The processing of personal data in connection with Posti’s recruitment activities is the responsibility of Posti Group Finland Ltd, Posti Distribution Ltd, Posti Ltd, Posti Messaging Ltd, Posti Henkilöstöratkaisut Oy and Aditro Logistics AB.
PO Box 105, FI-00011 POSTI Street address: Postintaival 7 A, Helsinki Tel. +358 (0)600 94320 (EUR 1.84/answered call + local network charge/mobile call charge)
Data Protection Officer: tietosuoja@posti.com
Purpose and legal basis of personal data processing
Posti processes personal data for the purpose of managing the recruitment system of Posti Group Corporation’s subsidiaries (Posti Group). Data is collected on everyone who logs in to Posti Group’s recruitment system (internal applicants) and on any natural persons (external applicants) who log in.
Personal data is processed for the following purposes:
Announcing job vacancies at Posti Group to applicants
Accepting job applications for vacancies in the role of an employer
Searching the applicant database for suitable candidates for filling positions
Conducting communications with job applicants by sending them information about the different stages of the application process and, if necessary, requesting supplementary information
Preparing summaries of the information supplied by job applicants to support decision-making
Maintenance and development of Posti Group’s IT systems
Data subjects are entitled to delete their profiles, after which their data will no longer be available to the recruitment team.
Data processing is based on the job applicant’s consent, the implementation of the employer’s statutory obligations and legitimate interest (for instance, analysis and statistics).
Data processed in the human resources management register and its retention
The register contains the following information on job applicants:
Given name and surname
Email address
Gender
Citizenship
Date of birth
Phone number (home, work, mobile)
Street address, country, area, locality, postal code
Employment history
Education
Information regarding the applicant’s qualifications (driver's license, language skills, work experience at Posti)
Appendices (e.g., CV, photograph)
The applicant’s wishes regarding the job description
Language of correspondence
Free-form application text and additional information
Information related to the progress of the recruitment process and the actual selection
The following data on Posti Group’s internal job applicants: employee number, first and last name, email address, address, phone numbers (work, home) and any relocation information
The applicants’ work history is retained throughout the recruitment process. Any applications submitted after a recruitment decision has been made are archived and retained for a period of one year after the end of the application process.
Regular data sources
The data regarding job applicants is supplied by the job applicants themselves. Applicants are provided with a user ID and password for the Posti Group’s recruitment system to allow them to supplement their application and maintain their applicant data.
Any data regarding the recruitment process, interviews, assessments and selection are entered into the recruitment system by a human resource management expert (recruiter) or supervisor working for Posti Group.
Any data regarding Posti Group’s internal job applicants is automatically retrieved from Posti Group’s personal data system.
Secure disclosure of data
Applicant summaries are prepared using the data of registered applicants to facilitate decision-making in connection with recruitment.
Posti Group may share job applicants’ information with Posti Group companies within the limits of applicable law. Posti Group companies may only use information for the purposes described above in this document. The data in the register may also be processed by companies acting as subcontractors for Posti.
Due to the technical implementation of data processing, some data is physically located on the servers or hardware of external subcontractors, where it is processed via a technical remote connection. Personal data may, in such cases, be transferred outside the European Union and the European Economic Area, subject to the restrictions permitted by law. In all cases, the prerequisite for the disclosure and transfer of data is that the parties receiving and processing the data have entered into an agreement with Posti containing the standard clauses approved by the EU Commission, which ensures lawful processing of the data, or that another transfer mechanism permitted by data protection legislation is applicable.
Principles for the protection of the register
Both external job applicants and Posti Group’s employees need a username, password and an email address to use the recruitment system.
In addition, only persons employed by Posti Group or authorized by the Posti Group who need the data for their duties have access to the data and the databases in recruitment register are protected by personal usernames and passwords. Posti Group requires both its personnel and partners to commit to processing data confidentially.
Data subjects rights, access, rectification and objection
The data subject has the right to obtain information about the processing of their personal data, to review their personal data and to request the rectification of inaccurate or incomplete data. The data subject may request the deletion or transfer of personal data or demand restriction of processing or object to the processing of personal data based on particular personal situation. When processing is based on consent, consent can be withdrawn at any time.
Job applicants who have logged in to Posti Group’s electronic recruitment system can view, change and delete the information they have submitted. However, Posti Group’s internal applicants cannot change their personal, address or contact information using the recruitment system.
Make a data request
You can submit a data request regarding the information stored about you in Posti’s data registers. You can make the request as an authenticated user, as this allows us to process your request faster. Authentication can be done with your Posti user credentials or through bank credentials or a mobile certificate.
Make a data request Authenticate first with your Posti user credentials or through bank credentials or a mobile certificate.
If you do not use our digital services or are making a request on behalf of, for example, your dependent or ward, we recommend using the printable form below. Send the completed form and any required authorizations in an envelope with a postage stamp to the address indicated on the form. You can also make the request in person at Posti’s headquarters, located at Postintaival 7A, Helsinki.
Processing the data request
We process your data request without undue delay and will respond within one month of receiving the request. Responses to requests submitted by post will be delivered as a registered letter to the address listed in Posti’s address register. You are entitled to receive your personal data free of charge. If your inquiry is about something other than a formal data request, you can receive faster assistance through our customer service.
Requests for review, rectification, and completion can also be made by visiting Posti Group Corporation’s head office in person at Postintaival 7 A, Helsinki, or by sending a request form to Posti, P.O.Box 8030, 00002 Helsinki. For other than Finnish citizens reply is provided by registered letter.
Requests will be handled on a case-by-case basis, as these rights may be subject to restrictions due to the circumstances.
If the data subject believes that the processing of their personal data violates data protection legislation, they have the right to file a complaint with a supervisory authority, particularly in the Member State where the data subject has their habitual residence or place of work, or where the alleged infringement of the GDPR has occurred.
In Finland the supervisory authority is the Data Protection Ombudsman. More information is available on the Data Protection Ombudsman's website: tietosuoja.fi.
In Sweden, the supervisory authority is the Integritetsskyddsmyndigheten. More information is available on website: imy.se.
Changes:
26.9.2024
Transval has switched to the same recruitment system with Posti.
Posti Group does not have Group companies outside the EU/EEA.