Privacy Policy

This Privacy Policy contains information on how Evitec Solutions (Evitec) and its subsidiaries processes and stores your personal data.

Controller

Evitec Solutions, Business ID: 0899369-2
Bertel Jungin aukio 7 B
02600 Espoo

Person responsible for registration matters

Data Protection Officer: Harri Inkinen

harri.inkinen(at)evitec.com

What personal data we collect and for what purpose

The purpose of the processing of personal data is the recruitment of new employees, customer service and customer relationship management, as well as communication. In addition, the information will be used to sell, market, implement and develop Evitec’s services and events.

Personal information is collected in connection with the management and administration of customer relationships. Personal data is also collected from the data subjects themselves (for example, when subscribing to a newsletter, visiting a website, or entering data into a recruitment system).

The legal basis for the processing of personal data is primarily a legitimate interest, contract, consent, or statutory obligation of the controller.

A legitimate interest relates to situations where there is a link between the data subject and the controller. For example, the processing of information related to the management of customer relationships and partnerships.

Consent applies to situations where the data subject has given consent to the processing of data, for example by subscribing to our newsletter or filling in their information in the application.

Categories of personal data

A. Customers, business partners and marketing communications

  • First and last name
  • Email address
  • Telephone number
  • Name of the organization with contact information
  • Country
  • Position and contact details of the person
  • Other information provided by the person (such as newsletter subscriptions, customer feedback, registrations, and participation in events)
  • IP address

B. Information gathered when using the website

  • IP address
  • Browser and operating system information
  • Technical usage data
  • Consent to track these is given by accepting the cookies on the web site.

C. Job applicants

  • First and last name
  • Contact information
  • Current employer
  • Study and work history
  • Skills and professional competences
  • Job application, resume, and other attachments provided by the job seeker
  • Public information on LinkedIn and Facebook profile
  • Information on the status of the recruitment process
  • Communication during the recruitment process
  • Indications of suitability for the job by those involved in the recruitment process

The recruitment system also collects personal information about potential employees from third parties, such as LinkedIn, Facebook, X, Github, or other public sources, with the expressed consent of the potential employees to Evitec. This is called information retrieval for potential job seekers and can be done by our employees manually or by our services automatically.

Consent will also be sought if the Evitec employee has made a recommendation and reported the data subject as a potential job seeker. The potential employee will always be informed of such processing.

Transfers and disclosures of personal data

When providing services and in data processing Evitec uses third-party service providers. These third parties may in some cases process personal data on behalf of Evitec, when performing the necessary operational tasks. Evitec uses only trusted service providers that are bound by agreement to comply with the data protection principles described in this privacy policy.

Transfer of personal data to a third country

In principle, personal data will not be transferred outside the Member States of the European Union (EU) or the European Economic Area (EEA). However, if there occurs a case where a certain service must be located outside EU and EEA, the transfer of personal data will be carried out in accordance with the applicable data protection legislation and this privacy policy.

Data protection and storage period

We will only process personal information for as long as we have a statutory right or obligation to process personal information and storing the data is necessary to fulfil the purposes described above.

The retention of personal information is subject to regular review, and we will remove any information that is out of date or no longer required.

Job applicant data will be stored at maximum for two years.

Personal information is kept technically secure. Access to personal data is restricted to those who need information in the course of their work. Personal information is processed on systems under the control of Evitec or its partners. We have ensured that all partners involved in the processing of personal information comply with this Privacy Policy, applicable privacy policy laws and regulatory requirements.

Rights of data subjects

Evitec will take care of the proper exercise of the data subject rights. The data subject has the following rights:

  • Right of access to personal data. The data subject may request confirmation from Evitec that Evitec is processing the data of the data subject and request the stored personal data to be reviewed.
  • Right to request rectification, erasure or restriction of processing. The data subject has the right to request the rectification or erasure of inaccurate data concerning him.
  • Right to restrict the processing of personal data. The data subject has the right, in certain specified situations, to request a restriction on the processing of data concerning him.
  • The right to object to the processing of data. The data subject has the right to object to the processing of their personal data where it is based on a legitimate interest of the controller.
  • To revoke a previously given consent. If the processing has been based on consent, the data subjects may withdraw their prior consent at any time.
  • Right to lodge a complaint with the supervisory authorities. The data subject may lodge a complaint against the processing of their personal data with the supervisory authority, which is the Office of the Data Protection Ombudsman. The contact details of the supervisory authority can be found at www.tietosuoja.fi/en.

The data subject may exercise these rights by contacting the address mentioned above in this privacy policy.

Use of cookies

Evitec uses cookies on its website. These are small data files that are transferred to your computer when you contact a website. We use cookies to process and analyse information related to the use of the website. The information collected by cookies is used to monitor the use of the websites, improve usability, and develop the website to better meet the needs of the users. Cookies do not harm the user’s computer or web browser.

We have divided the cookies used on our website into essential cookies and third-party cookies according to their purpose.

Necessary cookies are needed to ensure the functionality of the services. Thanks to these, the site remembers the choices you make, and you don’t have to do them again with every page upload.

Third-party cookies are used on the website for user analytics. Among the third-party cookies, Evitec uses Linkedin Insight and Dealfront cookies.

The key data collected by analytics cookies are:

  • Used browser
  • IP address
  • The geographical location of the user
  • Date of visit
  • The site from which the page was accessed
  • Pages visited

However, when visiting the website, the user may prevent or restrict the use of cookies on our website. You can also withdraw your consent to cookies at any time by visiting our website and blocking the use of cookies from the cookie banner. However, cookie settings are browser-specific, so selections must be made separately for each browser you use.

We reserve the right to update our cookie policies, for example, due to service developments or mandatory legislation.

Changes to privacy policy

Evitec reserves the right to change this privacy policy. This Privacy Policy was updated in March 2024.