Recright is a video recruitment service primarily used by our customers for recruitment purposes. The Recright service may also be used, for example, to collect various interview or research responses. The service involves the processing of personal data of individuals participating in video interviews. The customer acts as the data controller, and Recright processes personal data on behalf of the controller as a data processor. The data controller is the organisation that uses the service as part of its recruitment, interview, or research process.
This privacy notice describes how personal data is typically processed in connection with the Recright service, and what rights you have regarding your personal data. You will receive detailed information about the processing of your personal data directly from the data controller.
The Recright service is provided by Recright Oy (Business ID 2360086-9, Kaisaniemenkatu 1B, 6th floor, 00100, Helsinki, Finland).
Our customer determines what personal data is collected and for what purposes it is processed. Most often, the purpose of personal data processing is to carry out recruitment. The service may also be used to collect various interview or research responses.
When using the Recright service, personal data is collected directly from the interviewee. In the context of recruitment, the following information is typically collected:
If you use the Apply with LinkedIn feature, your LinkedIn profile will also be linked to your Recright data.
There must always be a lawful basis for the processing of personal data. The data controller determines the legal basis for the processing. Possible legal bases include, for example:
Our customer may process your personal data on several different legal bases. You can obtain more information about the legal basis for processing from our customer acting as the data controller.
The data controller determines the retention period for personal data. The retention period may be affected by the controller’s statutory or contractual obligations. By default, personal data is retained in the Recright service for two years, unless our customer has defined a different retention period. If you would like more information about the retention period of your data, please contact the data controller.
Personal data may be processed in the Recright service with the help of artificial intelligence. However, the processing of personal data does not include profiling or automated decision-making as defined in the GDPR. Artificial intelligence is not used in the Recright service to make decisions related to the recruitment process; all such decisions are made by a human.
Recright processes personal data on behalf of the data controller, i.e., the customer using the service. We process personal data only for the purposes defined by the customer and are contractually committed to complying with the data protection obligations established by the customer. Personal data is always processed confidentially, and our employees have access to personal data only when necessary for the provision of the service.
The customer may also use other service providers in the processing of personal data or disclose data to third parties. If you have any questions regarding transfers or disclosures of personal data, please contact the data controller.
Generally, Recright does not transfer personal data outside the EU/EEA, unless the individuals participating in our customer’s recruitment process are located outside the EU/EEA. In individual cases, the transfer of personal data outside the EU/EEA may be possible, if necessary, for example, for the provision of technical support for the systems we use. If such a transfer occurs, the customer ensures that personal data is transferred only on the legal grounds required by the GDPR and with appropriate safeguards in place.
Data subjects have several rights that allow them to influence the processing of their personal data. The data controller is responsible for ensuring the lawful processing of your personal data and for enabling the exercise of your rights. You may exercise the rights described below by contacting the data controller.
You have the right to receive information about how your personal data is processed. The data controller is responsible for providing information to data subjects. If you have any questions regarding the processing of your personal data, please contact the data controller.
If your personal data is processed on the basis of your consent, you may withdraw your consent at any time.
You have the right to obtain confirmation as to whether personal data concerning you is being processed, as well as the right to access the personal data that has been collected about you.
You have the right to request that any inaccurate, outdated, or otherwise incomplete personal data concerning you be rectified.
You may at any time object to the processing of your personal data for direct marketing purposes.
If your personal data is processed on the basis of public interest or legitimate interests, you have the right to object to the processing of your personal data insofar as there is no compelling reason for the processing that overrides your rights, or the processing is not necessary for the establishment, exercise, or defence of a legal claim.
In certain situations, you have the right to request the restriction of the processing of your personal data.
If your data is processed on the basis of your consent or for the performance of a contract, you have the right to receive the data you have provided electronically in a commonly used format and to have your data transferred to another data controller.
If you believe that the processing of your personal data is unlawful, you have the right to lodge a complaint with the competent supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.
