Career Applications Privacy Notice
This pricacy notice was last reviewed and updated on November 20, 2025.
Privacy Notice and consent for automated decision making.
Purpose
The purpose of this Privacy Notice is to provide job applicants information about processing of their personal data in Windracers Limited. This Privacy Notice gives a general understanding of such personal data processing. However, the individual recruiting situations may vary significantly. Thus, all of the information provided in this Privacy Notice may not be applicable to each different data processing situation related to job applicants. If you want more detailed information in relation to how specifically your personal data is being processed, you should contact Windracers Limited by using the contact information provided in the Contacting the Data Controller section of this Privacy Notice.
Data Controller
In respect of each data subject’s personal data (i.e. the job applicant), the controller is regarded to be the Windracers Limited organising the recruitment. Data subjects can use their rights by contacting Windracers Limited as instructed in the Contacting the Data Controller section.
Contact address:
E-mail: recruitment@windracers.com
The processing of personal data is based on the data controller’s legitimate interest to process personal data for the purposes of recruiting as well as the connection between Windracers Limited and the applicant participating to the recruiting process. For some parts, processing of the personal data is also necessary for the purposes of preparing the employment contract. In some cases, Windracers Limited may be required to collect certain information in order to fulfil their statutory obligations. Local legislation may also require Windracers Limited to acquire applicant’s consent for processing of certain type of personal data of for conducting of certain processing activities.
In some cases, Windracers Limited may use automatic recruitment decision making in the first phases of recruitment. The use of such automatic decision making in personal data processing is based on a job applicant’s consent.
Purpose of Processing
The purpose of processing of personal data is to receive and handle applications from job applicants for recruitment and selection purposes, allow access to recruitment tools and carry out the recruitment process. Job applications can be open applications or intended for a certain specific job opening. The applicants filing job applications can be internal (Windracers Limited’s current employees) or applicants not currently employed by Windracers Limited.
Certain data processing activities may be outsourced to third parties, in which case such third-party processors operate on behalf of Windracers Limited. E.g., the IT/operational management on-line application system may be outsourced to an external IT supplier, and the data may also be processed by external recruitment consultants/agents who are handling applicant assessments and supporting Windracers Limited in the recruitment process.
Types of Personal Data
- Personal information, including name, contact information, place of birth and other similar information necessary for identifying applicants;
- A cover letter in free format for the application;
- The applicant’s education and work experience information;
- Suitability questionnaires and self-evaluation records;
- Potential other similar/relevant application-related information (such as applicant assessment reports by recruitment consultants) which the job applicants may want to disclose to Windracers Limited in connection with their job application; and
- Subject to the applicable laws and applicants’ consent, background check information, such as information obtained through security clearances or similar information sources.
- Data related to use of applications, software and other IT systems, camera surveillance data, physical access control data, user logs and access control related information (including physical access to Windracers Limited premises).
Types of personal data may also contain some other similar and relevant contact/business in-formation for the purposes of managing deliveries and co-operation relationship as described in Purpose of Processing section.
Regular sources of information
As a general rule, Windracers Limited processes such application information which has been provided by a job applicant themselves. The applicants enter their applications and information in the job applications on Windracers Limited’s internet home page using an online service and software designed for the purpose. The applicants may also provide additional information by email or by phone to the persons handling their application.
Subject to the applicants’ consent, information may also be obtained from recruitment consultants interviewing applicants and handling applicant assessments as a part of the recruitment process. Also, subject to the applicable laws and applicants’ consent, information may be obtained through background checks, security clearances and other similar information sources deemed necessary due to the nature and security requirements related to the open position in question.
Data Retention
Windracers Limited is actively processing the personal data of the applicants during the recruitment process. After the recruitment process has ended, Windracers Limited passively retains the personal data for predefined time periods based on Windracers Limited’s genuine needs and legislative requirements Windracers Limited is subject to. The data is deleted gradually in accordance with Windracers Limited’s Data Retention Policy. For more information regarding the retention times, you may contact Windracers Limited Corporation by using the contact details provided in the Contacting the Data Controller section.
