We collect and process the following types of personal data:
Non-confidential personal data:
- Information which is publicly available
- This information can include following: your name, resume information, employment history, education, courses and accreditation, board member positions, personal and professional qualifications and credentials, skills, language skills, etc. which is publicly available e.g. through professional media such as Linkedin.
Confidential personal data:
- The confidential personal data include information that is provided by you to us in written or in oral form.
In the case of customers and representatives of potential customers, the processing of personal data is based on the contractual relationship between Blegrator and the data subject or on the legitimate interest of the company and / or its client or potential client to provide services, cooperate and / or promote services. As regards representatives of partners and service providers, the processing of personal data is based on the contractual relationship or on the legitimate interest of the company and / or its partner or service provider to cooperate.
The processing of personal data may also be based on statutory obligations, such as accounting obligations.
Giving non-essential personal information is voluntary and is based on consent. In case data subject provides personal information without prior request by Blegrator this action (providing information) shall be seen as a consent. The data subject has the right to withdraw at any time (see the rights of the data subject below).
Personal information may be used in the following ways:
We will collect and process only data relevant to the specific process (such as search and selection processes). This includes data such as name, telephone number, e-mail address, employer, current position and link to the public source of information where this data is collected from. In addition, we collect data regarding the process itself, like date and time of contact, its subject and the progress status data.
If the process continues with the person, we collect and process the data provided by the person and the progress of the process in our database.
When we collect personal data from a person for processes, you provide the personal data voluntarily. You are not obliged to provide the information to us, but this will prevent us continuing the process with you.
The legal basis for the processing of personal data is the contractual relationship between Blegrator and the data subject. Person will be asked for a consent for collection of data relevant to the process he/she/it is participating.
This consent will be requested at the moment this information is collected. This consent will also be requested in writing when we are in personal contact with the person.
Depending on the process and phase person is participating into (for example search phase, selection phase, customer presentation phase), we will inform person about.
We will store personal data 4 years from the time of consent to enable future employment opportunities for the person for their justifiable benefit. At any time, a registered person can request us to delete all personal data on him/her in our systems as pointed out below.
We will delete all personal data when the duration of the personal data storage is expired. The expiration date is 4 years from the time of consent to collect the data if we do not receive a renewal of the consent before the expiration.
Blegrator will self-imposedly erase, rectificate and complete information which it notifies and considers as erroneous, unnecessary, defective or outdated.
We define in our agreements the principles of transferring personal data. We will request a consent from the person in written form to transfer his/her personal data to our client company. This consent can be included into agreement or it can be a separate consent.
We respect all Confidential data. Blegrator exercises conservative approach when collecting and processing Confidential data. This means that we maintain and constantly aim to upgrade our data security practices. We expect the same from our subcontractors and from our other partners. Our employees have signed a separate confidentiality agreement at the beginning of their employment.
In case of data security breach, we will inform the relevant authorities of the incident within 72 hours of the incident.
Subject to the conditions set out in the applicable data protection regulation, you have the following rights:
You also have the right to lodge a complaint with the responsible supervisory authority.
You have the right to withdraw your consent. If you withdraw the consent, this will not affect the lawfulness of the processing and/or disclosure prior to the withdrawal.
Please contact us via the contact details stated below or visit our website www.blegrator.fi if you have any questions in regard to the protection of your personal data or if you wish to exercise your legal rights.