Data privacy is important to us. This means that we process data about identified or identifiable individuals, which is called personal data, with due care and in accordance with applicable data protection law.
This Candidate Privacy Notice describes how we, that is Basware Corporation and each of its worldwide affiliated companies, process personal data we collect from you, candidate, in relation to your job application submitted for any Basware open vacancy. In legal terms, we are the data controller, as we determine the means and/or purposes of the processing.
We cooperate with selected service providers that process your personal data in relation to your job application and the evaluation and assessment purposes as specified below under section 7. Some of them have their own privacy notice about their processing of your personal data. We encourage them to notify their privacy notice to you but are not responsible for their privacy practices.
2. Personal data
The personal data we process about you mostly consists of the following:
Contact details: name, gender, language, nationality, date of birth, picture, physical address, phone number(s), email address, CV, experience/education related information and any other personal data provided by the candidate.
Salary and benefits related data: salary expectation.
Employment related data: possibly passport and work permit copies, social security number or other national ID number.
Candidate evaluation and assessment data: interview reports, assessment reports, collected references (with candidate permission only), security or police clearance results (from authorities) as legally allowed or required, and background screening results.
We take reasonable steps to ensure that your personal data is accurate. You are recommended to notify Basware Human Resources Team of any changes to your personal data or your other application details that we store.
We process your personal data to allow us to run, maintain and develop our business and more particularly for the following purposes:
to evaluate and assess your application for a specific open vacancy or general application,
to evaluate and assess your application for other current or future vacancies within Basware,
for legal compliance, including compliance with governmental authority requests, for internal reporting,
for fraud detection and audit,
to enable you to maintain and further improve your application, such as by providing us additional proof of expertise/skills/abilities supporting your application,
to enable us to communicate with you during our recruitment process for feedback etc.,
to enable us to communicate with you after our recruitment process has ended, but only during storage period specified by you in your application, and
to comply with any applicable legal requirements and protect our organization such as in the event of (threat to) legal proceedings.
4. Storage period
We store your personal data for as long as necessary for the related purpose and, thereafter, for no longer than is required or permitted by law or necessary for internal reporting and reconciliation purposes. The actual storage period depends on the type of personal data, the purposes and the applicable law and therefore varies per use.
We store your personal data as follows:
candidate application data: data you have submitted in our applicant tracking system is stored by system default for 24 months,
candidate evaluation data (e.g. interview reports): data related to our evaluation of your application is stored as long as necessary and legally allowed for the related purpose, and
candidate assessment data (e.g. ,online tests): data related to our assessment of your application is stored by default in our assessment system for 12 months from test completion.
5. Legitimate grounds for processing
First of all, we process personal data when that is necessary for the execution of our recruitment process, in consideration of entering into an employment contract with you. We also process personal data to pursue our legitimate interest to run our business and more particularly to manage our relationship with you, to enable you to maintain and improve your job application, to communicate with you and our related business partners and to protect our organization. Furthermore, we process personal data to comply with our legal obligations. Finally, we might process personal data upon your explicit consent for a specific purpose (e.g. to allow us to evaluate and assess your application for other current or future vacancies within Basware, as specified by you, or when we obtain references from a third party identified by you) and in such case, you may withdraw your consent at any time.
6. Rights of candidates
Right to access. You may contact us to obtain information regarding what data is stored about you, the processing purposes, the categories of recipients to whom personal data have been or will be disclosed and the envisaged storage period or criteria to determine that period.
Right to withdraw consent. Where we process personal data based on your consent, you may contact us to withdraw your consent at any time.
Right to rectification. You have the right to have inaccurate or incomplete personal data we store about you rectified or completed.
Right to object. Where we process personal data because we believe it’s our legitimate interest to run our business and manage our recruitment process, you have the right to object at any time to that processing. We shall then no longer process your personal data unless we demonstrate compelling legitimate grounds for our processing that override your interests, rights and freedoms or for legal claims.
Right to restriction of processing. You may restrict our processing of your personal data as foreseen by applicable data protection law, e.g. to allow our verification of accuracy of personal data or to prevent us from erasing personal data when personal data is no longer necessary for the purposes but still required for candidate´s legal claims.
Right to data portability. You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to independently transmit that data to a third party, in case our processing is based on your consent.
Right to erasure. You have the right to have personal data we process about you erased from our systems as foreseen by applicable data protection law, e.g. if the personal data is no longer necessary for the related purposes or if we have unlawfully processed the personal data. We may not immediately be able to erase all residual copies from our servers and backup systems after the active data have been erased, but such copies shall be erased as soon as reasonably possible.
How to use these rights. You can send us an email to the address set out below under Contact, including the following information: name, address, phone number and email address. We may request additional information necessary to confirm your identity.