This notice explains how Rovio Entertainment Limited and its subsidiaries identified below (referred to as “we” in this document) collect, store, use, or otherwise process the personal data of job candidates (referred to as “you” in this document) in their recruitment activities, and what rights you have if we are processing your personal data.
In this notice, the phrase “your data” is used when referring to personal data that relates to you as an identified or identifiable person.
It is important that you read this notice before applying for a position at Rovio so that you are aware of how and why we may use data relating to you. Please note, however, that this notice is not a part of any employment or other contract we may offer to you.
By “data controller”, we mean an entity that determines how and why personal data is processed. With regard to the activities described in this notice, the Rovio group company at which you are considered for a position acts as the data controller.
This means that the data controller is one of the following companies:
Our recruitment team serves as your primary point of contact in matters related to this notice. You can reach them by email at recruitment@rovio.com.
We have also designated a Data Protection Officer (“DPO”) to oversee matters related to data protection at Rovio. If you have any questions or concerns about the way we use your data, you may contact our DPO at any time by email to dpo@rovio.com.
We may process your data for the following purposes:
In addition, we may process your data for additional purposes which are compatible with any of the purposes listed above.
We do not use your data to make automated decisions which significantly affect you. By an “automated decision”, we mean a decision made by an information system without any human intervention.
If you are introduced to Rovio through a placement firm, recruiter, or staffing company, they will obtain your consent to share your information with us, where applicable.
Generally, we process your data to the extent necessary to carry out a recruitment process or to communicate with you regarding our open positions. The below table provides more details on what types of data relating to you we may process, for which purposes we process it, and from which sources we may collect it from.
Where permitted by applicable laws and regulations, we may also collect information from a third party whom we have perform a background check on you. The purpose of a background check is to evaluate your qualifications and suitability for an open position. A background check will only be performed with your express consent, and its scope and manner will be determined by applicable laws and regulations. However, we do not expect to perform background checks routinely.
We neither request you to provide nor expect to collect or otherwise process any special categories of personal data relating to you, unless permitted or required by applicable law or regulation (for example, for equal opportunities monitoring purposes). By “special categories of data,” we mean genetic, biometric, or health information or information revealing racial or ethnic origin, sex life or sexual orientation, political opinions, religious or philosophical beliefs, or trade union membership.
Similarly, we do not anticipate a need to process any information about your criminal record. Should we exceptionally need to review your criminal record, we will do so with your express consent and use the information as permitted by applicable laws and regulations.
During the recruitment process, we will only collect information about you from third parties with your permission. You are not required to give us your permission for any such collection.
Providing data to us is not mandatory. However, we may be unable to complete a recruitment process or to choose you for a position if we have inadequate information about you. If you do decide to provide data to us, please make sure that the data is complete and accurate.
We may share your data with third parties to achieve the purposes outlined in this document. This includes the following types of recipients:
In connection with the activities described in this document, your data may be transferred to or processed in countries outside of the European Union (“EU”) and the European Economic Area (“EEA”). In particular, this takes place when you are a candidate for a position at a Rovio company based outside of the EU and the EEA. These countries may have data protection laws that differ from the laws of your country. In these cases, we will ensure that appropriate safeguards are in place to protect your data. These safeguards may include compliance with the European Commission’s standard contractual clauses for transfers of personal data. Upon request, we can provide you a copy of the European Commission’s standard contractual clauses and further details on the applicable safeguards.
We will keep your data for as long as necessary to achieve the purpose(s) for which it was collected, including compliance with any legal, accounting, or reporting requirements.
Generally, where you were considered but not selected for an open position, we will retain your applicant data for two years from the date you were informed of the decision. If you have indicated that you wish to hear about or be considered for other open positions, we may keep your data as long as you inform us otherwise. If you are selected for a position, we will transfer some or all of your data to our employee records and retain it according to the policies we apply to those records.
In some cases, the retention times we apply may deviate from the guidelines described above.
After the end of the applicable retention period, we may keep and continue to use data that is not identifiable to you (including aggregate data), for example for statistical purposes.
We have adopted measures to provide your data a level of security appropriate for the degree of risk involved with the processing activities outlined in this notice. These measures are designed to protect your data against accidental or unlawful destruction, loss, or alteration as well as unauthorized disclosure or access. The specific measures we employ vary from one service or system to another, but typically include, for example, encryption in transit and at rest, controls to limit access to services or systems that contain personal data, contractual safeguards with third parties who process your data, regular training of personnel involved in recruitment matters, and maintaining procedures to handle any suspected security incidents.
If we are processing your data, you have the right to:
Where our processing of your data is based on your consent, you also have the right to withdraw your consent at any time. Please be aware that we may continue processing your data despite your withdrawal of consent, if we have a lawful basis for doing so.
To exercise any of these rights, please contact our recruitment team at recruitment@rovio.com. To fulfill your request, we need to confirm your identity to verify your right to make the request, which may involve requesting additional information from you. While we will usually not do so, we reserve the right to charge an appropriate fee from you for the exercise of your rights where permitted by applicable law or regulation.
Finally, you always have the right to lodge a complaint with your local data protection authority (such as the Office of the Data Protection Ombudsman in Finland) regarding our processing of your data. However, we ask that you reach out to us first to allow us to address your concerns.
We may update this notice from time to time, for example due to changes in our operations or the legal obligations that apply to us. Updates will be made available here. We may also inform you of any changes made by means that are appropriate considering the significance of the changes.