Privacy Notice: Job Applicants
This Privacy Notice explains how Leppäkoski processes the personal data of job applicants. The Data Controller is the Group company whose recruitment process is concerned.
1. Data Controller
Leppäkosken Sähkö Oy
Business ID: 3086071-4
Address: Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland
Telephone: +358 3 453 400
www.leppakoski.fi
Leppäkosken Lämpö Oy
Business ID: 0840218-6
Address: Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland
Telephone: +358 3 453 400
www.leppakoski.fi
Leppäkoski Group Oy
Business ID: 0133023-9
Address: Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland
Telephone: +358 3 453 400
www.leppakoski.fi
For data protection matters concerning the Leppäkoski Group, please contact us by email at tietosuoja@leppakoski.fi.
2. Purposes and legal bases for processing personal data
We process job applicants’ personal data in order to conduct the recruitment process and carry out related measures. The purposes of processing include assessing an applicant’s suitability, contacting applicants to arrange job interviews and selecting an employee.
The legal basis for processing personal data is either the job applicant’s consent or taking steps at the applicant’s request prior to entering into an employment contract. Where the recruitment process results in an employment relationship, personal data may also be processed for the performance of the employment contract and compliance with legal obligations.
Personal data is not used for automated decision-making or profiling.
3. Personal data processed
We process only personal data that is relevant to the recruitment process and the position applied for. The personal data processed includes:
- Identification details of the job applicant
- name
- contact details, including address, email address and telephone number
- Information concerning qualifications and work experience
- education
- work experience
- any other information provided concerning the applicant’s skills and qualifications
- Other information that may be collected during the recruitment process
- suitability assessments
- referees’ details
- security clearances, including information referred to in section 17 of the Security Clearance Act
4. Sources of personal data
Personal data is obtained primarily from the applicant at different stages of the recruitment process. With the applicant’s consent, information may also be collected from third parties, such as recruitment agencies involved in the recruitment process, providers conducting personal assessments and referees whose contact details the applicant has provided.
With the applicant’s separate consent, we may also obtain information from the Finnish Security and Intelligence Service in connection with a possible personnel security clearance.
5. Recipients of personal data
We may engage business partners in managing recruitment matters. Business partners that process personal data include, for example, providers of the recruitment system we use and the software used to verify references.
We ensure that our business partners process personal data only for the purposes described in this Privacy Notice, in accordance with our instructions and applicable legislation.
With the applicant’s consent, we may also disclose personal data to providers of suitability assessments. These service providers act as independent data controllers.
6. Transfers of personal data outside the EU or EEA
As a general rule, personal data is not transferred outside the European Union or European Economic Area.
Where personal data is transferred outside the EU or EEA, the transfer will always be carried out in accordance with applicable legislation and on the basis of an adequacy decision adopted by the European Commission or by using standard contractual clauses approved by the European Commission, together with any necessary supplementary safeguards.
7. Retention period
Applicants’ personal data will be retained for a maximum of one (1) year from the date on which the selection decision is made. In the case of an open application, the retention period is calculated from the date the application is submitted.
Where the recruitment process results in an employment relationship, personal data collected during the recruitment process may be retained for the duration of the employment relationship to the extent necessary for managing the employment relationship and complying with statutory obligations. Further information on personal data retention periods is available in the table on our website.
8. Rights of the data subject
The data subject has the right to:
- request access to their personal data and obtain a copy of the data we process
- request the rectification of inaccurate or incomplete personal data
- request the erasure of personal data in certain circumstances
- withdraw their consent to the processing of personal data
- request the restriction of processing or object to processing in certain circumstances
- receive their personal data in a commonly used, machine-readable format and request that the data be transferred to another system in certain circumstances
Requests to access or rectify personal data may be submitted using Leppäkoski’s online form or in person at Leppäkoski’s premises at Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland.
The data subject also has the right to lodge a complaint with the Data Protection Ombudsman. Further information on lodging a complaint is available on the website of the Office of the Data Protection Ombudsman at www.tietosuoja.fi.
This Privacy Notice was last updated on 30 September 2025.