Raute Privacy Notice - Recruitment

1 Purpose of this notice and the data controller

The purpose of this notice is to give you information regarding how we process personal data of individuals who apply for a job at Raute Corporation. The data controller of your personal data is Raute Corporation and its affiliated group companies (“Raute” or “we”), which jointly determine the purposes and means of personal data processing. Each Raute group company is responsible for the processing of personal data in its own activities for the purposes and on the legal bases set out in this notice. They may use the necessary personal data collected by other group companies for the same purposes. 

Raute is fully committed to protecting your personal data when using or processing them and recognizes the importance of correct and lawful treatment of personal data. Any mandatory national laws or regulations will take precedence in the event that they conflict with and have stricter requirements than this notice. 

If you have any questions related to the processing of your personal data and/or this notice, please contact [email protected]. 

2 For what purpose is your personal data collected?

Raute processes your personal data as a job applicant for the following purposes: 

• to manage Raute´s recruitment process
• to screen, assess and evaluate all educational and professional information and relevant background information in a view of a potential recruitment
• to prepare an employment contract in case of a positive evaluation and decision to hire. 

The legal basis for processing data is: 

• our legitimate interest, which is based on a job application and recruitment process
• your consent, which can be requested, for example, in the following situations:
  • conducting personality and aptitude assessments
  • executing medical tests or security clearances
  • collecting information from references or social media such as LinkedIn.

3 What type of information is collected about you?

Raute collects and processes the following personal data which are necessary for us to run our recruitment processes: 

• basic information and contact details, such as name, date of birth, language, country of residence, email address, postal address, phone number
• information regarding job application and CV, such as information regarding work history, education, skills, certificates, confidential posts
• information related to the proceeding of the recruitment process, such as information of interviews, tests, assessments and security clearances
• other possible information you have provided us in connection with the recruitment process or specifically published for professional purposes such as a LinkedIn profile or information we have separately collected based on your consent.

4 Where do we collect personal data from?

Primarily, we collect personal data from you or, based on your consent, from references or tests. Other information includes data related to the recruitment process. Other sources of information are used within the limits allowed by the applicable legislation. 

5 To whom do we disclose your personal data, and may data be transferred outside the EU or EEA?

We may use external professional service providers for concluding personality and aptitude assessments and for recruitment process. We also use vendors working on our behalf for processing personal data, e.g., recruitment, data and IT management. We have ensured the protection of your data by making data processing agreements with the service providers. 

Subsidiaries of Raute Corporation process personal data of job applicants only to the extent that is required to recruit for the subsidiary in question. Data may be disclosed to outside of Raute only in conformance with applicable legislation. 

Raute transfers data to countries outside the EU or EEA within the Raute Corporation. In the absence of adequacy decision by the EU Commission, Raute applies standard contractual clauses approved by the European Union or other approved transfer mechanisms in order to maintain the adequate level of data protection. 

6 How is your personal data protected, and for how long do we process the information?

Raute applies physical, technical, and administrative protection measures to protect personal data. Only those parties who have the right to process personal data for their work performance are authorized to use the systems containing data. Raute makes data processing agreements with all subcontractors that process personal data in order to ensure appropriate data protection. 

Personal data in open applications will be stored for 6 months from the submission of the application. Applications for specific tasks and personal data collected in the recruitment process will be stored for two years after the end of recruitment process.  

7 Your rights as a data subject

Right of access, rectification and erasure 

As a data subject you are entitled to obtain information of your personal data processed by Raute. You have also a right to review the personal data concerning yourself, which is stored in the register, and a right to require rectification or erasure of your data. 

Withdrawal of consent 

When the processing of information is subject to your consent, you may withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of processing before the withdrawal of the consent. Withdrawals can be made by requesting withdrawal from [email protected]. 

Right to lodge a complaint with a supervisory authority 

If you think that the processing of personal data relating to you infringes the data protection regulation, you have the right to lodge a complaint with a supervisory authority. You may lodge your complaint in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement. 

Other rights 

You have also a right to object processing or request restriction of the processing to the extent required by applicable data protection law. You may also request the personal data collected based on your consent and concerning you to be transmitted to another controller in a case where the data is in machine-readable and transferable format. 

8 Whom can you contact?

If you have any questions related to the processing of your personal data or you want to exercise your abovementioned rights, please contact [email protected].