Privacy statement, job applicants

1. Data controller

The Miilukangas Group
Miilukangas Oy, Miilumachine Ltd, Miilupipe Oy, Miilux Ltd, Rakennus Miilukangas Oy
Ruonankatu 1
92100 Raahe

Contact information for the register:

Tel. +358 (0)10 5856 009

2. Purpose and legal basis of data processing

For what purposes do we process your personal data?

Data subjects are those jobseekers who have applied for open positions at a Miilukangas Group company; namely Miilukangas Oy, Miilumachine Ltd, Miilupipe Oy, Miilux Ltd and Rakennus Miilukangas Oy, or who have submitted an open application for recruitment. Data needed for assessing the jobseekers’ suitability for the position applied for are processed during the recruitment stage.

What is the legal basis for us processing your data?

We process your personal data on the basis of your consent and the data controller’s legitimate interest. The data controller ensures that processing on the basis of legitimate interest is proportionate to the interests of the data subjects and meets their reasonable expectations.

3. Data processed

What personal data do we process?

Basic data of the applicants: First and last name, date of birth, address (street, town), telephone number and email address. Relevant information included in the application, such as information on the applicant’s training, previous work experience, qualifications and other competences, linguistic skills and people given as one’s reference. In addition, other data included by the applicants in their CV, if attached to the job application, are registered. Other information relevant to recruitment and suitability assessment, such as job interview data, suitability assessment and concise security clearance vetting whenever required (according to separate consent provided by the applicant).

What is the source of the data we process?

The data is submitted by the data subjects.

How long do we store your personal data?

The data collected in the register shall be kept only for as long as and to the extent that is necessary in relation to the purposes for which the personal data was collected. The retention period for open applications is 36 months from the date of submission of the application. The retention period for applications for a specific task is 24 months after the processing during the recruitment phase.

4. Transfer and disclosure of data. Regular data transfer and disclosure

Personal data shall only be processed by those authorised to do so for the purposes of their work.

Transferring data outside the EU or the EEA

Personal data in the register shall not be transferred or disclosed outside the European Union or the European Economic Area.

5. Automated decision-making and profiling

Data shall not be used for automatic decision-making or profiling.

6. Data processors

Personal data shall only be processed by those authorised to do so for the purposes of their work.

7. Protecting personal data

How do we protect your personal data?

We process personal date in a safe manner and in compliance with the law.

The Miilukangas Group, namely Miilukangas Oy, Miilumachine Ltd, Miilupipe Oy, Miilux Ltd and Rakennus Miilukangas Oy, has taken appropriate technical and organisational measures to protect personal data.

The registers are protected in locked premises that can be accessed by authorised persons only, and access to personal data in the systems is only granted to appointed people who need the data for their work. IT environments are protected by appropriate firewalls and technical measures.

The employees of the Miilukangas Group (Miilukangas Oy, Miilumachine Ltd, Miilupipe Oy, Miilux Ltd, Rakennus Miilukangas Oy) and other people are committed to secrecy and to keep any information obtained during data processing confidential.

8. Rights of the data subject

You have the right to:

Access to data

The data subject has the right to obtain confirmation from the controller as to whether or not the data subject’s personal data are processed or whether they have been processed.

If the controller processes the data subject’s personal data, the data subject has the right to obtain the information in this document, as well as a copy of the personal data that is being or has been processed.

If the data subject makes the request electronically and has not requested another form of delivery, the information shall be provided in a commonly used electronic format, provided that the information can be provided in a secure manner.

Rectification and erasure of data

The data subject has the right to request the controller to rectify or erase their personal data. In certain situations, the data subject has the right to request a restriction on the processing of his or her personal data or otherwise object to the processing. In addition, the data subject may request the transfer if they have provided it in a machine-readable format as per the General Data Protection Regulation.

Withdrawing your consent

If the legal basis for processing personal data is the consent of the data subject, the said data subject has the right to withdraw their consent at any time without prejudice to the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal thereof.

You can withdraw your consent to process your personal data in recruitment by sending an email to

How can you exercise your rights?

You can contact the data controller in all matters related to the processing of your personal data.

The request must be addressed to the above-mentioned address of the data controller. You also have the right to make a complaint to the supervisory authority if you feel that our operations do not comply with the applicable data protection legislation.

This privacy statement was updated on 18 May 2021.