If an applicant is chosen for the position, the basic information of the respective applicant as well as other information relevant for the employment relationship shall be transferred to Windracers Limited’s employee information data files. The retention times concerning Windracers Limited’s employee information data files are available in the respective Privacy Notice made available to Windracers Limited employees.
Regular Data Disclosure
Personal data may be disclosed to Windracers Limited Group companies for purposes compatible with the processing purposes defined in Purpose of Processing section of this Privacy Notice. Some of these entities may be located outside of EU/EEA countries.
Data Transfers from EU/EEA
If personal data is transferred outside of the EU/EEA area, the data controller ensures that sufficient level of data protection is maintained through appropriate safety measures, e.g. EU com-mission’s model clauses. More information of such international data transfers and the applied safeguards may be received by using the contact details provided in the Contacting the Data Controller section.
Data Security
All data is primarily handled electronically in the recruitment system. If printouts are taken or any hard copies are otherwise processed, the persons handling the recruitment process at Windracers are responsible for secure processing of such manual material and destroying the material when no longer needed in connection with the relevant recruitment process or if so requested by the applicant.
Access to any electronic or manual materials is limited only to those persons who need to process such information / personal data as a part of their duties within Windracers Limited.
Automated decision making
In recruitment processes where the volume of the applicants, volume of the open positions or other similar reasons cause Windracers Limited substantive administrative burden, Windracers Limited may use automatic recruitment decisions in the first phases of the recruitment. The decision making is based on the information the applicant has given regarding their education, certifications and work experience as well as possible competence evaluation questionnaires (completed by the applicant themself). This data is then automatically reflected to the pre-defined requirements set for the open position(s) in question and presented for the applicants in the job advertisement (e.g. language skills, education requirements, previous experience etc.).
As a result of the automatic reflecting, an automatic decision is produced regarding whether the applicant’s attributes and qualifications are suitable for the position. Based on this decision, the applicant is either invited to the next round of recruitment, or the applicant is not progressed.
Data subject’s rights
Data subject’s right to object personal data processing
When the personal data processing is based on the data controller’s legitimate interest (only), the data subject is entitled to object the processing of his/her personal data on grounds relating to their particular situation.
Data subject may send their request to object the processing in accordance with Contacting the Data Controller section of this Privacy Notice. In this request, the data subject shall define the particular situation based on which data subject is objecting the data processing. Windracers Limited may decline the request on statutory grounds.
Access to information
Data subject is entitled to obtain information of the personal data concerning them which Windracers Limited is processing and obtain a copy of such personal data. Request for access may be presented to Windracers Limited in accordance with section Contacting the Data Controller of this Privacy Notice.
Right to rectification, erasure and restriction
Data subject is entitled to have any such personal data that is inaccurate, outdated, unnecessary or contrary to the purposes of data processing corrected or erased. Requests concerning rectification and erasure may be presented in accordance with the instructions in the Contacting the Data Controller section of this Privacy Notice.
Data subject is also entitled to have the data controller to restrict processing of the data subject’s personal data for example when data subject is waiting for the data controller’s answer to data subject’s access or erasure request.
Right to lodge a complaint
If the data controller does not follow the applicable data protection regulation, a data subject is entitled to lodge a complaint with competent data protection authority.
Using data subject’s rights
As a general rule, Windracers Limited does not charge the data subject for using their rights presented in Data subject’s rights section. However, Windracers Limited may, at its sole discretion,
(a) refuse to fulfil; or
(b) charge a reasonable fee for fulfilling of several similar consecutive requests or requests that are manifestly unfounded or excessive. Windracers Limited is also entitled to decline requests on statutory grounds.
Contacting the Data Controller
In all questions and matters relating to personal data processing or rights of the data subject, data subjects can contact Windracers Limited. Windracers Limited shall further communicate the matter to the Windracers Limited entity considered as the data controller in the respective case. Data subjects may use their rights by e-mail to recruitment@windracers.com.