Updated 07.07.2022
Company of contact in privacy matters:
Johto Advisors Oy
VAT: FI-3180478-1
Address: Vesijärvenkatu 20 B 11, 15140 Lahti
Contact person: Jaana Pollari
E-mail: jaana.pollari@johtoadvisors.fi
Tel.: +358 400 849 609
Registers, legal matter, and the purpose of handling the personal information
Customer register: We collect and process information from customers, potential customers, and partners, which we use for maintaining and developing customer relationships, customer communication, marketing and sales.
Project register: In addition, we collect and process the personal data of the individuals participating in the assignments, and the contact persons of the commissioning company, for the implementation of direct search, evaluation and development services for the board and management. The purpose of the collection is to fulfill the orders of the customer company and manage the customer relationship.
Any of the personal information collected is not used for automatic decision-making or profiling.
Data content of the registers
Customer register: Data, that are collected and stored in the register, may contain: person’s name, position, company, contact information (e-mail, phone number), company website address, IP address of the network connection, information about the subscription to the newsletter.
IP addresses of website visitors and cookies necessary for the functions of the service are processed on the basis of a legitimate interest, e.g. to take care of data security, and for the collection of statistical data of website visitors, in which case they can be considered as personal data. If necessary, consent is requested separately for third-party cookies.
Project register: The following information, necessary for the purpose of use of the register, can be stored in the register:
Basic information of the job seeker: name, contact information, gender, date of birth;
The job seeker’s cv and application as well as education and work history information;
Information regarding the job seeker’s job search: e.g. wishes for the applied job, desired salary, information related to starting work;
Information related to the job applicant’s interviews, meetings and possible suitability assessments;
Contact information of the commissioning company (company, person, position, e-mail, phone) and information and communication related to the customer relationship.
Where do we collect personal data from?
Customer register: Information related to the customer is usually collected by the following means: Directly from the customer by online, newsletter subscription, e-mail, phone, or through contracts, customers meetings and other situations where the customer discloses their information. Personal data may also be originated from public sources such as websites, directory services and other companies.
Project register: In the question of project assignments, the information is mainly collected from the person itself. In the direct search project, data can also be collected from registers maintained by third parties such as authorities based on a legitimate interest.
Information is transferred outside the company only when managing the project and when technical solution requires it. We use services of service provides, e.g. MailChimp for maintaining newsletter mailing lists, and Google Analytics for the customer register. In accordance with data protection agreements, each service provider can only process personal data to the extent that is necessary for the provision of the service in question.
Regarding the project register, personal data is processed by the evaluation system providers Cubiks and Paradigm Personality. Our service providers operating in the United States comply with the Privacy Shield principle. Apart from the United States, data is not transferred outside the EU or EEA.
Regarding projects, information is released to the commissioning company based on the permission given by the person itself in direct search projects. In the assessment services of the board and management, information is only disclosed to the commissioning company based on consent.
How the personal data is protected?
We apply technical and administrative protection to take care of the personal data. Only those parties who have the right to process personal data for their work performance are authorized to use the systems containing data. The data is protected by firewalls, passwords and access rights on the servers. Each employee has their own username and password for the systems, and a non-disclosure agreement. Manual databases are in locked rooms and hard copies are disposed securely.
Your rights to inspect the data and the right to demand correction
As a data subject, you are entitled to obtain information of your personal data processed by Johto Advisors. You have also a right to inspect the personal data concerning yourself, which is stored in the register, and a right to require rectification or erasure of your data. In case the data subject wants to check or demand correction to the information stored about them, the request must be sent in written form to the data controller mentioned above. The controller responds customer within the time stipulated in the EU data protection regulation (generally, within a month).