Privacy Notice

Job applicants

• Full name
• Email address
• Phone number
• Current city or country
• Role or occupation you're applying for
• Years of relevant experience
• Free-text description of your skills and experience
• Preferred work location in Finland (optional)
• Availability / earliest start date (optional)
• Finnish and English language proficiency (optional)
• Other languages (optional)
• Driving licence (optional)
• Additional information (optional)
• CV in PDF, DOC or DOCX format (optional)

Company representatives

• Company name
• Contact person's name
• Work email address
• Phone number (optional)
• Role or profession needed
• Number of workers needed
• Work location
• Desired start date (optional)
• Expected duration (optional)
• Type of cooperation (optional)
• Required skills (optional)
• Additional details (optional)

Technical and security information

• IP address, when available through our hosting infrastructure
• If no IP address is available, a one-way (SHA-256) hash of the submitted email address — used only to limit the number of submissions
• Submission timestamp and the language used (Finnish/English)

Receiving and evaluating your application

Processing is necessary for steps taken at your request prior to a possible contract (Article 6(1)(b) GDPR).

Retaining an open application for future opportunities

Processing is based on our legitimate interest in matching professionals with suitable future opportunities (Article 6(1)(f) GDPR). You may object to this processing at any time.

Responding to and processing workforce requests

Processing is based on our legitimate interest in responding to business inquiries and pursuing potential cooperation (Article 6(1)(f) GDPR), since any resulting contract would be with the company, not the individual contact person.

Managing an ongoing business relationship

Once cooperation begins, processing is based on our legitimate interest in managing the relationship and, where applicable, on our legal obligations, for example accounting legislation (Article 6(1)(f) and (c) GDPR).

Preventing abuse

Processing an IP address or hashed email to limit submissions is based on our legitimate interest in protecting our forms from abuse (Article 6(1)(f) GDPR).

Applications and CVs

We retain applicant information and CVs for a maximum of 12 months after submission. During that period we may consider you for suitable current or future industrial work opportunities. We delete the application after this period unless there is another legitimate or legal reason to keep it, for example an employment relationship or another separately applicable obligation.

Workforce requests

If an inquiry does not result in cooperation, we retain it for a maximum of 12 months. If cooperation begins, relevant information may be retained for as long as necessary to manage the business relationship and comply with applicable legal obligations.

Resend

An email delivery service used to deliver form content — including any CV — to Qualis et Opus's own email inbox.

Google Workspace

Qualis et Opus's email is hosted on Google Workspace. Information submitted through the forms is received into this inbox.

Upstash

A Redis-based service used only to limit the number of submissions and prevent abuse. Upstash receives only an IP address or a hashed email address — never the rest of the form's content.

Right of access

You can ask whether we process personal data about you, and receive a copy of it.

Right to rectification

You can ask us to correct inaccurate or incomplete data.

Right to erasure

You can ask us to delete your data once there is no longer a basis for processing it.

Right to restriction

In certain situations, you can ask us to restrict the processing of your data.

Right to object

You can object to processing based on our legitimate interest, for example the retention of an open application for future opportunities.

Right to data portability

This right mainly applies to processing based on consent or contract and carried out by automated means, so it may not apply to all of our processing.

Right to withdraw consent

Most of our processing is not based on consent, so in most cases there is no consent to withdraw. Where any processing were based on your consent, you could withdraw it at any time without affecting the lawfulness of processing carried out beforehand.