Privacy Policy and Use of Cookies

Version 1:2026

Data Controller:

Name: Worldwide Employment Solutions Oy (Emploi)
Register name: Register of Emploi’s service users
Business identity code: 3300894-9

Contact on privacy issues:

Name: Eveliina Riihimäki (eveliina@emploi.fi)

This Privacy Policy shall be read in conjunction with the Terms of Service. For terms written in capital letters, refer to the definitions provided in the Terms of Service.

Purpose and grounds for the processing of personal data

The Service Provider processes personal data to provide, maintain, and develop the Emploi platform. The data subjects include Service Users (Candidates) and the contact persons of our corporate customers (Recruiters). The processing is based on the following legal grounds:

Performance of a contract: To fulfill our obligations under the Terms of Service, such as facilitating Engagements and managing user accounts.
Legitimate interest: To manage and develop customer relationships, ensure platform security, conduct marketing, and analyze aggregated platform usage trends to improve the Service.
Consent: Where the Candidate has expressly opted-in to share unanonymized data with third-party partners.

Purpose of processing

Personal data is used to:

Facilitate communication and identity verification between Service Users.
Identify and individualize Users in our register.
Conduct targeted sales and marketing activities.
Analyze platform usage trends to improve the Service and develop new features.
Develop and improve the Service, including by training AI and machine learning models, conducting product testing, and generating derived insights from platform usage data.
Suggest relevant opportunities to Candidates and Recruiters through proactive matching and notifications.
Ensure platform security and integrity, including detecting and preventing fraud, fake profiles, and misuse, and assessing the quality and reliability of Service Users.
Resolve disputes and comply with legal obligations, including retaining interaction data as evidence where necessary.
Share data with authorized partners (such as staffing agencies and public employment services), where anonymized or aggregated, or with the Candidate’s express consent.
Verify Service User identity through electronic identification methods where offered or required.
Personal data may be used for profiling, including AI-powered matching of Candidates to job descriptions and ranking of search results, to improve the User experience and the quality of recruitment outcomes. The Service Provider does not use automated decision-making that produces legal effects or similarly significantly affects the data subjects. A Recruiter’s decision to contact or hire a Candidate is always made by the Recruiter, not by the platform’s algorithms. In addition, the Service Provider may record platform usage events to analyze workforce demand and supply trends. This data is aggregated and anonymized for reporting purposes.
In the course of providing the Service, the Service Provider may derive or infer new data points from a Service User’s existing personal data and platform behavior to improve matching and Service quality. Such derived data constitutes personal data and is processed in accordance with this Privacy Policy.

Collection of personal data

When you visit the Emploi website, a connection is established with your browser. The information collected is stored in temporary system files and recorded automatically: IP address of your device, data and time of access, name and URL of files accessed, the website from which access is initiated or from which you are directed to our site (referrer URL), browser used and, where applicable, the operating system of your device, as well as the name of your provider.

The data specified is processed by us for the purpose of seamlessly establishing a connection and for system security. This connection data is automatically deleted or anonymized once it is no longer required for these purposes, unless a longer retention period is necessary to investigate a security incident or improper use of the Service.

Furthermore, the following information about a Candidate may be collected and stored:

Name;
Age;
Contact details (e.g., phone number and email);
Country of residence and nationality;
Countries where the Candidate is interested in working;
Jobs in which the Candidate is interested;
Occupation, work experience, seniority level, special skills, language skills, education, diploma, recommendations;
Whether the Candidate seeks temporary or permanent placement;
Free-form self-presentation by the Candidate;
Information related to employment or service relationships (e.g. organization, job title);
Categorization information (e.g., marketing bans and interests);
Information on prohibitions, restrictions, consents, and other choices made by the Candidate regarding the use of personal data;
Information related to the processing of the data, such as the date of storing and the source of the data;
Any other data voluntarily submitted by the User that is relevant to the purpose of the Service (recruitment and networking);
Other information related to the purpose of the register or the Service, such as information that can be connected to the Candidate about the use of the website when using the Service, such as the Candidate’s IP address, time of visit, pages visited, browser type used (e.g. Internet Explorer, Firefox), web address used to access the website, and server from which the Candidate accessed the website.

