Name of the register

Raisio Group’s recruitment register

Controller

Raisio plc (Business ID 0664032-4) on its own behalf and on behalf of the Group companies

Address: Raisio plc, P.O. Box 101 (Raisionkaari 55), FI-21201 RAISIO, Finland

Telephone: +358 2 443 2111

Contact person in matters regarding the register

Merja Lumme, Vice President, HR

Address: Raisio plc, P.O. Box 101 (Raisionkaari 55), FI-21201 RAISIO, Finland

Telephone: +358 40 528 0448

Email: merja.lumme@raisio.com

Purpose and legal basis for processing personal data

The purpose of personal data processing is to collect, process and retain the personal data of persons seeking employment at Raisio Group for the purposes of implementation, communications, statistics and contacting related to the recruitment process. If the data subject does not provide the information requested for the recruitment process, the controller cannot accept or process the job application or sign a contract of employment.

Categories of personal data and content of the register

The register includes the data provided by the applicants in their applications sent to Raisio Group or otherwise:

• basic information, such as first name and surname, address, other contact data, date of birth particulars of the job applied
• information related to the job application and CV, such as education, work experience, language skills, competence, positions of trust
• a photograph
• information related to the interview and tests other possible information provided by the applicant, such as salary aspiration
• how the applicant obtained the information about the job opportunity
• information related to the processing and status of the application

Sources of information

The applicant’s data is obtained from him/herself. Raisio Group’s employees or subcontractors dealing with the recruitment process provide the information related to the processing and status of the application.

Transfer or disclosure of personal data

The data can be shared to be used internally by the Raisio’s Group companies and possibly by the subcontractors participating in the recruitment process with whom Raisio has entered into a separate agreement regarding the recruitment and personal data processing. In addition, personal data may be disclosed only with the consent of the data subject or if the transferee has a legal right to obtain information. By rule, the data are not transferred or disclosed outside the EU or European Economic Area (EEA).

Storage period of personal data

Personal data related to a specific job are retained two years and open applications six months after the submission of application.

Principles for the protection of personal data

Personal data is stored in systems that can only be accessed by the employees with the right to process the data based on their work duties are entitled to use the personal data. All those using the register data are bound by professional secrecy.

Electronic data are available in databases that are protected by firewalls, passwords and other technical means. Databases and their backups are in locked spaces and access to the data is limited to certain pre-named persons. Manual material is kept in locked storage protected by an access control system.

Data subject’s rights

According to the personal data legislation, the data subject has the right:

• The right to know what data of him/her has been stored in the register and the right ask for inaccurate data to be rectified and modified
• The right to request restriction of the use of the data
• The right to object the processing of his/her personal data or to require the data to be transferred to another controller in a structured, commonly used and machine-readable format
• The right to request for the removal of the personal data
• The right to withdraw his/her consent to the extent the personal data are processed based on his/her consent. However, the withdrawal of consent has no effect on the lawfulness of processing occurred before the reception of withdrawal.

All requests concerning the verification etc. should be done in writing to the person responsible for the register. The data subject must prove his/her identity in an acceptable way. The controller will reply within a time frame of the personal data legislation (as a rule, within one month), even if the data subject’s claim is not accepted.

The data subject has the right to file a complaint with the supervisory authority if the data subject considers that his/her information has not been processed in accordance with this Privacy Statement or with current personal data regulations: Office of the Data Protection Ombudsman, P.O. Box 800, 00521 FI-Helsinki, Finland; tel: +358 29 56 66700; tietosuoja@om.fi.

Changes

Raisio reserves the right to change this Privacy Statement in order to develop its business operations or in case the legislation changes.