Oomi Oy’s Job Applicant Register
This privacy statement provides data subjects, i.e. persons applying for employment with the controller as well as the supervisory authority with the information required by data protection legislation on how and why Oomi Oy processes the personal data of its job applicants.
1 Controller
Oomi Oy Â
Business ID:Â 3101315-4Â
Postal address:Â Teknobulevardi 7, 01530 Vantaa, Finland
Website: oomi.fi Â
2 Persons responsible for the register and their contact information
Person responsible for the register
Mervi Rastinniemi
Data protection officer
Olli Turpeinen
Enquiries about data protection
tietosuoja@oomi.fi
3 Name of register
Oomi Oy’s job applicant register (hereinafter “Job Applicant Register”)
4 Purpose and legal basis of the processing of personal data
Oomi Oy uses the data to process job applications. Applications are processed using an applicant profile, which compiles the information provided in the job application. Furthermore, Oomi Oy may, in order to fulfil its legal obligations and implement employment contracts, process the personal data of its employees.
The legal basis for the processing of personal data is consent.
5 Data content of the register
In the context of the Job Applicant Register, data related to data subjects may be processed:
- Name
- Gender
- Contact details: email address, telephone number, street address, postal code, city, country
- Answers to the screening questions on the application form
- Any attachments you have sent, e.g. your CV, LinkedIn profile
- Your answers to our video interview questions / your video greetingÂ
The categories of personal data to be processed are Oomi Oy’s internal and external job applicants.
6 Regular sources of data
Information relating to data subjects is normally obtained from each data subject when they apply for a job at Oomi Oy.
Personal data may also be collected and updated from the authorities and other third parties within the limits permitted by the applicable legislation for the purposes described in this privacy statement.
7 Â Regular disclosures of data and data transfer outside the EU or EEA
Personal data will not be disclosed to third parties.
Third parties that provide Oomi Oy with services related to HR may also have access to the data. Oomi Oy ensures, through contracts and agreements, that these parties do not process the personal data except in accordance with Oomi Oy’s instructions and this privacy statement.
Oomi Oy does not transfer data outside the EU/EEA.
8 Â Data retention period
All personal data will be deleted from Oomi Oy’s Job Applicant Register six months after receipt of an open application or an application for an internship or thesis project. After this, the data is deleted, unless we are obligated to retain the data in accordance with legislation or the rights and obligations based on the contract between the parties.
9 Â Principles of register protection
Personal data is protected by means that are generally acceptable and reasonable in the sector, such as with access passes, training, firewalls and passwords.
Only authorised employees of the data controller or companies acting on the data controller’s instructions or on its behalf have access to the personal data processed in the Job Applicant Register, in accordance with the access rights granted by Oomi Oy. Oomi Oy takes into account the applicable legislation, official regulations and instructions issued by industry associations regarding ensuring confidential processing of personal data. Â
10 Â Rights of data subjects
Right of access
Data subjects have the right to see what data is recorded about them in the Job Applicant Register. This right of access may be refused on grounds provided by law. Â
You can submit an online data access request by email to tietosuoja@oomi.fi.
Oomi Oy will charge a reasonable amount of compensation for providing the data if the data subject exercises their right of access more often than once a year.
Right to object to the processing of personal data
On account of their special personal situation, data subjects have the right to object to being profiled and to other processing measures carried out by the controller on the data subject’s personal data in so far as the data processing is based on the controller’s legitimate interest. When making the request, the data subject must identify the special situation based on which they are objecting to the processing. The controller may refuse to fulfil the request concerning the objection on grounds provided by law.
You can request to opt out of personal data processing by email to tietosuoja@oomi.fi.
Right to request rectification or deletion of data or restriction of processing
Data subjects have the right to request that Oomi Oy rectify, erase or complete any personal data in the register that is incorrect, unnecessary, insufficient or outdated for the purpose of processing.
Data subjects also have the right to request that Oomi Oy restrict the processing of their personal data in situations such as when the data subject is waiting for the controller to reply to their request regarding the rectification or erasure of their data.
Data subjects are personally responsible for the correctness of the data they provide. Data subjects must notify the controller of any changes to the data they have provided.
You can submit a request concerning rectification or erasure of data or restriction of processing by email to tietosuoja@oomi.fi.
Right to withdraw consent
If the personal data processing is based on the data subject’s consent, the data subject has the right to withdraw their consent by notifying Oomi Oy of this.
You can submit a request to withdraw your consent by email to tietosuoja@oomi.fi.
Right to transfer data from one system to another
In so far as the data subject has personally provided the register with data that is processed in order to fulfil the contract between the data subject and Oomi Oy or based on consent given by the data subject, the data subject generally has the right to receive the data in machine-readable format or transfer it to another controller.
You can submit a file transfer request by email to tietosuoja@oomi.fi.
11 Â Filing a complaint with the data protection supervisory authority
If the data subject deems that the processing of personal data is in breach of the applicable legislation or that the data subject’s statutory rights have been infringed upon, they may file a complaint about the matter with the relevant data protection supervisory authority. In Finland, the lawfulness of the processing of personal data is monitored by the Data Protection Ombudsman, whose contact information can be found at the following address: www.tietosuoja.fi/en/home.
12 Â Changes to the privacy statement
We retain the right to change and update this privacy statement. The up-to-date privacy statements are available on our website at oomi.fi/privacy-statements.
23 July 2026