This Privacy Notice explains how your personal data as a job applicant of a Wihuri Group company may be processed and how you can exercise your privacy rights. We process your personal data for HR management purposes on recruitment as explained below in more detail.
The controller of your personal data is the Wihuri Group company, which you have sent your job application to (“we” or “Wihuri”).
In case you have any questions or requests concerning your personal data or data protection, you may always contact us through the following email address:
dataprotection@wihuri.com
We may periodically update this Privacy Notice by posting a new version of the Privacy Notice on the Wihuri’s website.
Further Information on the Processing of Your Personal Data
What Type of Personal Data Do We Process?
We only process personal data that is directly necessary for the recruitment process you have with Wihuri. We mainly process personal data you have provided to us.
The data we process may include especially the following categories of your personal data:
- Identification details, such as your phone number and home address
- Employment history
- Information on your qualifications and skills, such as your CV, certificates, language skills
- Your email notification subscriptions
The personal data we process may not include all categories of data listed above. The categories of data we process also depend on what information you decide to provide us with.
For Which Purposes Do We Process Your Personal Data?
We only process your personal data for the following purposes:
- To recruit future employees
- For statistical purposes to improve our recruitment process
What Is the Basis of Processing Your Personal Data?
We only process personal data when we have a legal justification to do so.
- We process your personal data in order to take steps at your request prior to entering into a contract.
- We may also process your personal data based on our legitimate interest related to us providing an employment or other relationship with you.
- We may in some instances process your personal data for the purpose of complying with a legal or regulatory obligation.
- In some circumstances we may also process your personal data on the basis of your consent.
With Whom May We Share Your Personal Data?
Apart from the Wihuri Group company, which you have sent your job application to, your personal data may be accessed by others in the following situations:
Other Wihuri Group companies: We may transfer your personal data to other Wihuri Group companies for HR administration purposes. Some of these companies may act as an independent data controller for the personal data we provide them.
Third parties: We may disclose your personal data to third parties (e.g. pre-employment testing providers) when it is necessary for the purposes specified above.
Service providers and other partners: As part of normal operations Wihuri contracts with such third party service providers (e.g. IT systems and support providers etc.), who process your data on Wihuri’s behalf. These partners process your personal data only at and according to Wihuri’s instructions to provide the services.
May There Be Any International Data Transfers?
Wihuri operates in a global market. Due to this, your data may be transferred to non-EU/EEA countries too. Because different countries may have different data protection laws than your own country, we take steps to ensure adequate safeguards are in place to protect your data as explained in this Privacy Notice. Adequate safeguards that Wihuri Group Companies and other partners may use include standard contractual clauses approved by EU Commission.
How Do We Protect Your Personal Data?
Wihuri complies with all applicable data protection legislation and aims to ensure that your privacy is not infringed in any phase of the processing. Only individuals with special privileges, such as HR employees and those possibly assisting them, and managers may have access to your personal data.
We continuously develop and implement administrative, technical and physical security measures to protect your data from unauthorised access and against loss, misuse or alteration. We also require our service providers to implement all appropriate security measures to protect your personal data.
For How Long Do We Retain Your Personal Data?
Typically, we retain your data for recruitment purposes for the duration of the recruitment process or for a maximum of three months after the selection has been made. With your consent, we may also retain your data longer for future recruitment needs, however, for a maximum of three years. Please note that the data retention periods may vary by data category and we may retain your data as long as we have a legal obligation to do so. Inaccurate or outdated data is deleted regularly.
If you ask us to remove your personal data, we may still retain your data if necessary for our legitimate business interest, such as to comply with our legal obligations, resolve disputes, and to enforce our agreements.
Your Rights and Options
You have the right to access your personal data and to correct your data. In some circumstances you may also have the right to have your unnecessary or inaccurate data deleted, to object to how we use or share your data, to restrict how we process your data, and to have your data transferred to another data controller. When the processing of your personal data is based on your consent, you can always withdraw your consent.
You can exercise these rights by contacting Wihuri’s contact person in data protection matters through the contact details set out above.
Even though Wihuri seeks to resolve any privacy related disagreements in co-operation with you, you also have the right to lodge a complaint to a data protection authority about our processing of your personal data. For more information, please contact your local data protection authority.