Privacy Notice for Mectalent Oy’s and Conceptas Oy’s Customer, Supplier and Marketing Register
(hereafter ”we” or ”Mectalent and Conseptas”)
Contact person for register matters
Name of register
CUSTOMER, SUPPLIER AND MARKETING REGISTER
What is the legal basis for and purpose of the processing of personal data?
The basis of processing personal data is the performance of a contract between us and our legitimate interest to develop our business and conduct direct marketing).
The purposes of processing personal data are:
The delivery and development of our products and services (performance of a contract and legitimate interest),
Sourcing and acquiring products and services necessary for our business from suppliers (performance of a contract and legitimate interest),
Fulfilling our contractual and other rights, promises and obligations (performance of a contract),
Taking care of the customer and supplier relationship (performance of a contract and legitimate interest),
Organizing events (legitimate interest),
Analyzing and profiling the behaviour of a customer or other data subject such as a potential customer (legitimate interest),
electronic and direct marketing (legitimate interest),
targeting advertising in our and others’ online services (legitimate interest).
We use automated decision-making (inc. profiling) to identify the data subjects’ profiles and online behaviour. We use this information to target marketing and develop our services.
What data do we process?
We process the following personal data of our customers, suppliers or other data subjects (like prospects) in connection with the customer, supplier and marketing register:
Information of company and company’s contact persons such as Business ID* of the company and names*, contact details*, role/title and professional interests of the contact persons;
Information about the customer relationship and agreement such as information related to previous and existing agreements and orders*, other customer information;
Information about the supplier relationship and agreement such as information related to previous and existing agreements and orders*, other supplier information;
Information related to event participation such as the name, date and location of the event;
Information about potential direct marketing opt-outs;
Technical information about the user of a website such as IP address and cookie information;
Information related to the behavior of the data subject on the website, which is used for profiling purposes such as the sites visited and the duration of visits/use;
Other possible information collected from the data subject him-/herself.
Providing the information marked with an asterisk (*) is a prerequisite for our contractual relationship and/or supplier relationship. We cannot enter into a relationship without the necessary information.
From where do we receive data?
We receive personal data primarily from the data subject him-/herself as well as from newspapers and other news sources, professional social media networks, contact information providers and company websites.
To whom do we disclose data and do we transfer data outside of the EU or EEA?
We use subcontractors that process personal data on behalf of and for us (data transfer). We have outsourced the IT management to an external service provider, to whose server the data is stored. The server is protected and managed by an external service provider.
We transfer and disclose personal data related to customers outside the EU/EEA. We have implemented suitable safeguards for the transfers and disclosures. We use EU Commission standard contractual clauses.
How do we protect the data and how long do we store them?
Only those of our employees, who on behalf of their work are entitled to process customer, supplier and marketing data, are entitled to use a system containing personal data. Each user has a personal username and password to the system. The information is collected into databases that are protected by firewalls, passwords and other technical measures. The databases and their backup copies are in locked premises and can be accessed only by certain pre-designated persons.
We store personal data for as long as necessary considering the purpose of the processing. Personal data about customers and suppliers is processed and retained during the customer or supplier relationship or as long as services are delivered, and after the relationship or service provision has ended for ten (10) years. Personal data used for marketing purposes is retained and processed until it is updated or the data subject opts out of the marketing.
We regularly assess the need for data retention in light of the applicable legislation. In addition, we take reasonable measures to ensure that the personal data in the register is not incompatible, obsolete or inaccurate considering the purpose of the processing. We rectify or delete such information without delay.
What are your rights as a data subject?
As a data subject, you have the right to inspect the personal data concerning yourself, which is stored in the register, and a right to require rectification or erasure of the data. You also have a right to withdraw or change your consent, in cases where the processing of the data is based on your consent.
As a data subject, you have a right, according to the EU’s General Data Protection Regulation (applied from 25.5.2018) to object to the processing or request restricting the processing of your personal data. Additionally, you have a right to request your data to be delivered to you in a standard format, in cases where the processing of data is based on your consent or a contract between us.
You also have a right to lodge a complaint with a data protection authority in your jurisdiction or with the power to investigate processing concerning your personal data.
For specific personal reasons, you also have a right to object to profiling and other processing concerning you, when the processing of the personal data is based on our legitimate interest. In connection to your claim, you should identify the specific grounds on which you object to the processing. We can refuse to act on such a request on the basis of privacy legislation.
As a data subject, you have the right to object to processing, including profiling, at any time free of charge in so far as it relates to direct marketing.
