Data protection and information security
Processing of your personal data at Biovian
Registrar and Data Protection Officer
Registrar: Biovian Oy
Data protection officer: Sonja Lillhonga
Postiosoite: Tykistökatu 6A (Biocity), 20520 Turku.
On what grounds and for what purpose will Biovian process your data?
We process and maintain jobseekers’ personal data to fill vacant positions.
We process your personal data to fulfill a contractual relationship or to carry out pre-contractual actions based on your consent. Your data will be processed in accordance with the provisions on the protection of privacy in working life. In this task, we maintain and process personal data about jobseekers. Your information will be processed in the following matters and activities:
- job application process (incl. the processing of applications, interviews)
- any conduct of personal assessments
- the selected applicant’s credit rating will be checked
- personal security clearance of selected persons in certain tasks
We will not process your personal data for any purposes other than those mentioned above.
What information about you will Biovian process?
In order to carry out the recruitment, Biovian has information about you belonging to the following category of personal data:
- basic information and information for identification and communication
- education information
- information provided on the job application form and its appendices (e.g. CV)
- information about the position applied for
- information about professional experience and skills
- recordings of video applications
- information about personal assessment
The more detailed content of this information is described below:
- last name, first names, contact information (street address, postcode, city/town, e-mail address, telephone number)
- information provided by the applicant on the application forms and their appendices concerning the position applied for
From whom does Biovian obtain the information required?
- From you
- From your job applications (incl. electronic job applications forms and link to external sites)
How long will Biovian store your data?
Biovian will store your data to fill vacant positions. Biovian will store information relating to your job application as follows: Your data will only be stored for the period specified as mentioned above. After the fixed period, we will erase your data from Biovian’s information systems. The fixed term is:
- your data will be stored for 2 years after you have been informed of the decision on selection
- if you send us an open application, we will store it for two years.
To whom will Biovian disclose your information?
Partners conducting any suitability assessments.
The above-mentioned parties are bound by the non-disclosure obligations concerning them. They may only disclose the information required for managing your case to Biovian in accordance with their non-disclosure regulations.
What kind of safety measures and procedures will Biovian use to protect your personal data?
Personal data may only be processed by persons authorised to do so in accordance with access rights management. Access to personal data, hardware and servers is limited to persons whose duties require it. The persons processing the data are subject to a statutory secrecy obligation, and they have additionally signed a separate non-disclosure agreement.
Subcontractors may also be used for performing services. The subcontractors are subject to the same non-disclosure regulations and commitments as Biovian’s employees.
The employees have been instructed in the processing of personal data, and they are trained and tested to understand and prevent risks to the data in the data file.
The confidentiality, integrity, availability, data availability and redundancy of processing systems and services is ensured through various systems and methods, such as data security updates.
With regard to service companies engaging in data processing, the processing of data is based on agreements and access rights granted and supervised by Biovian.
Will your data be transferred and proessed outside the EU/EEA?
Your personal data will not be transferred outside the EU or EEA.
Will automated decisions or profiling be made on the basis of your data?
How can I get additional information about the processing of my personal data?
If you would like to get additional information about the processing of personal data at Biovian, please contact the data protection officer.
Do you have right to be informed of the personal data concerning you?
You have the right to receive a confirmation of whether personal data about you is processed by Biovian. In case we process your personal data, you have the right to receive a copy of the data processed. Please send your request for information by using the contact information given.
We will provide the information to you within a month of receiving your request. The fixed period may be extended by a maximum of two months in certain situations. If the period is extended, we will inform you of it within one month of receiving your request.
What should You do to supplement or rectify your personal data?
If you observe a shortcoming, inaccuracy or error in the personal data we have provided to you, you have the right to request your data is supplemented or rectified. The same right applies to outdated information.
Do you have the right to have your personal data erased?
You have the right to request Biovian as the controller to erase, for example, outdated information about you. In this case, the data must be erased immediately when there are no longer grounds for the processing. This right applies to situations in which personal data is no longer needed for the purposes for which it was collected or if you withdraw your consent to the processing of data and the processing was based on your consent and there are no other legal grounds for the processing and it needs not be stored by law.
The right to demand personal data to be erased referred to in data protection legislation does not apply to situations in which there is a statutory obligation to store the data or the data needs to be stored to prepare, present or defend a legal claim.
Therefore, it is not possible to erase the data based on a demand during the period when it has to be stored in the above-mentioned situations.
However, we will erase your personal data without a separate request after the fixed period for its storage has expired.
Can you prohibit or restrict the processing of your personal data?
You have the right to have Biovian, as the controller, restrict the processing of data about you in certain situations. The restriction of processing refers to marking the stored data with the aim of restricting its subsequent processing.
In spite of this, your data may continue to be stored. You will be notified before the restriction is removed. You can exercise the right if you deny the accuracy of the data or lawfulness of processing, for example. Processing will be restricted while the accuracy of the data or lawfulness of processing is ensured. If the processing of data has been restricted, it may only be processed under certain conditions (e.g. with your consent or to prepare a legal claim).
The right to object to the processing of personal data referred to in data protection legislation does not apply to you. This right only concerns part of the grounds of processing (legitimate interest, performance of a task carried out in the public interest). We have not used these grounds of processing in your case.
Can you demand that your personal data be transferred to another system?
If the automatic processing of your data is based on consent or an agreement concluded with you, you have the right to receive the information about you, after which you may transfer the information to another controller. This only applies to information you have provided to Biovian yourself. We will provide the information in a commonly used electronic format.
Do you have the right to withdraw your consent at any time?
You have the right to withdraw your consent at any time if the processing of your data is based on consent. Withdrawing your consent will not have effects on the lawfulness of processing carried out on the basis of consent before it is withdrawn.
This document is based on the requirements of the EU’s General Data Protection Regulation.