Frozenbyte Oy (Frozenbyte)
Business ID: 1736734-3
Krogiuksentie 17, 00340 Helsinki
Point of contact for register issues:
Frozenbyte Privacy Team
Name of register:
Purpose of processing personal data:
The purpose of the register is to maintain a file of Frozenbyte’s job applicants, for the use of recruiters, recruiting superiors and other internal assessors. Applications can be for particular jobs or they can be open applications.
Data content of the register:
The register contains data given by the applicant in the form of CV/resume, cover letter, portfolio and other work samples. Here is a list of information the register might contain, but it varies individually based on the material you have sent us.
- Year of birth
- Telephone number, email address and other contact information such as address
- Language and other skills
- Education and job experience
- Portfolio/Work samples
- Test assignments
- Contact information for referees
The register also contains notes made during the recruitment process, including interview notes.
Regular sources of information:
Information is given by the applicant. We can also gather information from referees if the applicant has provided their contact information.
Regular conveyance of data and transfer of data outside the EU or European Economic Area:
Primarily personal data will not be transferred outside of EU/EEA-countries and is only handled by employees of Frozenbyte and will be processed through internal systems and work email.
If data is transferred (for example because of Google products, such as Gmail) it’s transferred only to countries with guaranteed adequate level of protection as defined by the General Data Protection Regulation (GDPR) or to an organization, which adheres to the EU-US Privacy Shield.
Principles of register protection:
All materials are handled confidentially. Applications are handled digitally and the register requires a username and password. Applications are forwarded to personal work accounts of the recruiting superiors and other internal assessors.
Technical equipment is protected carefully and manual material is printed only when necessary. Paper printouts will be destroyed immediately after processing. Digital material is erased once it is no longer deemed necessary. Usually this means we erase all data within 24 months, but we might store the data longer in case the recruitment process requires it. For example, if we don’t have any openings available at the moment, but you show potential, we might store your application for a longer time in case new positions open up.
Rights of the data subject:
You have the right to request an overview of the personal data we process about you.
You also have the right to request correction of incorrect information if you have identified any errors in the data. You may require the controller to correct the data if the data is considered by you to be misleading, unnecessary, incomplete or outdated for the purpose of the processing.
You have a right to request deletion of personal data, and to restrict or object to our processing of your personal data.
You may also have a right to data portability.
Please use [email protected] to file all requests. Use the same email that the job application was sent from if possible. All requests must be sufficiently identified, justified and clear in order for us to fulfill them. We will provide the requested information within one month. Please note that we might have to extend that period by two months if necessary because of the complexity or number of requests. We will let you know of any delays within one month.
We have an obligation to verify your identity, so we might ask you visit our office or ask you to verify your identity in other ways.
While we store your application after processing it, we don’t necessarily go through all old applications when suitable positions open up. If you want to apply again you can do so by sending an application to [email protected]. However, we recommend sending a new application after 6-12 months at the earliest.
Last updated: 18th May 2018