PRIVACY POLICY
​​​
1 Minjon Oy and the processing of personal data​​
​
The purpose of data protection is to safeguard individuals’ private life and privacy when processing personal data. Minjon Oy (“Minjon”) complies with all applicable legislation related to the processing of personal data. We are committed to protecting your privacy and handling personal data in accordance with your expectations. Protecting your trust and acting responsibly are of utmost importance to us.
All information you provide to us is treated as confidential. It is important to us that all job applicants, employees, customers and partners receive transparent information about how we process their personal data. This Privacy Policy (the “Policy”) describes how we collect and process your personal data, to whom we disclose it, how long we retain it, and what rights you have regarding your personal data. Personal data refers to any information that can be directly or indirectly linked to you.
We process personal data in various situations and in relation to different stakeholder groups. Therefore, we have prepared additional notices that supplement this Policy and describe in more detail how we process your personal data in specific situations. In case of discrepancies, the additional notices take precedence.
​
​
​
2 Collection of personal data​
We collect personal data in several ways. You may provide your data directly when contacting us, or it may be collected automatically when using our services, for example through log data.
We may also receive personal data from third parties or public sources. Additionally, we may combine and process data already in our possession, for example when creating a profile for recruitment purposes.
You are not obligated to provide your personal data. However, refusal to do so may in some cases prevent us from providing our services.​
​
3 Categories of personal data​
​
We process different types of personal data depending on the situation. The scope and type of data are always assessed on a case-by-case basis and limited to what is necessary.
We may also process personal data for statistical purposes. In such cases, the data is anonymised so that you cannot be identified.
As a rule, we do not process special categories of personal data (such as health data). However, in certain situations, such data may be processed in accordance with applicable legislation. In such cases, we are obligated to inform you about the processing of these special categories of personal data.
​
​
4 General principles of processing​
​
We adhere to the following general principles for the processing of personal data:
​
4.1 Lawfulness, fairness and transparency
​
All processing of personal data carried out by Minjon is always based on a legal basis, which ensures the lawfulness of the processing. The collection and processing of your personal data are always based on a clearly defined legal basis established in advance, and are carried out for a specific, predetermined and limited purpose that has been communicated to you.
4.2 Purpose limitation, data minimisation and storage limitation
​
We collect and process only such personal data that is necessary for our business operations and for providing efficient customer service.
We collect and process only personal data that is necessary for a specific purpose. The type and scope of personal data collected are always assessed on a case-by-case basis and limited to what is necessary for the intended purpose of processing. Your personal data is retained in an identifiable form only for as long as necessary for the purposes of processing. Retention periods are primarily based on applicable legislation.
​
4.3 Accuracy
​
We ensure that your personal data is accurate and kept up to date. Inaccurate or incorrect data will be deleted or rectified using reasonable measures.
​
4.4 Integrity and confidentiality
​
Your personal data is always processed in a confidential manner. This is ensured through appropriate organisational and technical measures that prevent unauthorised or unlawful processing. These measures also ensure that personal data is not accidentally lost, altered or destroyed.
​
​
5 Purpose of processing​
​
We process personal data to provide staffing and recruitment services. More detailed purposes are described in the supplementary notices.
​
​
6 Legal bases for the processing of personal data​
​
The processing of personal data must be based on one or more legal bases provided by law. Below are the legal bases on which we at Minjon process your personal data.
6.1 Contract
​
If you are in a contractual relationship with us, the processing of your personal data is based on that contractual relationship. Your data is processed in order to perform the contract or to take steps prior to entering into a contract.
6.2 Consent
​
Consent is a primary legal basis for the processing of personal data at Minjon. If you give your consent to the processing of your data, your personal data may be collected and processed, but always only for a specific purpose that has been defined and communicated in advance.
​
6.3 Legal obligation
​
We process the personal data of our employees in order to fulfil our legal obligations. An example of such a situation is the retention of data for 10 years after the end of an employment relationship in order to comply with obligations arising from employment legislation.
6.4 Legitimate interest
​
Your personal data may also be processed on the basis of our legitimate interests or those of a third party, provided that your fundamental rights do not override such interests. For example, we may combine personal data collected from different sources. We also process personal data in order to develop our operations and services. In such cases, the processing of personal data is based on our legitimate interest in ensuring the efficiency of our business and the quality of our services, so that we can obtain the necessary information for the effective management of our business.
