This privacy statement describes how Duunitori Group processes personal data of people who use our services either as job applicants or as employers (both referred to below as “Users”). These services include duunitori.fi, jobbland.se, jobbsafari.se, jobbsafari.no and allaloner.se and are referred to below as “Service”. 

Please note that the processing of personal data related to our website and the use of cookies and similar technologies is described in the Privacy and Cookie Statement for Website Visitors. Please also note that in some cases, we also process personal data as a processor on behalf of our employer customers. This processing is covered by the privacy policies and statements of the employers.

Controller

Each Duunitori Group company (Duunitori Oy in Finland, Jobbland AB in Sweden and Jobbland AS in Norway) acts as the controller.

You can reach us at privacy@duunitorigroup.com.

Who does this statement apply to?

• Users with an account to the Service (job applicants or employers)
• Users who have used features of the Services, such as job alerts or tests
• Job applicants applying to jobs through the Service
• Employer representatives

Purposes and Legal Grounds for the Processing

We process personal data of Users for various purposes which are described below. Please note that the specifics of the processing and the personal data we process depends on your role (such as a job applicant or a representative of an employer), what data you choose to share with us, and how you use the Service.

Providing the Service and Its Features

We process personal data to provide our Service, which includes features such as job alerts and career tests, and the possibility to post job advertisements and to apply for jobs. This processing is based on our legitimate interests to provide the Service and to meet our contractual obligations.

Customer Relationship Management and Billing

We process personal data of our employer customers to manage our relationship with our customers and for the purposes of billing. This processing is based on our legitimate interest to manage our customer relationships and to conduct business.

Connecting Job Seekers and Employers

We match candidates to open positions and share relevant profile information with prospective employers if job applicants choose to apply to the jobs through the Service or enable sharing of their data with the employers. This processing is based on the User’s consent.

Personalizing Content

We personalise job recommendations and prioritize content within the Service based on your options, profile and activity. This processing is based on your consent.

Identification and Access Management

We process personal data related to user accounts and profiles to authenticate Users and to manage the Users’ access to the services and their data. This processing is based on our legitimate interests to ensure the security of the Service and the Users’ data.

Communication

We process personal data to communicate about our Service, for example by providing Users information related to their accounts, security or billing). This processing is based on our legitimate interest to provide our Users with information about the Service.

Other Purposes

We may also process personal data based on our legal obligations, or for the purposes of preventing misuse, crime or fraud, or when handling legal proceedings.

Categories of Personal Data

The list below describes the different categories of data we may process when providing the Service. Please note that the specifics of the processing and the personal data we process depends on what data you choose to share with us and how you use the Service.

Users with an Account

• User account data
• Basic information (e.g. name)
• Contact details (e.g. email address)
• Usage information

Job Seekers and Applicants

• Current employer, work history and experience, language and other skills, job applications, CV
• Profession, education, other studies
• Test answers and results
• Communication related to job applications
• Job applicant profile

Employers and Employer Representatives

• Basic information (e.g. name)
• Contact details (e.g. email address)
• Company information and title
• Communication related to job applications

Sources of Personal Data

We collect personal data directly from the Users in the course of providing the Service. In case the User is a representative of an employer, some data may also be provided by the employer. If the User chooses to login to the Service through Google or Facebook, we receive identification data from those services.

Profiling

We create a job applicant profile based on the data the User provides. The purpose of the profile is to offer the User the best possible experience using the Service. When we know what interests the User has, we can offer jobs and career content that matches the User’s interests, such as articles, blog posts, and job search tips.

Duration of the Processing

We store personal data as long as it is necessary for the purpose it was collected, after which we will delete or anonymize the data. The more detailed storage periods therefore depend on the nature of the data and the purposes for which it’s processed.

Users: We process data for as long as the User uses the Service, i.e., until the User deletes their account. The User can add and delete individual data points (such as education or work history) at any time. When the User deletes their account, we stop processing the data (except for data for which we have a valid legal basis or contractual obligation to store, such as data related to job applications processed on behalf of employers). The User’s data remains in backups for about 180 days, after which it is deleted. If the User no longer uses the Service, we delete data 2 years after the User’s last login to the Service

Job alerts and tests: We delete data related to job alerts and tests if the User unsubscribes from the alerts or deletes the data. Unless the User unsubscribes or deletes the results, we delete the data 2 years after the last login to the Service.

Employers: Data related to the job postings is stored for 2 years after the posting has expired.

Disclosures of Personal Data

We use service providers who process personal data on our behalf. You can find more information about what service providers we use from the following page: service providers.

Transfer of Personal Data Outside the EU/EEA

We process personal data primarily within the EU/EEA and where possible, require that our service providers do so as well. However, some of our service providers operate globally and may also process personal data outside the EEA. In these cases, we require that our service providers take all necessary steps to ensure that personal data receives an adequate level of protection in the jurisdictions in which it is processed. Measures for this include Standard Contractual Clauses approved by the European Commission and additional safeguards implemented by our service providers.

Your Rights

Right to access: You have the right to access your data and the right to have any inaccurate or false data corrected.

Right to rectify: You have the right to have incorrect or incomplete personal data corrected or completed.

Right to object: You have the right to object to certain processing of personal data, such as processing for direct marketing purposes.

Right to erasure: You may also ask us to erase your personal data from our systems. We will comply with such a request unless we have a legitimate ground to process the data.

Right to restriction of processing: You may request us to restrict processing of personal data in cases where the conditions set out in the General Data Protection Regulation are met.

Right to data portability: You have the right to receive personal data processed by us based on our consent or the performance of an agreement from us in a structured and commonly used format and to independently transmit those data to a third party.

Right to file a complaint: You have the right to file a complaint with the data protection authority if you believe we are violating applicable data protection legislation when processing your personal data. The data protection authority who supervises us is the Finnish Data Protection Ombudsman’s Office.

You can exercise your rights described above by contacting us at privacy@duunitorigroup.com. Please note that there may be certain conditions for some of the rights and using some of the rights may lead to restrictions on how you can use our services. Please also note that we may request you to provide additional information to confirm your identity. We reserve the right to reject requests that are unreasonably repetitive, excessive, or manifestly unfounded.