Information to the data subject in accordance with the EU General Data Protection Regulation (2016/679) articles 13-14

1. Controller

Arcada University of Applied Sciences Ltd
Jan-Magnus Janssonin aukio 1
00560 Helsinki
Business ID: 2553871-2

2. The controller’s representative

Adminstrative and HR director Susanne Homén-Lindberg
Tel. 0294 282 609
E-mail address in the format

3. Contact person for the register

Administration and HR coordinator Hilde Losvik
Tel. 0294 282 506
E-mail address in the format

4. Data protection officer

Data protection officer, legal counsel Anna Härmä
Tel. 0294 282 888
E-mail address

5. Purposes of processing personal data

The data is used to process applications when recruiting personnel to Arcada, from the moment the application is submitted until the candidate to be employed is chosen.

6. Legal basis for processing personal data

The legal basis for processing personal data is data subject’s consent.

7. Categories of personal data and the duration of storage

  1. Basic information (name, address, phone number, e-mail address) stored 2 years
  2. Application (cover letter) stored 2 years
  3. Resumé (CV) attachment to the application
  4. Communication within the recruitment team stored 2 years
  5. Evaluation of the candidates stored 2 years

8. IT systems used when processing personal data

Teamtailor – recruitment tool

9. Data sources

The data is provided by the data subject in the application and by the recruitment team when processing the submitted applications.

10. Recipients of the personal data

The HR unit and the recruitment team process the personal data for the recruitment in question.

Personal data of the candidate to be employed is transferred from the recruitment register to the personnel register.

11. Transfer of personal data outside the EU and the EEA and the basis for the transfer

Personal data is not transferred outside the EU or the EEA without the data subject’s consent.

12. Principles for the protection of personal data

Material in electronic format is stored in IT systems and on computers protected from unauthorized use with security measures including firewalls and passwords. The systems have different user levels, and users are granted access to the data only to the extent the user’s work tasks require.

Material in paper format is stored in locked rooms with limited access and access control.

13. Automated decision-making

Automated decisions and profiling are not made based on personal data within the register.

14. The data subject’s rights

Information about the data subject's rights can be found here.