Human Resources

Privacy Policy

In this pri­vacy notice, we describe how we pro­cess per­son­al data on our human resource activ­it­ies. You shall be provided more inform­a­tion on:

  • What kind of data we process?
  • For what pur­poses we use the data? 
  • How long do we retain the data?
  • What oppor­tun­it­ies you have to effect?
  • Where is the data trans­ferred or dis­closed to?
  • How is the data protected?
  • Can amend­ments be made to this pri­vacy notice?
  • Who can you contact? 

What kind of data we process?
Typ­ic­ally we pro­cess the fol­low­ing data:

  • Per­son­al data you provided, such as name, e‑mail address, phone num­ber. Provid­ing oth­er data is com­pletely voluntary.

For what pur­poses we use the data?
We use the data for the fol­low­ing purposes:

  • Job applic­a­tions and HR: We use the data to get in touch with people who might be inter­ested in to join our team.


How long do we retain the data?
We retain the data in accord­ance with the fol­low­ing reten­tion periods:

  • Data you provided: We retain the data only neces­sary time peri­od. In case of recruit­ing when you indic­ate that you’re not inter­ested in our job offer, we remove your data. Max­im­um data reten­tion time is half a year after which we always erase the data.

You may also influ­ence the reten­tion peri­od of your data by using the oppor­tun­it­ies to the effect described below, such as request­ing the dele­tion of your data.

What oppor­tun­it­ies you have to effect?
There are sev­er­al ways you may influ­ence the col­lec­tion and pro­cessing of data:

  • Veri­fic­a­tion, cor­rec­tion and dele­tion of the data: You have the right to veri­fy the per­son­al data stored about you. At your request, we will cor­rect, sup­ple­ment or delete inac­cur­ate, incom­plete or out­dated per­son­al data for the pur­pose of processing.
  • Data trans­fer: You may wish to have your per­son­al data, which we auto­mat­ic­ally pro­cess based on your con­sent, trans­ferred by con­tact­ing us at the address provided at the end of this pri­vacy notice.
  • Right to object and restrict: You may object the pro­cessing based on legit­im­ate interest. For example, in such situ­ation, the pro­cessing is restric­ted for the time when the grounds for the objec­tion of pro­cessing are assessed.
  • With­draw­al of con­sent: You may with­draw your con­sent at any time by con­tact­ing the address provided at the end of this pri­vacy notice. You may can­cel the news­let­ter by click­ing the link at the end of the message.
  • Right to appeal: You may file a com­plaint with the author­ity if you con­sider that your per­son­al data has been pro­cessed against data pro­tec­tion legis­la­tion (

Exer­cising the above rights requires that we are able to identi­fy you personally.

Where is the data trans­ferred or dis­closed to?
We do not dis­close your per­son­al data to third parties in oth­er than the fol­low­ing excep­tion­al cases: 

  • Author­it­ies: We may dis­close your per­son­al data in the man­ner required by the com­pet­ent author­it­ies and applic­able legis­la­tion in force from time to time.
  • Con­sent: We may dis­close your data to third parties if you have giv­en your con­sent to that.
  • Mer­gers and acquis­i­tions: If we sell, merge or oth­er­wise organ­ize our busi­ness, your per­son­al data may be dis­closed to the buy­ers and their advisor.

We use sub­con­tract­ors to pro­cess the data in which case we guar­an­tee through con­trac­tu­al arrange­ments that the data will be pro­cessed in accord­ance with the legis­la­tion in force from time to time. Our office is par­tially loc­ated out­side of the EU or the EEA. If we trans­fer the data out­side the EU or the EEA, we will ensure the adequate level of pro­tec­tion of per­son­al data, inter alia, by agree­ing on mat­ters related to the con­fid­en­ti­al­ity and pro­cessing of per­son­al data as required by legis­la­tion, e.g. by using mod­el con­tract clauses approved by the European Com­mis­sion or Pri­vacy Shield mech­an­ism. We also could obtain your pri­or expli­cit con­sent to pro­cess your data out­side of EU or EEA.

How is the data protected?
We use appro­pri­ate tech­nic­al and organ­iz­a­tion­al secur­ity meas­ures to pro­tect per­son­al data against unau­thor­ized pro­cessing. Such means include, inter alia, the use of fire­walls and encryp­tion tech­no­lo­gies, appro­pri­ate access con­trol, restric­ted access rights, the guid­ance of the per­son­nel involved in the pro­cessing of per­son­al data and care­ful selec­tion of subcontractors.

Can amend­ments be made to this pri­vacy notice?
We are con­stantly devel­op­ing our ser­vices and we may amend this pri­vacy notice. The amend­ments may also be based on changes in legis­la­tion. We recom­mend that you reg­u­larly famil­i­ar­ize your­self with the con­tent of this pri­vacy notice.

This pri­vacy notice was pub­lished on 15 July 2020.

Who pro­cess my data?
We are Zoan, offi­cially Zoan Oy, a lim­ited liab­il­ity com­pany registered in the Repub­lic of Fin­land. Our regis­tra­tion num­ber at the cor­por­a­tion registry is 2352411–4 and the registered address Bulevardi 1 A, FI-00100 Hel­sinki, Finland.

Who can you contact?
In case you would like to con­tact us con­cern­ing data pro­tec­tion feel free to do so using con­tacts lis­ted here at our pri­vacy portal front page. We sug­gest con­tact­ing our pri­vacy team first to ensure that the request is pro­cessed in a timely manner.