Who can you contact?
Should we make amendments to this privacy notice, we will place the amended statement on our website, with an indication of the amendment date. If the amendments are significant, we may also inform you about this by other means, for example by sending an email or placing a bulletin on our homepage. We recommend that you review this privacy notice from time to time to ensure you are aware of any amendments made.
Identity protection and security
Mectalent Group is committed to protecting your privacy in accordance with applicable data protection and privacy laws.
Data controller and contact information
Mectalent Oy, Tapio Harila, Veistamötie 15, FI-90530 Oulu, FINLAND, or email@example.com.
Collection and use of personal data
Mectalent and/or Conseptas collects your personal data for the purposes of managing their resourcing activities and for use in organizational planning. Consequently, Mectalent/Conseptas may use your personal data in matters related to the assessment and selection of jobseekers, such as the organization and conduct of interviews and exams, the evaluation of their results, and other purposes necessary for the recruitment process and final recruitment.
If you enter into an employment relationship with Mectalent/Conseptas, all personal data you provide can be attached to other data concerning you, and can be used for other purposes related to the employment relationship or work concerned.
Mectalent/Conseptas collects personal data directly from applicants and from data sources provided by the applicants to Mectalent/Conseptas. Subject to applicable national law, Mectalent/Conseptas may also collect personal data from public sources and conduct background checks and assessments and store this information during the recruitment process.
Mectalent/Conseptas collects the personal data of both internal and external applicants for the purposes set out in this Personal Data Policy.
If you intend to provide us with accurate information about the referee or other third party as part of your CV or resumé, it is your responsibility to obtain permission from that third party.
Please note that Mectalent/Conseptas does not normally collect information about applicants that is particularly personal or private. In certain countries of the European Union, such information is referred to as sensitive personal data. This usually includes, for example, information on the applicant's state of health, race or ethnic origin, religious or political beliefs, or sexual orientation. As an employer, Mectalent and Conseptas adhere to the principles of equal opportunities, i.e., we treat all applicants equally. We do not discriminate directly or indirectly against applicants in any area of recruitment on the basis of gender, sexual orientation, transgenderism, race or ethnic origin, religion, disability, marital status, belief, nationality, color, age or any otherwise protected characteristic.
Mectalent/Conseptas retains personal data for as long as necessary for the abovementioned purposes or for as long as required by applicable national law. Personal data is eradicated when there is no longer any need for it.
The processing of personal data is based on your consent
The processing of personal data is based on your consent You can withdraw your consent at any time. Our recruitment process requires the processing of your personal data, so withdrawing your consent may lead to a situation where we cannot continue the recruitment process with you.
Transfer of personal data
Mectalent and Conseptas cooperate with third parties providing services to it.
We may disclose your information to third parties, such as service providers, as part of the Mectalent/Conseptas recruitment process, website hosting services or IT consulting services, website management services, data analysis services, legal services, accounting services and other administrative services, backup services and security services. Mectalent/Conseptas takes appropriate technical, organisational and legal measures to protect your personal data.
Your personal data may be disclosed or accessed as required by binding legislation. In such cases, your personal data may be disclosed or given access to law enforcement authorities, for example.
As a person whose personal data are processed by Mectalent/Conseptas, you have the right, in an appropriate manner and taking into account any restrictions and other provisions arising from applicable national law, to:
No job offer
Vacancies published on our website should not be considered as a job offer or promise of a job.
Mectalent and Conseptas may, without notice, remove, modify or change the described tasks as well as their related compensations and benefits. Our Website describes possible jobs at Mectalent and Conseptas. They are not binding offers on jobs or their terms and conditions.
The job offer that the user may receive after discovering or providing information to Mectalent or Conseptas after a possible job opportunity is in accordance with the terms of that offer.
From time to time, Mectalent/Coseptas may transfer files to your computer that will help us identify you. These files are called cookies. Cookies provide us with information about how and when you have used our Website and help us develop it to provide a better service.
Mectalent and Conseptas will take appropriate measures (also taking into account the nature of the personal data concerned) to prevent and minimise the security risks associated with the use of our systems and services.
Such measures include, as appropriate, the use of firewalls, secure servers and encryption, the deployment of appropriate access management systems and processes, the careful selection of data processors, and other technically and commercially reasonable actions to adequately protect the unauthorized use and disclosure of your personal data. Mectalent/Conseptas may also take the necessary backups and use other similar means to prevent unintentional damage or destruction of your personal data as well as to ensure the smooth operation of our services.