PRIVACY POLICY
1 Minjon Oy and the processing of personal data
The purpose of data protection is to safeguard the protection of individuals’ private life and privacy when personal data is processed. Minjon Oy (Minjon) complies in all its operations with applicable legislation governing the processing of personal data. We are committed to protecting your privacy and to processing personal data in a manner that meets your expectations. Protecting your trust and acting responsibly are of primary importance in our operations.
All information you provide to us will remain confidential. It is important to us that all our job applicants, employees, customers and partners are provided with transparent information on how we use their personal data. In this policy (the “Policy”), we describe how your personal data is collected and processed, to whom your data may be disclosed, how long it is retained, and what your rights are in relation to your personal data. “Personal data” means any information that can be linked to you directly or indirectly.
We process personal data in various situations and in relation to different stakeholder groups. For this reason, we have prepared supplementary notices that complement this Policy and describe in more detail how we process your personal data in specific situations. These supplementary notices clarify this Notice and shall prevail in the event of any inconsistencies.
The supplementary notices are available below:
2 Collection of personal data
We collect your personal data in several different ways. You may provide your data to us directly when you contact us, or your data may be collected automatically when you use our services, for example through service usage logs. Personal data concerning you may also be disclosed to us by third parties, or we may obtain such data from publicly available sources. We may also compile information about you using personal data that we already hold, as further specified in the supplementary notices (see section 1 above).
You are not obliged to provide your personal data to us. However, if you choose not to do so, this may in certain situations prevent us from providing our services to you.
3 Categories of personal data
Depending on the situation, we process different types of personal data. The type of personal data and the scope of collection are always assessed on a case-by-case basis and limited to what is necessary for the purpose of processing.
We may also process your personal data for statistical purposes. In such cases, the data is aggregated in a way that prevents you from being identified, and the statistical data cannot be linked to you.
As a rule, we do not process special categories of personal data (such as health data). However, in certain cases such data may be processed in accordance with applicable legislation. In such situations, we are obliged to inform you about the processing of special categories of personal data.
4 General principles of processing
We comply with the following general principles in the processing of personal data:
4.1 Lawfulness, fairness and transparency
All processing of personal data carried out by Minjon is always based on a valid legal basis, which ensures the lawfulness of the processing. The collection and processing of your personal data are always based on a clearly defined legal basis determined in advance, and are carried out for a specific, explicit and legitimate purpose that has been communicated in advance.
4.2 Purpose limitation, data minimisation and storage limitation
We collect and process only such personal data that is necessary for our business operations and for providing efficient customer service.
We only collect and process personal data that is necessary for a specific purpose. The type of personal data and the scope of collection are always assessed on a case-by-case basis and limited to what is necessary for the purpose of processing. Your personal data is retained in identifiable form only for as long as necessary for the purposes of processing. Retention periods are primarily based on applicable legislation.
4.3 Accuracy
We ensure that your personal data is accurate and kept up to date. Inaccurate or incorrect data will be deleted or rectified using reasonable measures.
4.4 Integrity and confidentiality
Your personal data is always processed confidentially. This is ensured through appropriate organisational and technical measures designed to prevent unauthorised or unlawful processing. These measures also ensure that personal data is not accidentally lost, altered or destroyed.
5 Purpose of processing
We process personal data in order to provide our clients with recruitment and executive search services. In addition, we maintain an online store where CV and job application templates can be purchased. The purpose of processing and the applicable legal basis are described in more detail in each supplementary notice.
6 Legal bases for the processing of personal data
The processing of personal data must be based on one or more legal bases provided by law. Below are the legal bases on which we at Minjon process your personal data.
6.1 Contract
If you have a contractual relationship with us, the processing of your personal data is based on that relationship. Your data is processed for the performance of the contract or in order to take steps prior to entering into a contract.
6.2 Consent
Consent is a key legal basis for the processing of personal data at Minjon. Where you provide your consent to the processing of your data, your personal data may be collected and processed, always solely for a specific purpose that has been communicated in advance.
6.3 Legal obligation
We process the personal data of our employees in order to fulfil our legal obligations. An example of such a situation is the retention of data for 10 years after the termination of employment in order to comply with obligations arising from employment legislation.
6.4 Legitimate interest
Your personal data may also be processed on the basis of our legitimate interests or those of a third party, provided that your fundamental rights do not override such interests. For example, we may combine personal data collected from different sources. We also process personal data to develop our operations and services. In such cases, processing is based on our legitimate interest in ensuring the efficiency of our business operations and the quality of our services, in order to obtain the information necessary for effective business management.