Likewise, the following information about a Recruiter and its representative(s) may be collected and stored:

Name of the company, organization, or another type of entity acting as a Recruiter;
Contact name, phone number, email address of Recruiter’s representative;
Free-form self-presentation by the Recruiter;
Description of the field of activity;
Description of the competence needs/the vacancy;
Categorization information (e.g. marketing bans and interests);
Information on prohibitions, restrictions, consents, and other choices made by the Recruiter regarding the use of personal data;
Information related to the processing of the data, such as the date of storing and the source of the data;
Any other data voluntarily submitted by the User that is relevant to the purpose of the Service (recruitment and networking);
Other information related to the purpose of the register or the Service, such as information that can be connected to the Recruiter about the use of the website when using the Service, such as the Recruiter’s IP address, time of visit, pages visited, browser type used (e.g., Internet Explorer, Firefox), web address used to access the website, and server from which the Recruiter accessed the website.

Cookies and other tracking technologies

Depending on the preferences of the Service User, we use cookies on our website to enhance the Service User’s experience, analyze website usage, remember Service User preferences, and for marketing purposes. Necessary cookies are essential for the operation of the website and cannot be disabled. However, we will only use other cookies with the Service User’s consent. Service Users can change their cookie consent settings at any time in their cookie settings. With the Service User's permission, we may use third-party cookies, such as those generated by the Google Analytics service.

To learn more about how Google uses Service Users’ information, please visit https://policies.google.com/technologies/partner-sites. Please note that some of our online recruiting operations are hosted by third parties who may place their own cookies or other tracking technologies on the Service User’s device in accordance with this Cookie Policy.

Storage period of Personal Data

We retain personal data for as long as it is necessary to fulfill the purposes of the Service, such as facilitating job searches and recruitment. The retention period is determined based on the following criteria:

Account activity: Data is retained as long as the Service User’s account remains active. An account is considered active if the user logs in or interacts with the Service.
Account inactivity: If a Candidate or Recruiter has not logged in or interacted with the Service for a continuous period of twenty-four (24) months, the account will be considered inactive. We will notify the Service User before deactivating an inactive account and provide an opportunity to maintain the account.
Purpose completion: If it becomes evident that the Service User is no longer using the platform for its intended recruitment purposes, we may deactivate the profile in accordance with our Terms of Service.
User request: Personal data is deleted upon the user’s request, unless its retention is required by law.
Legal & statutory requirements: We may retain certain data (e.g. billing information) for longer periods to comply with legal, tax, and accounting obligations.

Profile Access Expiry

After a successful Engagement, the Recruiter’s access to the Candidate’s Generally Private data is time-limited. Once the access period expires, the Candidate’s Generally Private data is automatically locked in the Recruiter’s view. If a Recruiter wishes to re-access a Candidate’s Generally Private data after the access period has expired, the Candidate must provide renewed express consent. The Candidate may decline any such request without negative consequences. Further details on the access period and renewal process are set out in the Terms of Service.

Sources of data

Data is generally collected directly from the data subject using the Service. Additionally, information may be generated through the data subject’s use of the Service.

Data transmission and recipients

We may transmit data, including anonymized Candidate profiles, directly to Recruiters or provide Recruiters with access to the data. We will not transmit or share non-anonymized Candidate data with Recruiters without the Candidate’s consent. As a general rule, we do not disclose data to third parties. However, third-party service providers that assist us may have access to the data. We will oblige these parties to process personal information only in accordance with our instructions and this Privacy Policy. The most significant parties with whom we have outsourced processing tasks are Angelma & Mäkelä (accounting firm), Amazon Web Services (cloud and database infrastructure in Ireland, EU), Stripe (payment processing), Resend (email services), Twilio (SMS communications), and Idura (electronic identification).

Data Sharing with Partners and Public Employment Services

Where the Service Provider enters into partnerships with staffing agencies, government employment programs, or vocational institutions, it may share anonymized or aggregated platform data with such partners. Identifiable Candidate data will only be shared with the Candidate’s express consent. Any such data sharing will be governed by appropriate data processing agreements.

Publication of Candidate information

Information provided by Candidates in the Generally Public sections of their Candidate Profile (e.g., skills, experience, and general location) will be visible to any visitor of the Service without requiring registration. The Candidate is solely responsible for ensuring that no personally identifiable data is included in the Generally Public sections. This information remains public regardless of whether the Candidate has followed the anonymization instructions.

