Data Controller
Workbana Oy
Business ID: 3356827-6
Syväojankatu 8 A 31, 15700 Lahti, Finland

Contact Person for Register-Related Issues
Workbana Oy
Email: privacy@workbana.com

Register Name
Personal Data Register of Workbana Oy (Job Seekers) and Customer Register (Companies)

Purpose and Legal Basis for Processing Personal Data
Personal data is processed to facilitate the service, such as finding job opportunities and connecting job seekers with companies. The legal basis for processing personal data is based on the following grounds under the GDPR:

• User consent (e.g., for sending marketing messages)
• Contract performance (e.g., providing the service)
• Legitimate interest of the data controller (e.g., developing service functionality)
  
  

Retention Period of Personal Data
Personal data is retained as long as necessary to provide the service or as required by law. Retention periods vary depending on the processing purpose. For example, job seeker data is retained for up to two years after service use ends unless legislation or user request dictates otherwise.

Content of the Register
The register collects the following information:

• Name
• Address
• Phone number
• Email address
• Professional profile and work history
• Other information provided by the user necessary for service provision
  
  

Regular Sources of Information
Personal data is collected directly from registered users when they sign up for the Workbana service and fill in their information.

Regular Disclosures of Data
Personal data is not disclosed to third parties without the user’s consent unless required by service functionality, law, or regulatory decision.

Data Transfer Outside the EU or EEA
Currently, personal data is not transferred outside the EU or EEA. If transfers occur in the future, data protection will be ensured using EU Standard Contractual Clauses or similar safeguards.

Principles of Register Security
Personal data is stored electronically on servers protected by technical and organizational measures, such as:

• Server security and backups
• Employee training on data protection
• Password and access control policies
  Access to data is granted only to those whose work duties require it. All credentials and passwords are personal.
  
  

Data Subject Rights
Data subjects have the following rights:

• Right to Access: The right to know whether their data is being processed and to request access to their data.
• Right to Rectify: The right to request the correction of incorrect data.
• Right to Erasure: The right to request deletion of their data.
• Right to Restrict Processing: The right to request restrictions on data processing.
• Right to Object to Processing: The right to object to data processing.
• Right to Data Portability: The right to transfer their data to another system.
• Right to Withdraw Consent: The right to withdraw consent at any time.
• Right to File a Complaint: The right to file a complaint with a supervisory authority (Office of the Data Protection Ombudsman).
  All requests related to these rights can be sent to privacy@workbana.com.
  
  

Use of Cookies
The Workbana service uses cookies to improve user experience and ensure service functionality. Cookies are stored on the user’s device and help gather information about service usage.
We use the following types of cookies:

• Essential Cookies: Required for core service functions.
• Analytics Cookies: Used for analyzing and improving service usage.
• Marketing Cookies: Used for targeted content and marketing measurement.
  Users can block cookies in their browser settings, but this may affect service functionality.
  
  

Data Processors and Subcontractors
We use subcontractors (e.g., cloud services) to provide the service. All subcontractors have appropriate contracts in place to ensure GDPR-compliant data protection.

Profiling and Automated Decision-Making
Profiling may be used in the service to assess job seekers’ suitability. Profiling is used to optimize service functionality and does not have legal effects on data subjects’ rights.

Minors and Age Restrictions
The service is not intended for users under 16 years of age. Users under 18 must obtain parental consent to use the service.

Contact Information of the Supervisory Authority
Data subjects have the right to file a complaint with the supervisory authority. In Finland, data protection is supervised by:
Office of the Data Protection Ombudsman
Email: tietosuoja@om.fi
Phone: +358 29 566 6700
Address: P.O. Box 800, 00531 Helsinki, Finland

Changes to the Privacy Policy
Workbana Oy reserves the right to change this privacy policy as needed. Changes will be notified to users via email or through the service. Data subjects can always check the latest privacy policy on Workbana’s website.