7 Nature of collected data
The data collected by us or by third parties may include, among other things, cookies, first name, last name and email address. More detailed information can be found in our supplementary notices.
8 Disclosure of personal data
We may disclose your personal data to third parties within the limits permitted by law, for example:
-
when our service providers process personal data on our behalf and in accordance with our instructions. In such cases, we remain responsible for the processing of your personal data and determine how it is processed;
-
if we are involved in a merger, corporate arrangement or sale of business;
-
when fulfilling a request from an authority in connection with legal proceedings;
-
if you have given your consent (for example, when we present you to our client in a recruitment or executive search process); or
-
where there is a legitimate interest in disclosing your personal data, such as in cooperation with a partner in organising an event.
Our partners may use data collected in connection with the provision of services for their own purposes, for example to develop their services. We seek to ensure that such further processing is not incompatible with the original purpose. However, our partners are responsible for the lawfulness of such further processing.
9 Transfers of personal data outside the EU/EEA
Some of our service providers may also operate outside the European Union (EU) or the European Economic Area (EEA) or may have access to personal data from outside these areas. Where such service providers process your personal data, the data may be transferred outside the EU or EEA.
In such cases, we ensure appropriate safeguards and implement additional measures to protect personal data in accordance with applicable legislation.
If our service provider is located in a country where the level of data protection is not considered adequate, we apply standard contractual clauses approved by the European Commission and implement appropriate technical, organisational and contractual safeguards to ensure that your personal data is protected at a level equivalent to that within the EEA.
Further information about transfer mechanisms is available upon request.
10 Personal data processors at Minjon
Your data is accessible only to those of our employees and partners whose duties require such access. Our personnel are trained in the importance of data protection and the proper handling of personal data. Through all our activities, we aim to ensure your trust throughout the entire lifecycle of your data.
11 Retention of personal data
We retain personal data only for as long as necessary to fulfil the purposes of processing and to comply with applicable legislation.
Retention periods vary depending on the type of personal data and the legal basis for processing:
-
Processing based on a contract: data is retained for the duration of the contractual relationship and for as long as necessary to fulfil the contract;
-
After the end of a customer relationship: we may retain data to a limited extent based on our legitimate interest, for example for responding to legal claims or maintaining direct marketing opt-outs;
-
Processing based on legitimate interest: data is retained as long as there is a justified reason for processing. If you object to processing, we will assess the situation and delete the data if there is no longer a valid basis;
-
Processing based on consent: retention is determined by the purpose of processing;
-
Legal obligations: data is retained for the period required by law.
12 Your rights
You may exercise your rights listed below by contacting us at privacy@minjon.fi. If you believe that our processing of your personal data is not lawful, you have the right to lodge a complaint with the supervisory authority.
12.1 Right of access
Upon your request, we will confirm whether we process your personal data and, if so, provide you with access to that data.
12.2 Right to rectification
We will correct inaccurate personal data upon your request and complete incomplete data where necessary.
12.3 Right to erasure
We will delete your personal data upon your request if there is no valid reason to continue processing it, for example if you withdraw your consent.
12.4 Right to data portability
We will provide personal data processed on the basis of your consent or in connection with the performance of a contract to you or to a third party in a commonly used, machine-readable format.
12.5 Right to restriction of processing
In certain situations, you have the right to request that we restrict the processing of your personal data, for example while verifying the accuracy of the data.
12.6 Right to withdraw consent
You have the right to withdraw your consent to the processing of your personal data at any time.
13 Data security
We implement appropriate physical, technical and administrative measures to protect personal data against loss, destruction, misuse, and unauthorised access or disclosure.
However, even appropriate measures are not always sufficient to prevent all data security breaches. In the event of a personal data breach, we will notify you in accordance with applicable laws.
14 Data protection contact details
At Minjon, we are happy to answer any questions relating to the privacy of our job applicants, employees, customers or partners. Please contact us at:
Minjon Oy
Yrjönkatu 29 A, 00100 Helsinki
15 Changes
We update this Policy as necessary to reflect changes in the processing of personal data. This Policy was last updated on 21 April 2026.
16 Minjon’s supplementary privacy notices
More detailed information on the legal bases and purposes of the collection and processing of personal data can be found in the supplementary privacy notices.