​
​
7 Nature of collected data​​
​
Personal data collected by us or by third parties may include, for example, cookies, first name, last name and email address. More detailed information can be found in our supplementary privacy notices.
​
​
8 Disclosure of personal data​​​
​
We may disclose your personal data to third parties to the extent permitted by law, for example:
-
when our service providers process personal data on our behalf and in accordance with our instructions. In such cases, we remain responsible for the processing of your personal data and determine how it is processed;
-
if we are involved in a merger, corporate restructuring, or sale of business;
-
to comply with requests from authorities in connection with legal proceedings;
-
where you have given your consent; or
-
where there is a legitimate interest in disclosing your personal data, for example to a partner involved in organising an event.
Our partners may use data collected in connection with the provision of services for their own purposes, for example to develop their services. We seek to ensure that such further processing is not incompatible with the original purpose of collection. However, our partners are responsible for the lawfulness of such further processing.
​
​​​
9 Transfers of personal data outside the EU/EEA
​
Some of our service providers operate outside the European Union (EU) or the European Economic Area (EEA), or they may have access to personal data from outside these areas. When such service providers process your personal data, the data may be transferred outside the EU or EEA. In such cases, we ensure that appropriate safeguards are in place and implement additional measures to protect personal data to the extent required by applicable legislation.
Personal data is transferred only to countries that have been deemed by the European Commission to provide an adequate level of data protection.
Where our service provider is located in a country that does not provide an adequate level of data protection, we apply the European Commission’s approved standard contractual clauses and implement appropriate technical, organisational and contractual safeguards to ensure that your personal data is protected at a level equivalent to that within the EEA.
Further information about the transfer mechanisms is available upon request.
​
​
10 Personal data processors at Minjon
​
Access to your personal data is limited to those of our employees and partners who require it for the performance of their duties. Our personnel are trained in the importance of data protection and the proper handling of personal data. Through all our operations, we strive to ensure that your trust is maintained throughout the entire lifecycle of your personal data.
​
​
11 Retention of personal data​
​
We retain your personal data only for as long as necessary to fulfil the purposes of processing and to comply with legal obligations.
Different categories of personal data are subject to different retention periods.
When we process personal data on the basis of a contract, the data is retained for as long as necessary to fulfil the contractual relationship. After the customer relationship has ended, personal data may be retained to the extent necessary to safeguard our legitimate interests, for example to respond to legal claims or to enforce your direct marketing opt-out.
If we process your personal data on the basis of legitimate interest, we retain the data for as long as there are valid grounds for such processing. If you object to the processing, your data will be deleted once the grounds for processing have been verified.
The retention period for personal data processed on the basis of your consent is determined by the purpose of the processing.
Personal data collected to fulfil legal obligations is retained for the period required by applicable law.
​
​
12 Your rights​
​
You may exercise your rights listed below by contacting us at privacy@minjon.fi. If you believe that our processing of your personal data is not lawful, you have the right to lodge a complaint with the supervisory authority.
12.1 Right of access
​
Upon your request, we will confirm whether we process your personal data and, if so, provide you with access to that data.
12.2 Right to rectification
We will correct inaccurate personal data upon your request and complete incomplete data where necessary.
​
12.3 Right to erasure
​
We will delete your personal data upon your request if there is no valid reason to continue processing it, for example if you withdraw your consent.
12.4 Right to data portability
​
We will provide personal data processed on the basis of your consent or in connection with the performance of a contract to you or to a third party in a commonly used, machine-readable format.
12.5 Right to restriction of processing
​
In certain situations, you have the right to request that we restrict the processing of your personal data, for example while verifying the accuracy of the data.
12.6 Right to withdraw consent
​
You have the right to withdraw your consent to the processing of your personal data at any time.
​
13 Data security
​​​
We implement appropriate physical, technical and administrative measures to protect personal data against loss, destruction, misuse, and unauthorised access or disclosure.
However, even appropriate measures are not always sufficient to prevent all data security breaches. In the event of a personal data breach, we will notify you in accordance with applicable laws.
14 Data protection contact details
At Minjon, we are happy to answer any questions relating to the privacy of our job applicants, employees, customers or partners. Please contact us at:
Minjon Oy
Yrjönkatu 29 A, 00100 Helsinki
15 Changes​​
​
We update this Policy as necessary to reflect changes in the processing of personal data. This Policy was last updated on 27 November 2024.
16 Minjon’s supplementary privacy notices​​
​
More detailed information on the legal bases and purposes of the collection and processing of personal data can be found in the supplementary privacy notices.