties except in situations described below:
- Group companies: We may disclose your personal data to companies within the MySpeaker group for purposes described in this privacy policy.
- Authorities: We may disclose your personal data to authorities when we have a legal obligation to do so under applicable legislation.
- Consent: Based on your consent, we may disclose your personal data within the limits of the specific consent you have given.
- Business transactions. We may disclose your personal data in connection with a business transaction (such as a transfer of undertaking) to the other party/parties of the transaction, if and to the extent necessary.
We may transfer your personal data to third parties who are providing services to MySpeaker. These third parties, such as IT service providers, process personal data on our behalf and under our instructions. When transferring your data to third party service providers we have ensured that those service providers are also committed to protect your privacy in accordance with applicable legislation.
In case we need to transfer your personal data outside EU/EEA, we will only transfer your data by using the transfer mechanisms permitted under applicable legislation, such as the EU Commission’s Standard Contractual Clauses.
- Data security measures
We have employed necessary technical and organisational security measures to protect your personal data against unlawful or unauthorised access, disclosure, loss and other unauthorised processing. These measures include, for example, use of firewalls, encryption technologies and secure facilities, appropriate access control, controlled grant of access rights and supervision of use of systems and properly instructing our personnel participating in the processing of personal data.
- Your rights as the data subject
In addition to having access to the information provided in this privacy policy, you have the following rights as the data subject:
- Right of access, rectification and erasure: You have the right to request access to your personal data we process. At your request, we will also rectify any inaccurate or incomplete personal data relating to you. You also have the right to request your data to be erased (right to be forgotten) in accordance with applicable legislation.
- Data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller when we process your data automatically and based on a contract or your consent.
- Right to object and right of restriction: You have the right to object to processing we carry out based on legitimate interest on grounds relating to your particular situation. You also have the right to request the restriction of the processing of your personal data, for example, in case you object to processing as described above or contest the accuracy of your personal data.
- Withdrawal of consent: You may withdraw your consent at any time. Please note that withdrawing your consent does not affect the legality of the processing we have carried out prior to the withdrawal.
- Right to lodge a complaint: You have the right to lodge a complaint with the relevant supervisory authority in case you feel that we have processed your personal data contrary to this privacy policy or the applicable legislation. Contact details of the Finnish supervisory authority can be found at www.tietosuoja.fi.
To use your rights described above, please send your request to the address shown on Section 1. Please note that we ask you to verify your identity when using your rights.
- Changes to this privacy policy
MySpeaker continuously develops its business and services, which is why we may occasionally need to make changes also to this privacy policy. We will inform you about any changes we make, either personally or through our services. We suggest that you check this page periodically.
This privacy policy was last updated 03.06.2022