Bluugo Job Applicant Privacy Policy

At Bluugo, we are committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, store, and protect the information you provide when applying for a position with us, in compliance with the General Data Protection Regulation (GDPR) and applicable Finnish data protection laws.

Data Controller Personal Data Collected Purpose and Legal basis for Processing Data Collection Method Data Storage and Security Data Access and Sharing Data Retention Your Rights Changes to This Privacy Policy Contact Information Consent

Data Controller

Bluugo Oy, Mannerheimintie 105, 00280 Helsinki Finland

Email: privacy@bluugo.fi

Personal Data Collected

We collect and process the following categories of personal data from job applicants:

Identification Information: Name, photograph (if provided).
Contact Information: Email address, phone number, LinkedIn profile link.
Professional Information: CV/resume, cover letter, employment history, education details, certifications, skills, references, work permit.
Other Information: Any additional information you choose to provide in your application or during the recruitment process.

Purpose and Legal basis for Processing

We process your personal data for the purpose of managing our recruitment activities, including:

Assessing your qualifications and suitability for the position applied for.
Communicating with you regarding your application and the recruitment process.
Conducting interviews and assessments.
Verifying references and qualifications.

The legal basis for processing your personal data is our legitimate interest in recruiting qualified personnel for our business needs. In cases where we process special categories of data or retain your data for future opportunities, we will obtain your explicit consent.

Data Collection Method

We collect personal data directly from you when you submit your job application through our online application form powered by Formbricks. Formbricks automatically collects data from partial submissions of the job application form.

Bluugo may also collect data from third parties, such as references you provide, with your consent.

Data Storage and Security

Bluugo is committed to protecting your Personal Data. To do so, we utilize reasonable and appropriate organizational, technical and physical measures to safeguard the information we collect and process. We follow generally accepted industry standards, technologies and measures designed to protect information from unauthorized access, use, or disclosure. The measures we use are designed to provide a level of security appropriate to the risk of processing personal information. This includes, for example, firewalls, strong password protection and other access and authentication controls. We utilize SSL technology to encrypt all data transfers and we also have application-layer security features to further protect all Client and Personal Data.

As a general rule, the processing is conducted in the EU/EEA. Any relocation to a third country is permitted to the extent this will be required for the performance of the services provided by Bluugo. The transfer shall be governed by the EU-US Privacy Shield system or the EU Standard Contractual Clauses ("Model Clauses").

Our self-hosted data collection platform, powered by Formbricks, is GDPR compliant and adheres to strict data protection standards. Only the data collected from fully submitted applications will be stored and processed for recruitment purposes. Any data collected automatically by Formbricks from partially filled applications will be deleted.

Access to your personal data is restricted to authorized HR personnel and members of the hiring team involved in the recruitment process. We do not share your data with third parties unless required by law or with your explicit consent.

Data Retention

We retain your personal data for up to six months after the conclusion of the recruitment process for the position you applied for. If you provide consent to be included in our talent pool for future opportunities, we will retain your data for an extended period as specified in the consent form. You have the right to withdraw your consent at any time.

Your Rights

As a data subject, you have the following rights under the GDPR:

Right to Access: You can request access to your personal data and obtain information about how we process it.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure: You can request deletion of your data under certain conditions.
Right to Restrict Processing: You can request that we limit the processing of your data in specific circumstances.
Right to Data Portability: You can request to receive your data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your data based on legitimate interests.

To exercise any of these rights, please contact us using the contact details provided above. Please note that exercising your Right to Erasure, Restrict Processing or Object, may disqualify you from being considered for employment at Bluugo.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes and indicate the date of the latest update.

Contact Information

Please contact us with any questions or concerns about this Privacy Policy at privacy@bluugo.fi.

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman if you believe your data protection rights have been violated.

By submitting your job application, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.