Disclosure of Candidate information to Recruiters

The Generally Private sections of a Candidate Profile (full name, contact details, and specific identifiers) are exclusively disclosed to a Recruiter only after a successful Engagement. Prior to Engagement, only Generally Public data (data anonymized by the Candidate) is accessible. The Recruiter’s access to the Candidate’s Generally Private data following a successful Engagement is time-limited as described in the “Storage period of Personal Data” section above.

Disclosure of Data to Authorized Recruitment Partners

In accordance with the “Recruitment Partner Visibility Consent” described in our Terms of Service, if a Candidate provides express consent (opt-in), their full non-anonymized profile (including name, contact details, and CV) will be made available to Emploi’s authorized staffing and recruitment partners. The purpose of this sharing is to enable third-party professional recruiters to contact the Candidate directly for job opportunities outside of the Emploi platform. The Candidate can revoke this permission at any time through account settings. However, revocation does not apply to data already shared with or downloaded by a partner prior to the withdrawal. Emploi’s authorized recruitment partners are contractually bound by data processing obligations and must respect any withdrawal of consent.

Disclosure of Recruiter information to Candidates

We will not publish the names, contact details, or other personal/company data of Recruiters on our web platform. The Recruiter's first name is visible to the Candidate when the Recruiter initiates a connection request. The Recruiter's full name, contact details, and other personal/company data are shared with the Candidate upon a successful connection. In certain cases, we may contact a Recruiter to seek their consent before displaying the name of their company/organization on our website as a customer reference.

Cross-border data transfers

As a general rule, we process and store personal data within the European Union (EU) or the European Economic Area (EEA). However, in cases where we use service providers or have personnel located outside the EEA, we ensure that the transfer is subject to appropriate safeguards as required by the GDPR.

Restrictions on disclosure and use of personal data

Except to the extent necessary to accomplish the purposes described in this Privacy Policy and the Terms of Service, we do not disclose Service Users’ personal data to third parties. We also prohibit our service providers and Recruiters from using Service Users’ personal data for any purposes other than those related to our Service.

Data security / encryption

This website uses “Hypertext Transfer Protocol Secure” (HTTPS). The connection between your browser and our server is encrypted.

Data Deletion and Anonymization

When personal data is deleted (whether upon a Service User’s request, upon account deactivation, or upon expiry of the applicable retention period), the Service Provider will permanently erase the personal data from its active systems. Certain data may be retained in backup systems for a limited period after deletion, after which it will also be permanently erased. Deletion of a Service User’s account is distinct from anonymization: upon deletion, the Service Provider will ensure that the personal data can no longer be attributed to an identified or identifiable individual in any of its systems.

Identity Verification

The Service Provider may offer or require identity verification for Service Users through third-party electronic identification methods. Where identity verification is offered, the Service Provider will process only the data necessary to confirm the Service User's identity.

Rights of the data subject

Right of access: The data subject has the right to request access to the personal information stored in the register in order to verify its accuracy and relevance. The exercise of this right is generally free of charge.
Right to rectification: The data subject has the right to request the data controller to rectify any incorrect, inaccurate, or incomplete personal data concerning them.
Right to erasure: In accordance with the applicable data protection legislation, the data subject has the right to request the deletion of their personal data in specific circumstances. For instance, the data subject may request the deletion of their personal data when it is no longer necessary for the purposes for which it was collected or processed.
Right to restriction of processing: The data subject has the right to request the data controller to restrict the processing of their personal data in certain situations specified in the applicable data protection legislation. For example, the data subject may request a restriction on the processing of their personal data when they have objected to its processing and are awaiting verification of whether the controller’s legitimate interests override their own interests. While processing is restricted, the data controller may store the data but generally cannot process it further.
Right to object: The data subject has the right to object to the processing of their personal data, including profiling, if the processing is justified by the data controller’s legitimate interests. If the data subject exercises this right and objects to the processing, the data controller will generally cease processing the personal data, unless they can demonstrate compelling legitimate grounds for the processing that override the data subject’s interests. If personal data is processed for direct marketing purposes based on legitimate interest, the data subject has the right to object to such processing at any time (including profiling related to direct marketing). Once the data subject has objected to the processing of their personal data for direct marketing purposes, the data should no longer be processed for that purpose.
Right to data portability: In principle, the data subject has the right to receive the personal data they have provided to the register in a machine-readable format and has the right to transmit that data to another data controller.
Right to withdraw consent: If personal data is processed based on the data subject's consent, the data subject has the right to withdraw their consent at any time by notifying the data controller. The withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal.