UKKO.fi UKKO.fi
Popular searches: Light entrepreneur Sole trader Invoicing Pricing
UKKO Light Entrepreneur
Without a Business ID
UKKO Light Entrepreneur
With a Business ID
UKKO Entrepreneur
Private trader
UKKO Entrepreneur
For limited companies
Start as UKKO Light Entrepreneur
Join Finland’s most comprehensive light entrepreneur service for free.
Start as UKKO Entrepreneur
Invoice and manage your company’s finances easily in one place.
Entrepreneurship School
About UKKO.fi
FAQ - UKKO Light Entrepreneur
FAQ - UKKO Entrepreneur
Customer Service
For Employers
FI EN

Set up a limited company and grab a 300 € benefit!

Privacy Policy / UKKO.fi Job Applicants

1. Controller

The controller responsible for the processing of personal data described in this privacy policy is:

SPL Company Oy
Business ID 2871479-3
Keilaniementie 1
FI-02150 Espoo, Finland

Referred to below as “UKKO.fi” or “we”.

SPL Company Oy manages recruitment centrally for the UKKO.fi Group. The Group consists of SPL Company Oy, UKKO Yrittäjyyspalvelut Oy and SLP Wallet Oy. [To be confirmed: Does any other Group company recruit as an employer? If so, the employing company is a joint controller with SPL Company Oy, and the allocation of responsibilities is described in the document “Information on joint controllership in the UKKO.fi Group”.]

2. Who does this privacy policy apply to?

This privacy policy applies to people who:

  • apply for an open position at UKKO.fi;
  • send us an open application;
  • are presented as candidates by a recruitment consultant or executive search firm; or
  • are contacted by us about a potential recruitment.

This notice also applies to referees named by an applicant, to the extent that we process their contact details.

3. What personal data do we process?

We only process data that is necessary for the position applied for. We may process the following data:

Basic and contact details

  • name;
  • email address, phone number and postal address; and
  • a photograph, if you attach one to your application.

Application details

  • the position applied for and the content of your application;
  • education, qualifications, language skills and other skills;
  • work experience and previous employers;
  • salary expectations and possible start date;
  • names and contact details of referees and information obtained from them with your consent; and
  • public professional profiles, such as your LinkedIn profile, if you provide a link or we contact you on that basis.

Recruitment process data

  • notes and assessments from interviews and other communication;
  • results of personality and aptitude assessments, if you take part in them;
  • information on a credit check and its result, if the position requires one; and
  • the stage and outcome of the recruitment process.

Technical data

  • log data relating to the use of the recruitment system.

As a rule, we do not process special categories of personal data, such as health data. If such data comes up, we only process it where permitted by law, for example in situations concerning an employee’s state of health. Please do not include unnecessary sensitive information in your application.

4. For what purposes do we process personal data?

Carrying out recruitment

We process data to receive and assess applications, arrange interviews and assessments, communicate with you, and make and communicate the selection decision.

Assessing suitability and reliability

With your consent, we may have personality and aptitude assessments carried out. We may check your credit information if the position involves, for example, handling funds or customers’ financial data. We will inform you of the check in advance.

Starting employment

If you are selected, we use your data to conclude an employment contract. Processing during employment is described separately in our employee privacy policy.

Future recruitment

We may keep your application for future recruitment if you give your consent.

Handling legal claims

We may process data to demonstrate that recruitment has been carried out lawfully and without discrimination, and to establish, exercise or defend legal claims.

We do not make decisions in recruitment based solely on automated processing that would have legal or similarly significant effects on you. The selection decision is always made by a person.

5. On what legal basis do we process personal data?

Pre-contractual measures

When you apply for a position, processing is necessary to take steps at your request prior to entering into an employment contract. This covers carrying out recruitment and starting employment.

Legitimate interest

We may process personal data on the basis of our legitimate interest:

  • to assess open applications and executive search candidates;
  • to carry out credit checks for positions where this is permitted under the Finnish Credit Information Act; and
  • to establish, exercise or defend legal claims.

Our legitimate interest is based on our need to find suitable employees and to demonstrate that recruitment is lawful.

Consent

Processing is based on your consent when:

  • you take part in personality and aptitude assessments;
  • we obtain information from referees; or
  • we keep your application for future recruitment.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Legal obligation

Processing may also be based on a legal obligation, for example under the Finnish Employment Contracts Act, the Non-Discrimination Act and the Act on Equality between Women and Men.

6. Where do we obtain personal data?

We obtain personal data mainly from you, for example from your application, the recruitment system and interviews.

We may also obtain data from:

  • recruitment consultants and executive search firms;
  • service providers carrying out personality and aptitude assessments;
  • referees you have named, with your consent;
  • a credit information register; and
  • public professional sources, such as LinkedIn.

Providing application details is voluntary, but without them we cannot assess your application.

7. Who do we disclose personal data to?

Within the Group

We may disclose data to other UKKO.fi Group companies if the recruitment concerns a position with them.

Service providers

We use service providers that supply us with, for example, a recruitment system, personality and aptitude assessments, recruitment and executive search services, and IT and cloud services. Service providers process data only on our behalf and in accordance with our instructions, and we conclude the agreements required by the GDPR with them.

Authorities

We disclose data to authorities where required by law.

We may also disclose data to other parties if you have given your consent.

We do not sell personal data to third parties.

8. Is personal data transferred outside the EU or EEA?

Some of our service providers or their subcontractors may process personal data outside the EU or EEA, for example in the United States. In such cases, we ensure that the transfer is based on a valid GDPR transfer mechanism, such as:

  • a European Commission adequacy decision, such as the EU–US Data Privacy Framework for US recipients certified under it; or
  • standard contractual clauses approved by the European Commission and, where necessary, supplementary safeguards.

9. How long do we keep personal data?

We keep personal data only for as long as it is needed for the purposes described in this notice or as required by law.

Applicants’ data is deleted no later than 12 months after the end of the recruitment process.

Data may be kept longer if necessary because of pending legal proceedings or a legal claim, or if otherwise required by law.

10. How do we protect personal data?

We protect personal data with appropriate technical and organisational measures. Data is stored in secure systems, and only people involved in the recruitment have access to it. People processing the data are bound by confidentiality.

Our measures include, for example, access rights management, access control, technical system security, and staff guidance and training. In the event of a data breach, we act and notify as required by law.

11. What are your rights?

Under the GDPR, depending on the situation, you may have the right to:

  • know whether we process your personal data and what data we process;
  • request the rectification of inaccurate or incomplete data;
  • request the erasure of your data;
  • request the restriction of processing;
  • object, on grounds relating to your particular situation, to processing based on legitimate interest;
  • withdraw your consent; and
  • lodge a complaint with a supervisory authority.

We cannot erase data that we are required by law to keep or that is needed because of a legal claim.

You can exercise your rights by contacting us as described in section 12.

12. Data protection contact details

For matters concerning data protection and the exercise of your rights, you can contact us through the data protection form on our website or by email at [email protected].

13. Right to lodge a complaint with a supervisory authority

If you believe that your personal data has been processed in breach of data protection legislation, you have the right to lodge a complaint with the competent supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

14. Changes to this privacy policy

We may update this notice, for example, if our operations, processing practices or legislation change. The current version of the notice is available on the UKKO.fi website.

Updated: 29 October 2026