Recruitment Register
Controller
Nordic Sports Brands Oy (2147624-3)
Kohmankaari 3
33310 Tampere
Contact person of the Controller
Matti Teräslahti
Kohmankaari 3, 33310 Tampere
+358 50 586 8787
[email protected]
Purpose and legal basis of personal data processing
We process the personal data of job seekers with the data subject's consent and on the basis of the legitimate interest of the data controller, so that we can manage and carry out our company's recruitments and communicate with job seekers during the recruitment process.
We collect and process users' personal data when they apply for a job through the Teamtailor service or otherwise add their personal data either by themselves or by using a third-party platform (e.g. Facebook, LinkedIn) or to contact us via the services mentioned above.
Content and regular sources of the data
The following information is collected about the applicants:
Name
Email address
Telephone number
Address
Educational and work history
CV information
Other information that the applicant themselves brings up in their application.
The data is mainly collected from the person themselves or from the recruitment partner. With the consent of the applicant, information can also be collected from their recommenders or former employers. We may also collect publicly available information about potential recruits directly from open profiles on social media (such as LinkedIn).
We only collect data that is relevant to the recruitment process in accordance with current legislation.
Recipients and recipient groups of personal data
The controller’s own personnel based on their duties and an external recruitment partner who has access to the data in the recruitment register and whose tasks are related to the processing of the data in question. All appropriate data processing agreements have been concluded with the recruitment partner.
Data retention
Applications and other personal data of the applicant are stored for the duration of the recruitment process and six (6) months after the person has either been hired for the position or when they have been notified of the end of the recruitment process, or until the data subject withdraws their consent to the processing of their personal data.
Data transfer outside the EU or EEA or to an international organization
Nordic Sports Brands Oy uses Teamtailor platform in its recruitment. Teamtailor's privacy policy can be read here: https://www.teamtailor.com/fi/privacy-policy/. In addition to the EU region (Ireland), the service's data servers are located in the United States and in some cases personal data may be transferred outside the European Union. In these situations, applicable legislation, and standard contractual clauses (SCC) approved by the European Commission are followed, and sufficient protective measures are ensured so that the rights of the data subject can be protected.
For more information on the transfer of personal data, please contact [email protected].
Data security and protection of registers
The persons processing personal data at Nordic Sports Brands Oy follow the given data protection and data security instructions. Personal data is stored in a secure environment and is used only by the company's employees at their secure workstations, where the employees can log in with their personal user ID.
Processing rights are limited to maintenance and administrative tasks. Only designated employees of the organization and the companies acting on its behalf have the right to process and maintain the personal data. Contact information collected during events and other manually processed documents containing customer data are stored in locked and fire-proof storage facilities after initial processing.
The Controller ensures that the provisions and principles of the GDPR, regulations from the authorities and good data processing practices are followed while processing personal data.
Rights of the data subject
The data subject has the right to inspect what personal data is collected and processed of them, the right to request the correction or deletion of their personal data, or the restriction of the processing, and the right to object to the processing of their personal data. However, there is no right to delete, restrict, or object to personal data whose processing is necessary.
As the data subject, you have the right to have the case regarding the implementation of the rights related to data protection brought before the supervisory authority (Office of the Data Protection Ombudsman), if we have not complied with the regulations regarding data protection.
We do not make decisions based on automated decision-making. We only use profiling for the behavior of our website visitors and automatically target marketing based on such profiling.
Additional information and data requests
For more information about the processing of your personal data or data requests under GDPR, you can send an email to Nordic Sports Brands Oy's data protection officer at: [email protected].
If you believe that the data protection regulations have been breached in the processing of your personal data, you have the right to file a complaint with the national data protection supervisory authority.
Data Protection Authority in Finland:
Tietosuojavaltuutetun toimisto
Postiosoite: PL 800, 00531 Helsinki
Sähköposti: [email protected]
Puhelinvaihde: 029 566 6700
Cookie Policy
We use cookies on our website. A cookie is a small text file sent to the user's computer and stored there. Cookies do not damage users' devices or files. The primary purpose of using cookies is to improve and customize the visitor's user experience on the website and to analyze and improve the website's functionality and content.
The data collected with the help of cookies can also be used in the targeting of communication and marketing and in the optimization of marketing measures. The visitor cannot be identified using cookies alone. However, the data obtained with the help of cookies can be linked to information obtained by the user in other contexts, for example when the user fills out a form on our website.
The cookies collect primarily the following data:
the visitor's IP address
operating system
the time of the visit on the website
viewed pages and viewing times on the website
information about the visitor's browser