Teamtailor Recruitment Privacy Policy
Teamtailor provides a recruitment platform and related services ("the Service") to simplify and support the recruitment process on behalf of Mylab Oy ("the Controller", "we", "us", or "our").
It is important to us that individuals using the Service ("Users") feel safe and understand how their personal data is processed during the recruitment process. We are committed to maintaining a high level of protection for personal data and process, manage, use, and safeguard personal data in accordance with this Privacy Policy ("Privacy Policy").
1. General
Mylab Oy acts as the Controller of personal data in accordance with applicable data protection legislation. The purpose of processing Users' personal data is to manage and facilitate employee recruitment processes.
2. Collection of Personal Data
We are responsible for processing the personal data that Users submit through the Service, as well as personal data that we otherwise collect in connection with the Service.
When and How We Collect Personal Data
We collect personal data when Users:
submit an application through the Service or otherwise provide personal information about themselves, either directly or through a third party such as Facebook or LinkedIn;
use the Service to communicate with our recruitment team and provide personal information about themselves, either directly or through a third party such as Facebook or LinkedIn;
provide identifiable information through chat functionality available on websites using the Service, where such information is relevant to the recruitment process.
We may also collect information from third-party sources such as Facebook, LinkedIn, and other publicly available sources. This process is commonly referred to as sourcing and may be conducted manually by our employees or automatically through the Service.
In some cases, current employees may recommend potential candidates. When this occurs, employees may provide information about potential candidates. Such candidates are considered Users under this Privacy Policy and will be informed about the processing of their personal data.
Categories of Personal Data Processed
The categories of personal data collected through the Service may include, but are not limited to:
name and contact details;
email communications;
photographs and videos;
Facebook and LinkedIn profile information;
responses to recruitment-related questions;
job titles and professional experience;
educational background;
other information provided by the User or shared through the Service.
Only personal data relevant to the recruitment process will be collected and processed.
Purpose and Legal Basis for Processing
The purpose of collecting and processing personal data is to manage and conduct recruitment activities.
The legal basis for processing is our legitimate interest in administering and facilitating recruitment processes and identifying suitable candidates for employment opportunities.
Personal data processed for aggregated analytics or market research purposes will be anonymized and cannot be used to identify an individual User. Such information is therefore not considered personal data.
Registration Consent
The User consents to the Controller processing their personal data for recruitment purposes. The User agrees that personal data may be collected through the Service when the User:
completes an application through the Service by providing personal data about themselves, either directly or through a third party such as Facebook or LinkedIn, and that the Controller may use external sourcing tools to obtain additional information; and
uses the Service to communicate with the Controller’s recruitment department by providing personal data about themselves, either directly or through a third party such as Facebook or LinkedIn.
The User also consents to the Controller collecting publicly available information about the User and compiling such information for recruitment purposes.
The User agrees to the collection of personal data as described above. Personal data will be processed in accordance with the sections Storage and Transfers and How Long Personal Data Is Processed below.
The User has the right to withdraw their consent at any time by contacting the Controller using the contact details provided in Section 9. However, exercising this right may mean that the User will no longer be able to apply for a specific position or otherwise use the Service.
Storage and Transfers
Personal data collected through the Service is stored and processed within the EU/EEA or in third countries that the European Commission has determined provide an adequate level of protection. Personal data may also be processed by service providers that have entered into agreements fully compliant with applicable requirements for international data transfers, or by service providers that provide adequate safeguards to protect the rights and freedoms of data subjects.
Please contact us using the contact details provided in Section 9 if you would like documentation regarding such safeguards.
How Long Personal Data Is Processed
Unless a User objects in writing to the processing of their personal data, we will store and process the personal data for as long as we consider necessary for the purposes described above.
Please note that a candidate may be of interest for future recruitment opportunities. Therefore, we may retain personal data for this purpose until it is no longer considered relevant for potential recruitment activities.
If you do not wish your personal data to be processed for future recruitment purposes, please contact us using the contact details provided in Section 9.
3. Users’ Rights
Users have the right to request information about how we process their personal data by contacting us in writing using the contact details provided in Section 9.
Users are entitled to receive one (1) copy of the personal data processed about them free of charge. The Controller may charge a reasonable fee for additional copies based on administrative costs.
Users have the right to request the correction of inaccurate personal data relating to them by contacting us in writing using the contact details provided in Section 9.
Users have the right to request the deletion of their personal data or the restriction of processing and, under certain circumstances, the right to object to processing based on legitimate interests.
Users have the right to withdraw any consent previously given to the Controller regarding the processing of their personal data. However, exercising this right may mean that the User can no longer apply for a specific position or otherwise use the Service.
Under certain circumstances, Users have the right to data portability, meaning the right to receive their personal data and transfer it to another controller, provided that this does not adversely affect the rights and freedoms of others.
Users also have the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates applicable data protection legislation.
4. Security
We consider the protection of personal privacy a priority and actively work to ensure that Users’ personal data is processed with the utmost care. We implement all reasonably expected measures to ensure that personal data is processed securely and in accordance with this Privacy Policy and the General Data Protection Regulation (GDPR).
However, the transmission of data over the internet and mobile networks always involves certain risks, and all transfers are made at the User’s own risk. It is also important that Users take responsibility for protecting their own information. Users are responsible for keeping their login credentials confidential.
5. Transfer of Personal Data to Third Parties
We do not sell or otherwise transfer Users’ personal data to third parties.
We may transfer Users’ personal data to:
our contractors and subcontractors who act as data processors and sub-processors under our instructions for the purpose of providing the Service;
public authorities or legal advisors where criminal or inappropriate conduct is suspected; and
public authorities, legal advisors, or other parties where required by law or an official authority.
We only transfer personal data to third parties that we trust. We carefully select our partners to ensure that personal data is processed in accordance with applicable data protection legislation.
We cooperate with the following types of service providers and data processors:
Teamtailor, which provides the Service;
server and hosting providers;
email service providers;
video processing providers;
sourcing and recruitment research providers;
analytics service providers; and
other companies that support the delivery and operation of the Service.
6. Aggregated Data (Non-Identifiable Information)
We may share aggregated information with third parties.
Aggregated information is compiled from data collected through the Service and may include, for example, statistics relating to internet traffic or geographical location data associated with the use of the Service.
Such aggregated information does not contain any data that can be used to identify an individual and therefore does not constitute personal data.
7. Cookies
Information about a User’s use of the Service may be stored through cookies. Cookies are passive text files that are stored in the User’s device, such as a computer, mobile phone, or tablet, when the Service is used.
We use cookies to improve the User experience when using the Service and to collect information such as statistics regarding the use of the Service. This is done to secure, maintain, and improve the Service.
In some cases, information collected through cookies may constitute personal data. In such cases, the processing of such information is governed by our Cookie Policy.
Users may disable the use of cookies at any time by changing the settings on their device or browser. Please note that disabling cookies may affect the functionality of the Service and result in certain features becoming unavailable.
8. Changes
We reserve the right to amend or update this Privacy Policy at any time.
The most recent version of the Privacy Policy will always be available through the Service.
A revised version of the Privacy Policy will be deemed communicated to Users when:
the User has received an email informing them of the updated version (using the email address provided in connection with the use of the Service); or
the User has otherwise been informed that a new version of the Privacy Policy is available.
9. Contact Information
If you have any questions, require further information about how we process personal data, or wish to contact us regarding any other matter, please use the contact details below.
Mylab Oy
jaana.perholehto@mylabgroup.com