August

Privacy Policy Recruitment

DATA PROTECTION NOTICE FOR JOB APPLICANTS

Updated: 31.8.2026

The purpose of this notice is to provide privacy information required by the EU General Data Protection Regulation (“GDPR”) to you as the data subject.

1. DATA CONTROLLER AND CONTACT DETAILS

August Associates Oy
Kasarmikatu 25
00130 Helsinki
Tel: +358 9 681 2560
email: privacy@august.fi
Contact person: Aleksi Talsi

2. NAME OF THE REGISTER

The name of the register is August Associates’ recruitment register.

The register covers August Associates’ job applicants and potential candidates for employment. The processing of personal data of employees after entering into an employment or service contract is described in August Associates’ personnel data protection notice.

3. PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

The purpose of use (and legal basis) for processing personal data is:

  • Identifying and evaluating candidates for potential employment, as well as for future roles that may become available (legal basis: legitimate interest of the data controller, consent of the data subject)
  • Recordkeeping in relation to recruiting and hiring (legal basis: legitimate interest of the data controller)

4. CATEGORIES OF PERSONAL DATA

Processing personal data is a necessity for us to be able to move forward in the application process. We typically ask you to provide the following types of personal data during the recruitment process:

  • Name, contact details (e-mail address, address, telephone number), age, gender, title, current employment, employment history, academic history, certificate of secondary degree education, certificate of university degree education or transcript of records, test results, language skills, other skills and achievements, positions of trust, interests and hobbies.
  • Preferences or requests related to timing of employment and salary, and other information that job applicants may voluntarily provide.
  • Based on consent by the job applicant, information about aptitude evaluation, information from possible professional profile, references, recommendations, and other similar information may also be obtained and processed.

5. SOURCES OF PERSONAL DATA

Personal data is collected directly from you and with your consent from other sources. We may use recruitment consultants if needed.

With your consent, we may collect information from your professional profile (e.g. LinkedIn) to the extent that collecting data is relevant in relation to the recruitment process.

6. DISCLOSURES AND RECIPIENTS OF PERSONAL DATA

By rule, we do not disclose your data to external parties, unless we have requested and gotten your consent for the disclosure of data for e.g. aptitude assessments. We can disclose personal data in a manner permitted and obligated by legislation to parties who have the right to receive data from the register, such as the employment authorities.

We process data ourselves and use subcontractors who process personal data on our behalf. Personal data may be transferred to subcontractors for the purposes of e.g. providing services related to IT systems. We have ensured the protection of your data by making necessary contracts with such subcontractors.

7. TRANSFERRING PERSONAL DATA

Personal data is primarily processed on servers within the EU/EEA. Personal data may be transferred outside the EU/EEA, including to the United States, when using third-party service providers such as cloud-based services and AI tools. In such cases, appropriate measures under Chapter V of the GDPR are taken to ensure that personal data remains protected. International transfers of personal data are done within the scope of the EU-US Data Privacy Framework, by using EU Commission’s Standard Contractual Clauses, or by another valid transfer mechanism under the GDPR.

8. DATA RETENTION

Recruitment data is retained during the recruitment process and for up to 24 months from a negative recruitment decision. The retention period is based on legal statutes of limitation.

With your consent, we may actively use your contact and application data to notify you of new open positions up to 12 months after the negative recruitment decision.

If you become our employee, we store the data you have provided as a job applicant and the information related to the recruitment process as a part of your HR profile according to our privacy notice regarding our employee register.

9. DATA SECURITY

The location and protection of the equipment for storing documents has been carefully maintained and the documents are stored in a secured space. The access control at the premises has been appropriately arranged.

Applicant data can only be accessed by authorized personnel, who have the obligation of confidentiality and whose duties include recruiting and human resource management.

10. RIGHTS OF THE DATA SUBJECT

You always have the right to:

  • Access the personal data stored by us concerning yourself
  • Demand rectification of inaccurate or outdated data (in some cases, you can update your information yourself)
  • Lodge a complaint with the supervisory authority

Additionally, subject to certain conditions, you may have the following rights:

  • When the processing is based on your (explicit) consent in accordance with art. 6(1)(a) and/or 9(2)(a) GDPR:
    • You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  • You have withdrawn your consent, or if any other of the conditions to use “the right to be forgotten” (art. 17 GDPR) are met:
    • You have the right to have your personal data erased.
  • You have contested the accuracy of personal data, or if any other of the conditions to use the right to restriction of processing (art. 18 GDPR) are met:
    • You have the right to have the processing of your personal data restricted e.g. while your requests related to your personal data are investigated and resolved.
  • When the processing is based on your consent or a contract and where the processing is carried out by automated means
    • You have the right to transmit your data to a system maintained by another controller (if it is technically feasible and as far as your request concerns information provided to us by yourself)
  • When the processing is based on our legitimate interest (art. 6(1)(f) GDPR)
    • You have the right to object to processing of your personal data on grounds relating to your particular situation.

11. WHO TO CONTACT
All contacts and requests concerning the rights mentioned above should be made in writing to the contact person mentioned in the beginning of this privacy notice. Your request should include your name and contact details. Please note that when submitting a request concerning your rights, we may ask you to provide additional information in order to verify your identity.

We will answer your contacts and requests related to your rights as a data subject within one month.