Back to Data & Privacy

Privacy Policy

Kyyti Group - Privacy policy for recruitment using Teamtailor

This is the Kyyti Group (“Kyyti”) Privacy Policy for job applicants. The policy is based on the European Union General Data Protection Regulation 2016/679 (“GDPR”).  Kyyti, together with TeamTailor, is the data controller as defined under the GDPR and the applicant is the data subject. We process your data in a lawful and transparent manner and are committed to data security. This policy outlines which of your personal data we process, how we process them, the purpose of the processing and the legal basis thereto, as well as your rights with regard to the processing of your personal data and how you may exercise them.


Identity of controller

Kyyti Group Oy
Business ID: 2801779-5
Address: Fredrikinkatu 47, 00100 Helsinki
Data Protection Officer: Antti Helle / antti.helle(at)


Categories of data processed

We primarily process data submitted to us by yourself. This includes your name, contact details, and information you disclose as part of your job application or orally during any interviews conducted. Information may also be collected from third parties based on your own submissions, such as references by former employers you provide us, information from online profiles such as Facebook or LinkedIn, or samples of work you have published online and indicate to us for consideration in the recruitment process. 


Purpose and legal basis of processing

We process your personal data in order to facilitate reaching an agreement with you. We use your contact information to invite you to be interviewed and to inform you of the application process. We also process your data based on our legitimate interest in vetting our candidates and selecting the best fit. Based on the personal data you submit, we can assess your suitability and compatibility with the job in question. This includes information about your education, qualifications, employment history, and professional skills such as language skills and software skills. 

We also process your personal data pursuant to legal obligations, such as the requirement to verify your right to work in Finland, and the requirement to keep records as evidence for potential legal action regarding recruitment.


Data transfers

The only recipients of your personal data are sub-contractors such as cloud service providers who are subcontracted by Kyyti to store information in a digital format. In exceptional cases, your data may be transferred to public authorities or legal advisors in the event that criminal or fraudulent behaviour is suspected, or if mandatory law or binding injunctions issued by courts of competent jurisdiction or other authorities so require. Your data are not subject to any processing other than storage and retention on behalf of Kyyti. Your data may only be further processed as part of aggregated, anonymized data sets, in such a manner that you are no longer identifiable. Kyyti has agreements in place to ensure the security of your data when processed by such subcontractors, and we assess the reputability and capability of all processors we engage for the processing of your personal data to ensure the security of your data.

Where your data are stored outside the European Union, this is limited to jurisdictions which the European Commission has deemed to have an adequate standard of data protection, or with entities that have entered into binding agreements fully compliant with legal requirements on third country transfers (such as the Privacy Shield).


Data Security

Your personal data are processed only insofar as is strictly necessary to facilitate the recruitment process. We have implemented appropriate technical and organisational measures to safeguard your data. Access to your personal data is limited to those responsible for your recruitment and system administrators, who will only process your data insofar as it relates to their functions and roles. Access to your data is restricted, and we keep a log of people who view your data.

If your application is unsuccessful, we retain your data for twelve months by default, after which we will ask you if you want your data deleted - if not, we will maintain it for future use for the same purpose. We may contact you for recruitment purposes at a later date to fill another position. If your application is successful, the parameters of the processing of your personal data are changed and you will be subject to a different Privacy Policy, which will be communicated to you.


Automated decision-making

Applicants are not subject to any automated decision-making with legal effects or similar substantial effects. 



When Users use the Service, information about the usage may be stored as cookies. Cookies are passive text files that are stored in the internet browser on the User’s device, such as computer, mobile phone or tablet, when using the Service. We use cookies to improve the User’s usage of the Service and to gather information about, for example, statistics about the usage of the Service. This is done to secure, maintain and improve the Service. The information that is collected through the cookies can in some instances be personal data and is, in such instances, regulated by our Cookie Policy.

Users can at any time disable the use of cookies by changing the local settings in their devices. Disabling of cookies can affect the experience of the Service, for example disabling some functions in the Service.



We reserve the right to make changes to this Privacy Policy. We will not make material changes without informing you. We will primarily inform you via e-mail, to the e-mail address you have submitted to the Service.


Your rights as data subject

As a data subject, you have the right to:

- Access and obtain a copy of your data on request;
- Request the correction or completion of incorrect or incomplete data;
- Request Kyyti to stop processing and remove your data, for example when the data is no longer necessary or the purpose of the processing ceases to be applicable;
- Object to the processing of your personal data insofar as the processing is based on legitimate interests;
- Submit a formal complaint with the supervisory authority - in Finland, the Data Protection Ombudsman.

You may exercise your rights by submitting a written request to our data protection officer, Antti Helle / antti.helle(at) 


Career site by Teamtailor