Register of the talent community and career services

2. Contact

For matters related to the register, please contact tietosuoja@avila.fi

3. Register name

Register of Avila Oy’s talent community and career services.

4. Storage and processing of personal data

The information in the register is used for the employment of job seekers through Avila’s services. Avila collects information about people who register as open-to-work, that serves their employment.

The registrant him or herself gives their consent to the use of his data through the recruitment carried out by Avila or through Avila’s career pages. In this case, the person’s information can be used to communicate about new job opportunities, services related to skills development, and to carry out research and surveys.

Personal data is stored in Avila’s expert community for 24 months. At the end of this storage period, the person is actively asked about their willingness to continue as a member of the community. With active approval, a person can continue as a member of the community for a longer period of time, otherwise the personal data will be deleted automatically after the retention period.

In the services offered to our customers, personal data is processed based on a legitimate interest. This is based on the contract between the employer and Avila.

5. Data content of the register

The information content of the register consists of information collected during recruitments carried out by Avila or information provided by the registered person hims or herelf. The data to be saved may vary. The register may contain the following information:

• Registered person’s name, contact information, date of birth, language skills, educational background, work history.
• Documents submitted by the registrant, such as job applications, resumes and LinkedIn profile URL.
• Information and wishes related to employment and career development.
• Data stored by the registrant on Avila’s career portal or other platforms.
• Choices made by the registrant regarding direct marketing and communication.

6. Data sources of the register

The information in the register is obtained from the registered person. In recruitments where the candidate himself applies for an open position, the basis for processing is the individual’s written consent. 

7. Data transfers

Information will not be disclosed to third parties or used for other purposes without the permission of the data provider, unless it is a matter of information disclosure in accordance with the requirements of legislation or official regulations.

8. Register protection principles and data processing security

Avila processes personal data in a way that aims to ensure appropriate security of personal data, including protection against unauthorized processing and accidental loss, destruction or damage.

Personal information is kept confidential. The personal data of the registrants is processed by the persons responsible for Avila’s recruitment data register and the Avila personnel participating in the recruitment.

Based on the Employment Contracts Act and the confidentiality clauses of contracts, all entities that process personal data have a duty of confidentiality regarding matters related to the processing of registered personal data.

Avila uses appropriate technical and organizational security measures to secure this, including firewalls, limited data read, passwords, two-step authentication and other technical security measures.

In accordance with this privacy statement, Avila can outsource the development and maintenance work of information systems that contain personal data to different service providers. Avila ensures with sufficient contractual obligations that personal data is processed appropriately and in accordance with the law.

9. Rights of the data subject

In accordance with the legislation, the registrant has the right to be informed of what information about him or her has been stored in Avila’s register. The person also has the right to delete or correct data. The data will be deleted according to the request if the law does not require their retention.

If the processing of personal data is based on the consent given by the data subject, the data subject has the right to withdraw his or her consent. The cancellation has no effect on the processing carried out before it.

Requests regarding the rights of the registered are made electronically, and they are sent to the e-mail address of the data controller mentioned in this privacy statement.

The registered person has the right to withdraw his or her consent at any time or to object to the processing of his data. The registered person also has the right to file a complaint with the supervisory authority.

10. Changes to data protection

This privacy statement can be changed and updated as necessary. The changes may be based on the development, improvement of our services or changes in data protection legislation.