Privacy Statement for CSC Work Applicants

CONTROLLER

CSC - IT Center for Science Ltd.
Keilaranta 14 (PO Box 405)
02101 ESPOO

Monday to Friday
From 8.30 a.m. to 4 p.m.
+358 9 457 2821
+358 9 457 2001 (switchboard)

NAME OF THE REGISTER

Register of work applicant

PERSON RESPONSIBLE FOR THE REGISTER

Hetamari Woods
CSC - IT Center for Science Ltd.
Keilaranta 14 (PO Box 405)
02101 ESPOO, Finland
hetamari.woods (at) csc.fi

DATA PROTECTION OFFICER

Marita Pajulahti
CSC - IT Center for Science Ltd.
Keilaranta 14 (PO Box 405)
02101 ESPOO
privacy (at) csc.fi

LAWFULNESS AND PURPOSE OF PERSONAL DATA PROCESSING

Processing of personal data is necessary for the performance of an employment contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into an employment contract.

Personal data is processed in matters and obligations relating to recruitment for CSC - IT Center for Science Ltd.

No automated decisions are made using the applicant register.

CONTENT OF THE REGISTER

Applicant's basic details and personal data

Data reported by the applicant

Data obtained from the applicant or obtained from a third party with the applicant's consent

Other recruitment-related data

DATA SOURCES

The applicants themselves. Data entered into the applicant register. Decisions made by those handling recruitment matters.

DATA RETENTION

The retention period is two years, after which the data is erased entirely. The data subjects may also request in writing that their data be erased entirely before the two year period is finished.  Such requests should be sent to the data protection officer.

REGULAR DISCLOSURES OF DATA

Data is not disclosed to entities outside of CSC – IT Center for Science Ltd.

TRANSFER OF DATA TO OUTSIDE THE EU OR EEA

Data is transferred to the service provider in the United Kingdom.

GENERAL PRINCIPLES OF DATA PROTECTION

Manual sources:

Documents are stored in locked premises that are monitored with access control. Documents can only be handled by individuals who have the right to process the applicant's data based on the work they are carrying out.

Data in information systems:

Files containing the data are accessed only by persons working on recruitment in accordance with their job description.

Access to the applicant register is restricted and users are identified with a username and password. The programs and data are located on the servers of external service providers.

CSC has concluded data protection agreements with the external service providers regarding the necessary obligations involved, depending on the data content processed by the service provider in question.

RIGHT OF INSPECTION AND RECTIFICATION OF DATA

Applicant's rights have been set out in the EU General Data Protection Regulation. Among these is the right to inspect the data concerning themselves and to demand the rectification of incorrect data. Inspection and rectification requests should be presented in writing to the contact person responsible for register-related matters.

Requests based on the right of inspection and right of access are complied with according to available resources and without undue delay. The identity of the data subject is verified before the data is disclosed. Where requested, the data can be given in written form.

The controller must correct or complete incorrect data, either independently or upon the request of the data subject.

The controller must erase unnecessary or expired data, either independently or upon the request of the data subject, except in situations where legislation or agreements justify or require the storing of the data by the controller.

The data subject has a right to review data in the register and demand for correction of their data except in situations where legislation or agreements justify or require such processing by the controller for the fulfilment of their obligations.

AMENDMENTS TO THIS PRIVACY STATEMENT

The controller retains the right to update and amend this privacy statement.