Recruitment Privacy Notice

Categories of personal data we collect and process

During the recruitment process, you may be asked to provide certain personal data, such as:

Your basic information:

• Your name and contact information
• Your demographic information: gender, date of birth or age, language, title or degree
• Your photograph
• Your ID

Information about your background and suitability for the position:

• Your education
• Your employment history
• Your work skills and interests
• Information about your driver’s license status, IT-skills, language proficiencies and readiness to work abroad
• Information about your references
• Any other information that you may choose to include in your CV, cover letter or other application documents as well as any information that you provide during the interview process
• Your LinkedIn or other social media profile, your website and/or your portfolio, if applicable

Information about the position you have applied for (e.g., name of the position, nature of the employment, salary range and/or your salary expectation, start date)

Internal notes and information about the recruitment process (e.g., recruiter’s own notes about your suitability, status of the recruitment, potential next steps in the employment process)

Background check information (if applicable)

If you were requested to take any tests as a part of the recruitment process, such as, but not limited to, a cognitive ability test, the test result data may be processed as a part of our recruitment decision-making process.

Sources of your personal data

The information is primarily provided by you in connection with the job application process. However, we may also collect and receive your data from third-party sources, such as:

• We may collect your personal data from publicly available sources (such as LinkedIn)
• We may receive your personal data from a current Fiskars Group employee recommending you for a certain role
• We may use recruitment consultants, aptitude assessment providers and other service providers, who supply us with information about candidates
• If background checks are included in the process, we may receive necessary data from qualified vendors
• If reference checks are included in the process, we may also collect your personal data from the persons you have indicated as appropriate references in your application process

We will use your personal data for the following purposes:

• Evaluating your job application;
• Reviewing and checking your qualifications, checking your references and making hiring decisions;
• Managing the recruitment process and communicating with you in relation to the recruitment;
• Matching the qualifications to any opening positions within the given time frame;
• In case of a hire, personal data is used for setting up an employee number and account.
• Seeking out potential candidates and contacting them for recruitment purposes (i.e., headhunting);
• Producing recruitment statistics;
• Resolving disputes and/or as a part of a legal defence, if necessary; and
• In order to ensure the information security.

Fiskars Group does not use any automated decision making (including profiling) as a part of its recruitment processes.

Generally, we will store and process your personal data for recruitment purposes during the duration of the recruitment process and for 12 months after the process has ended. We may need to store and process your personal data for a longer period in case it is necessary to establish, exercise or defend any legal rights.

If you would like us to store your information in order to be able to consider your application for any other vacancies, you can separately consent to such processing of your personal data. You may at any time withdraw your consent by contacting us at the contact details given below. In case you withdraw your consent concerning the processing of your personal data for other vacancies, we will no longer store or process your personal data for such purposes. However, we may still store and process your personal data for the duration of any period necessary to establish, exercise or defend any legal rights.

We may disclose your personal data to the following third parties and in the following situations:

Affiliates and service providers: We may disclose your personal data to Fiskars Group companies and authorized service providers that typically process the data on our behalf (such as our IT vendors). However, in certain situations, some of our service providers (such as headhunters or aptitude assessment providers) may act as independent data controllers – these service providers will inform you about their processing activities separately.

Lawful requests: We may be required by the mandatory requirements of applicable law, or for the purposes of responding to legal proceedings or other lawful requests, to disclose your personal data to authorities or third parties.

Protection of our interests and combating fraud: We may also disclose or otherwise process your personal data, in accordance with applicable law, to defend our legitimate interests (for example, in civil or criminal legal proceedings) and when combating fraud.

Mergers and acquisitions: In the event of any sale, consolidation or reorganization of our businesses (for example mergers and acquisitions), we may disclose your personal data to prospective or actual purchasers or their advisers, where appropriate.

In connection with the recruitment process, we may utilize services that are provided using resources and servers located in various countries. Therefore, your personal data may be transferred across international borders outside your domicile or the country in which you have applied for a job.

• In the event that your personal data is transferred from EEA to countries outside the EEA, we will ensure that such transfers are carried out in compliance with the legal requirements and covered by appropriate safeguards, as applicable (such as Adequacy decision or European Commission’s Standard Contractual Clauses). You may obtain a copy of the relevant Standard Contractual Clauses (where applicable) by contacting us using the details set out in below.
• For residents of the People’s Republic of China (excluding Hong Kong, Macao, and Taiwan, “China”), we will only provide your personal data outside China: (1) based on your consent; (2) as necessary for the implementation of human resources management based on labor rules and regulations established in accordance with the law and collective contracts signed in accordance with the law; and (3) as necessary for the conclusion and performance of a contract to which you are a party, etc. For personal data that we process on the basis of your consent, if we provide it outside of China, we will separately and clearly inform you of the name and contact information of foreign recipients and foreign third parties (if any), the purpose of processing, method of processing, categories of personal data, period of retention, and methods and procedures for exercising your rights, and will obtain your consent again. If we provide sensitive personal data outside of China, we will also inform you of the necessity to do so and the impact on your rights and interests. We will sign agreements with foreign recipients and/or foreign third parties in compliance with applicable laws, or through other appropriate safeguards to provide appropriate protection for the outbound transfer of personal data.

