Recruitment Privacy Notice

Recruitment Privacy Notice

The data controller responsible for processing your personal data in connection with this recruitment process is:
Patria Plc
Arkadiankatu 2
FI-00100 Helsinki
Finland
Email: [email protected] 

For questions relating to data protection/ personal data processing, you may contact:
Azahara González
Compliance Manager for Internal Controls
Hatanpään Valtatie 30
FI-33100 Tampere
Finland
Email: [email protected]

Role of Adecco in the Recruitment Process

For certain recruitment campaigns, Patria Plc engages Adecco Finland Oy as a recruitment service provider.
In this context:
•    Patria Plc acts as the data controller
•    Adecco Finland acts as a data processor on behalf of Patria under Article 28 of the GDPR
Adecco processes personal data only on documented instructions from Patria and solely for the purpose of supporting the recruitment process, such as:
•    advertising job opportunities,
•    collecting and forwarding candidate applications,
•    supporting candidate communications,
•    assisting with pre-screening activities.

Adecco is contractually required to implement appropriate technical and organisational measures to protect personal data and may not use candidate data for its own purposes.
Where Adecco provides recruitment platform technology or tools used to manage applications, these systems are operated on behalf of Patria as controller.

Purpose of Processing

We process personal data for the purpose of:
•    managing and accessing job applications
•    communicating with candidates during the recruitment process
•    organising interviews and evaluation procedures
•    assessing candidate suitability for employment
•    carrying out pre-employment checks where legally permitted
•    maintaining candidate records where required for legal or compliance purposes
•    retaining candidate profiles for future opportunities where consent is provided

Categories of Personal Data

Depending on the role and recruitment process, we may process:
•    name, contact details and identification information
•    curriculum vitae, education and employment history
•    professional qualifications and skills
•    interview notes and evaluation records
•    assessment or test results (where applicable)
•    references from previous employers
•    correspondence exchanged during recruitment
•    video interview recordings were used in the process
We process only personal data that is relevant and necessary for recruitment purposes.

Sources of Personal Data

Personal data may be obtained:
•    directly from you (applications, CV submissions, interviews)
•    via recruitment service providers such as Adecco acting on our behalf
•    from referees identified by you
•    from professional public sources such as LinkedIn where relevant to the recruitment process.

Legal Basis for Processing

Personal data is processed on the following legal bases:
•    Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into an employment contract
•    Article 6(1)(f) GDPR – legitimate interests in conducting an effective and fair recruitment process
•    Article 6(1)(a) GDPR – consent, where applicable (for example retention in talent pools)
Where national employment laws require additional legal grounds or restrictions, these will be applied.

Recruitment Assessments and Automated Tools

As part of the recruitment process, Patria Plc may use tools to support candidate evaluation, such as:
•    aptitude or skills tests
•    structured interview tools
•    video interview platforms
•    CV screening technologies.

Some recruitment tools may include AI-enabled features, such as CV parsing or candidate matching.
These tools are used to assist recruiters and hiring managers, but final recruitment decisions are always made by human decision-makers.
No decisions producing legal or similarly significant effects are made solely by automated means.

Background Checks and References

Where permitted by applicable law and depending on the role applied for, Patria Plc may conduct:
•    reference checks
•    employment history verification
•    right-to-work verification
•    criminal record checks where legally permitted
•    financial background checks for certain sensitive roles.
Such checks are carried out only where necessary and proportionate.

Recipients of Personal Data

Personal data may be shared with:
•    HR and recruitment staff within Patria 
•    hiring managers and interview panels
•    recruitment service providers acting on Patria’s behalf (such as Adecco)
•    providers of recruitment software or IT services
•    assessment service providers.
All recipients are required to process personal data securely and in accordance with applicable data protection law.

International Transfers

Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards will be implemented, including:
•    European Commission Standard Contractual Clauses, or
•    transfers to countries recognised by the European Commission as providing adequate protection.

Data Retention

Personal data will be retained:
•    for the duration of the recruitment process; and
•    for up to two years after the conclusion of the recruitment process for unsuccessful candidates, unless a longer retention period is required by law or consent is provided for inclusion in a talent pool.
Retention periods may vary depending on national employment law requirements.

