Privacy statement

Updated on October 6, 2023

1. The keeper of the register

Taito Research Oy
Erkkilänkatu 11a, PMK-talo, 33100 Tampere

2. Register contact person

Pia Kantola
pia.kantola@taitoresearch.com
+358 40 152 4760

3. Register name

Taito Research Oy candidate register

4. Purpose of personal data processing

The personal data in the database is used in executive search orders received by Taito Research Oy.

The purpose of processing personal data is to implement contracts and assignments between Taito Research and customers who use its services, and to manage executive search services.

The collection of personal data is mainly based on a legitimate interest. The business of executive search companies is based on searching for suitable candidates in the market and presenting them to clients, i.e. entities that have an open position to fill and a desire to offer employment to individuals. Due to their business, executive search companies consider that they have a legitimate interest in the processing of personal data, which is based on a meaningful and appropriate relationship between candidates and executive search companies.

As part of conducting business, Taito Research is in contact with some of the candidates. Such contacted candidates will be asked for their consent to save more information about them in the register. This additional information will only be disclosed to the executive search commissioners with the candidate’s consent.

5. Data content of the register

name, date of birth, telephone number, e-mail address, postal address

  • nationality

  • information related to work and education history

  • information related to professional interests and employment goals and wishes (task area, industry, target level and desired salary)

  • language skills (candidate’s own assessment)

  • candidate’s description of themselves

  • candidate’s cv and application or cover text

  • the consultant’s assessment of suitability for the open position

  • recommenders

  • information related to the progress of the assignment, such as log information about communication and meetings

Information is stored as long as it is necessary for the purposes of use of the register.

Taito Research can also collect information about the user’s terminal device on its websites using cookies and other similar technologies. 

6. Regular sources of information

The register contains information collected from publicly available or obtainable sources, necessary for the implementation of a specific executive search order. The register of contacted candidates also contains information provided by the individuals themselves.

7. Regular disclosures of information

Information collected from the register’s public sources is handed over to executive search clients, i.e. entities that have an open job position to fill and a desire to offer employment to individuals. Additional information stored with the candidate’s own consent will only be released to clients with the candidate’s consent. As the handover happens, the client also becomes the data controller for this information.

The controller may disclose information to third parties used as subcontractors. The processing of personal data takes place in the European Economic Area. All service providers are committed to complying with the requirements of the EU data protection regulation.

Personal information is not disclosed for direct marketing purposes.

Information will not be disclosed to other third parties, unless it is a matter of information disclosure in accordance with the requirements of legislation or official regulations.

8. User tracking

We use Leadoo user tracking to track how our users move around our website. We combine this data with the user’s information, which is collected through e.g. chat interactions. Leadoo uses etag tracking, which differs from cookie-based tracking, combining data from several user sessions together. Check Leadoo Marketing Technologies Oy’s Privacy Policy (https://leadoo.com/privacy-policy/) to know more about what is tracked in the system. In terms of GDPR, Taito Research acts as a controller and Leadoo as a data processor. If you don’t want to be tracked, you can clear your browser’s cache. Learn more about how Leadoo works: https://leadoo.com/privacy-policy-processor/

9. Register protection principles

Taito Research pays special attention to the protection of people’s privacy and personal data and follows good personal data processing practices.

Taito Research keeps and processes personal data as confidential. Information is not disclosed to anyone other than those who need it in their work, who are bound by the obligation of confidentiality and non-disclosure. Each user has their own username and password for the system.

The information is collected in databases that are protected by firewalls, passwords and other technical means. The databases and their backups are located in locked rooms and only certain pre-designated persons can access the data. Registry data is securely backed up and can be restored if necessary.

10. Right of inspection and erasure

In accordance with the legislation, the registered person has the right to check whether personal data concerning him can be found in the personal register and what information concerning him is stored in the register. In addition, the data subject has the right to request the deletion of information about him. Requests regarding personal data must be made in writing and sent signed to the controller at the address mentioned in section 1.

11. Right of correction

The registered person also has the right to demand the correction of incorrect information in the register or the completion of incomplete information. In the data correction request, the error to be corrected must be identified and the corrected data must be indicated. The correction request must be made in writing and sent signed to the controller at the address mentioned in section 1.

12. The right to file a complaint with the authorities

Taito Research strives to resolve possible disagreements regarding the processing of personal data directly with the data subject. However, the registered person has the right to file a complaint with the Office of the Data Protection Ombudsman.

13. Changes to the privacy statement

We are constantly improving and developing our services and websites, so changes may be made to the privacy statements from time to time. We will update the new statement on our website and mark the date of the update on it.