Your personal data will primarily be processed based on our legitimate interest to thoroughly evaluate potential employees in order to ensure a successful and mutually beneficial recruitment.

If any tests are completed by you as a part of the recruitment process, the processing of personal data in this case will also be based on our legitimate interest or consent, if required. Such tests may be performed by third parties, who will provide us with the results. You may object to participation in such tests and also object to us getting the results from these tests. However, this may result in you not being eligible for the applied position.

If you would like us to store your information in order for us to be able to consider your application for any other vacancies, such further processing will be based on your consent. Such processing is entirely voluntary – it is not used for processing that is necessary or obligatory in any way.

If you are selected for the position, we can also process your personal data in order to take the needed actions prior to entering into a contract.

In certain cases, the processing may also be necessary for compliance with legal and regulatory obligations.

We may employ underage persons in e.g., summer internship positions, in which case we process personal data of underage candidates to the extent it is necessary in order to carry out the recruitment purposes specified above. The minimum age of employment depends on the local regulations in the country of employment.

Information security and ensuring appropriate protection of personal data of job applicants is vital for us. We and our service providers strive to implement organizational and technical security measures to set appropriate level of protection of information and to prevent and detect disclosure of personal data to unauthorized parties.

We maintain a variety of physical, electronic, and procedural safeguards to guard your personal data. Specifically, we use practices accepted generally in our industry and systems to protect against unauthorized access to our systems. Only our appointed personnel involved in the recruitment and third-party companies operating on behalf of us or on our assignment (referred to as “Authorized Third Parties”) are entitled to access or process your personal data.

All persons processing such data must receive individual accreditation. Different levels of access have been created based on the types of data a person needs to access or process according to his/her job description. Our systems are firewall protected. All Fiskars personnel or personnel from Authorized Third Parties who are granted access to your personal data are required to keep such data confidential.

We strive to store all recruitment data in electronic format only. Any temporary physical copies of your personal data will be stored in restricted files of the involved personnel and in secure premises. Only our specifically authorized personnel or Authorized Third Parties are entitled to access such premises or process such data.

You may access your data

You may at any time request access to, or copies of, your personal data. You are also entitled to have information regarding the nature, processing, and disclosure of your data.

If you have created a profile in our recruitment tool, you can also access the data you have submitted to us by logging into your account.

You may rectify your personal data

We hope to ensure that the personal data we process is accurate at all times and therefore we encourage you to inform us should any changes occur in your information or if you find that any of your information processed by us is incorrect, unnecessary, lacking, or outdated.

You may object the processing of your data

You may object to the processing of your personal data on legitimate grounds in situations where the data is processed based on our legitimate interest (see section 5 above). Please do note, however, that this may lead to us not being able to continue processing your job application.

You may withdraw your consent

If we process any of your personal data based on consent, you may at any time withdraw your consent to the processing of your personal data. If your consent is withdrawn, it does not prevent us from processing your personal data based on other lawful bases, such as for requirements set forth for us under applicable laws.

When you withdraw your consent concerning the processing of your personal data for other vacancies, we will no longer store or process your personal data for such purposes. However, we may still store and process your personal data for the duration of any period necessary to establish, exercise or defend any of our legal rights.

You may request the erasure or restriction of processing your data

Should you believe that your personal data is inaccurate, the processing of your data is illegal, we are not processing your data in accordance with the processing purposes communicated to you, you have withdrawn your consent, or you have objected to the processing, you may contact us to request the erasure of your data or restriction of processing of your data. Before deciding what action to take, we will investigate your request reasonably promptly. Please do note, however, that erasure of your data or restriction of processing of your data may lead to us not being able to continue processing your job application.

Right to transfer your personal data (data portability)

If we process personal data provided by you based on your consent, you may have, in certain cases, the possibility to be given and use your personal data elsewhere, for example to transfer the personal data to another controller.

You may lodge a claim with the supervisory authority

Should you believe that our processing of your personal data infringes your legal rights, you may lodge a claim with your local supervisory authority.

Please do see a list for European supervisory authorities’ websites here. For other countries, please visit the national/state specific supervisory authority’s website.

You may use your third-party beneficiary rights (China residents only)

In the event of an outbound transfer of your personal data, you also have the rights as a third-party beneficiary under the Standard Contract for the Outbound Transfer of Personal Information signed between the processor of personal data and the foreign recipient to make claims against these parties and demand performance of the clauses relating to your rights.

To use your rights:

In the event that you would like to use your above-mentioned rights, please contact us at  privacy@fiskars.com. Please note that in order to exercise your rights, you may be requested to provide additional information for identification purposes. Such additional information shall not be used for any other purpose.

We may update this Recruitment Privacy Notice from time to time and communicate the changes on this site. When we post changes to this Recruitment Privacy Notice we will modify the “Effective Date” at the top of this document to indicate when such changes have come into effect.