Privacy statement

OK Perintä Oy is committed to upholding the rights of data subjects and the protection of personal data. This privacy statement describes how OK Perintä Oy collects, processes, stores and protects your personal data.

1. Data controller

OK Perintä Oy
Business ID: 0873725-0
Tiilitehtaankatu 7 A
FI-65100 Vaasa, Finland

2. Contact person for privacy matters

Data Protection Officer Jenni Keskinen
OK Perintä Oy 
Tiilitehtaankatu 7 A
FI-65100 Vaasa, Finland

3. Name of filing system

OK Perintä Oy job applicant database

4. Category of data subjects and purpose of processing personal data 

The category of data subjects comprises job applicants. Job applicants refer to natural persons who have applied for a position/vacancy with OK Perintä Oy. The purpose of processing the personal data of job applicants is the recruitment of applicants.

5. Legal basis for processing data 

The processing of personal data of job applicants is based on the consent of the individuals in question. Job applicants give their consent to processing activities in accordance with this privacy statement upon submitting their job application via the OK Perintä Oy website.  

The processing of possible health information provided by job applicants is based on the Act on the Protection of Privacy in Working Life (759/2004). The same Act also describes the right of the controller to process the credit information of applicants. 

6. Regular sources of data

The company collects personal data of job applicants from the applicants themselves. 

7. Data content of the filing system

Personal identity number
Postal address
Email address 
Health information
Personal credit information
Other data provided by the applicant

8. Erasure of data

Personal data shall be stored until the position which the applicant has applied for is filled. Job applicants may also state during submission of their application that the company has the right to use the application in filling other positions for a period of six months from the end of the application period.  In addition, if the applicant has submitted an open application to the company, the company shall store the data for a maximum of six months.

9. Regular disclosures of data and transfers of data outside the EU or EEA

The controller may make use of an external subcontractor or software service provider to process personal data on behalf of the controller.  In such cases, the controller is responsible for ensuring the lawfulness of processing.

Data may be disclosed to the authorities under compelling legal grounds.

The company or data processors acting on behalf of the company will not transfer the personal data of job applicants outside the EU or EEA. 

10. Description of technical and organisational protective measures

The company’s human resources software is protected by a firewall, usernames and passwords. Data in the filing system may only be processed by individuals entitled to do so by reason of their duties. Processors of personal data are subject to a non-disclosure obligation.

11. Rights of data subjects

Data subjects have the right to access their personal data stored by the controller. Data subjects may request access to said data in writing from the Data Protection Officer (section 2). Data subjects have the right to request the rectification or erasure of inaccurate or outdated data. Data subjects also have the right to restrict the processing of their personal data.

Job applicants may revoke their consent to processing at any time by contacting the Data Protection Officer of OK Perintä Oy (section 2). In this case, the company will erase the applicant’s personal data from its applicant database without delay.

Data subjects have the right to file a complaint to the regulatory authorities on matters related to the processing of their personal data. 

12. Changes to the privacy statement

This privacy statement may be updated at a later date, for example, due to changes in the company’s procedures on the processing of personal data or changes in official regulations or legislation. This privacy statement was last updated on 24 May 2018.