Your Data Protection Rights

You have the following rights under the GDPR:
•    right of access
•    right to rectification
•    right to erasure
•    right to restriction of processing
•    right to object to processing
•    right to data portability where applicable
•    right to withdraw consent where processing is based on consent.
To exercise your rights, please contact: [email protected] 

Requests may also be submitted through the Adecco candidate portal where the application was submitted. Requests received by Adecco will be forwarded to Patria as the controller responsible for responding to data subject requests.

Supervisory Authority and Complaints

If you have any questions about how we process your personal data, or if you wish to exercise your data protection rights, you can contact our Data Protection Contact at [email protected]

If you believe that your personal data has not been processed in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) or applicable national data protection law, you also have the right to lodge a complaint with a Supervisory Authority.
In particular, you may contact the Supervisory Authority in the country where:
•    You normally live,
•    You work, or
•    The alleged infringement of data protection law has taken place.

For individuals located in Finland, the competent supervisory authority is:
Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
P.O. Box 800
00531 Helsinki
Finland
Email: [email protected] 
Telephone: +358 29 566 6700
Website: www.tietosuoja.fi 
Please note that contacting our Data protection Contact does not limit your right to lodge a complaint with a supervisory authority.

For individuals located in Netherlands the competent supervisory authority is:
Netherlands - Autoriteit Persoonsgegevens 
Hoge Nieuwstraat 8, 2514 EL The Hague, The Netherlands Website: https://autoriteitpersoonsgegevens.nl 
Phone number: +31 88 1805 250

For individuals located in Belgium, the competent supervisory authority is:
Belgium - Autorité de protection des données 
Website: https://www.autoriteprotectiondonnees.be/citoyen
Phone number: +32 (0)2 274 48 00
Email: [email protected]

For individuals located in Sweden, the competent supervisory authority is:
Sweden -Integritetsskyddsmyndigheten
Postal address Box 8114, 104 20 Stockholm, Sweden
Phone number: +46 (0)8 657 61 00
Email: [email protected] 

Latvia
Address: Elijas iela 17, Riga, LV-1050, Latvia  
Phone: +371 6722 3131  
Fax: +371 6722 3556  
Email: [email protected]  
Website: https://www.dvi.gov.lv/ 

Country-Specific Statement

In Finland, the Netherlands, Belgium and Sweden, and Latvia recruitment-related personal data processing is also subject to national labour law and supervisory authority guidance.
We design our recruitment processes to ensure proportionality, transparency and necessity in line with both the GDPR and national employment privacy rules.

Use of AI in the Recruitment Process

As part of the recruitment services provided by Adecco Finland certain AI-enabled features may be used to support candidate management and recruitment efficiency.

What does this involve?
AI tools may assist with:
•    CV parsing and structuring
•    Matching candidates to job requirements
•    Ranking or prioritisation of applications
•    Identifying potential skills based on CV content

These tools support recruiters and hiring managers in making more consistent and efficient decisions. Final hiring decisions are always made by human recruiters. 

Where AI tools are used, we generally rely on our legitimate interests in conducting efficient, fair and consistent recruitment (Article 6(1)(f) GDPR), balanced against your rights and freedoms.
•    In some circumstances, processing may also be necessary to take steps at your request prior to entering into an employment contract (Article 6(1)(b) GDPR).

Safeguards and Rights in Relation to AI

We apply specific safeguards, including:

•    Human oversight of all recruitment decisions
•    Regular bias and discrimination risk testing
•    No intentional use of special category data for AI decisioning
•    Technical and organisational security measures
•    Governance aligned with emerging EU AI Act requirements
Where any form of fully automated decision-making with legal or similarly significant effects is introduced, you will be informed and provided with your rights under Article 22 GDPR, including the right to request human intervention.

Updates to this Notice

This Recruitment Privacy Notice may be updated periodically to reflect changes in recruitment practices or legal requirements.

Dated July 1st  2026