Privacy Policy

Finsell Helsinki, Finland Email: privacy@finsell.fi If you have questions about how we handle your data, please contact us at the address above.

We collect personal data that you voluntarily provide to us when you submit a job application or contact us through our website. This may include: • Full name • Email address • Phone number • City / location • LinkedIn profile URL • Languages spoken • Work experience level • CV / Resume and cover letter • Any other information you choose to include in your application We also collect technical data automatically when you use our website, such as your IP address, browser type, pages visited and time of visit. This is used solely for the operation and security of the website.

We process your personal data on the following legal bases under GDPR Article 6: • Consent (Art. 6(1)(a)): When you submit a job application, you explicitly consent to us processing your personal data for recruitment purposes. You may withdraw this consent at any time. • Legitimate interests (Art. 6(1)(f)): For general website operation, security, and improving our services, we rely on our legitimate interests — provided these are not overridden by your rights and interests. We do not process special categories of personal data (such as health data, race, religion or political opinions) and ask that you do not include such information in your application.

We use your personal data solely for the following purposes: • Reviewing and processing your job application • Contacting you about your application or future opportunities • Maintaining records of the recruitment process • Operating and improving our website We will never sell, rent or trade your personal data to third parties for commercial purposes.

Job applications and associated personal data are retained for a maximum of 12 months from the date of submission, after which they are securely deleted — unless you have been offered and accepted a position, in which case your data is transferred to employment records. If you wish to have your data deleted sooner, please contact us at privacy@finsell.fi.

We do not share your personal data with third parties, except: • Service providers: We may use trusted third-party services (such as hosting providers) who process data strictly on our behalf and under data processing agreements compliant with GDPR. • Legal obligations: We may disclose data if required by law or by a competent authority. We do not transfer personal data outside the European Economic Area (EEA).

Our website uses cookies to ensure basic functionality and to remember your language preference. We do not use tracking cookies, advertising cookies or analytics cookies without your explicit consent. Types of cookies we use: • Essential cookies: Required for the site to function correctly (e.g. language preference). These cannot be disabled. • Analytics cookies (optional): If you consent, we may use privacy-friendly analytics to understand how visitors use our site. No personally identifiable information is collected. You can withdraw your cookie consent at any time by clearing your browser's stored data for this site.

Under GDPR, you have the following rights regarding your personal data: • Right of access: You can request a copy of the personal data we hold about you. • Right to rectification: You can ask us to correct inaccurate or incomplete data. • Right to erasure ("right to be forgotten"): You can ask us to delete your personal data, subject to certain conditions. • Right to restriction of processing: You can ask us to limit how we use your data. • Right to data portability: You can request your data in a structured, machine-readable format. • Right to object: You can object to processing based on legitimate interests. • Right to withdraw consent: If processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing. To exercise any of these rights, please contact us at privacy@finsell.fi. We will respond within 30 days.

We take data security seriously. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction or alteration. Access to application data is restricted to authorized personnel only.

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Finnish supervisory authority: Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) Website: tietosuoja.fi Email: tietosuoja@om.fi Phone: +358 29 566 6700 Address: Lintulahdenkuja 4, 00530 Helsinki, Finland

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

For any questions, requests or concerns relating to this Privacy Policy or your personal data, please contact: Finsell Privacy Team privacy@finsell.fi Helsinki, Finland