Last update: January 12, 2026
PRIVACY POLICY
How we collect, process and protect the personal data of our job applicants, job candidates and employees
General
We respect your privacy and are committed to protect it. This privacy policy contains information about how we collect and use personal data relating to job applicants and candidates as well as employees. It also describes what rights you have as an applicant and as an employee regarding your data.
Beamex Oy Ab collects, uses and stores personal data relating to you in accordance with this privacy policy and applicable laws. We may also make updates to this privacy policy when developing our business operations or when laws and regulations change, so visit this policy from time to time.
Controller
The controller regarding processing personal data as described in this policy is Beamex Oy Ab (hereinafter also “Beamex”, “we” or “us”):
Beamex Oy Ab
Business ID: 0181602-8
Ristisuonraitti 10
68600 Pietarsaari
FINLAND
+358 10 550 5000
Email: career@beamex.com
Employees: In HR matters, you can contact Katja Oravala (salary@beamex.com).
You can use the above contact details also in privacy-related matters.
FINLAND
+358 10 550 5000
Email: career@beamex.com
For what purposes do we collect and use your personal data?
We collect, store and use data about you only for predefined purposes. The main purposes for processing personal are outlined below.
Employees
We process personal data relating to employees for the following main purposes:
- Fulfilling rights and obligations relating to employment agreements
- Normal human resources management
- Payroll and payment of salaries
- Fulfilling other employment-related rights and obligations, e.g. those based on law and collective agreements
- Appearing in corporate and marketing videos and materials (agreed usually with an employee on a case by case basis)
We must fulfill our obligations as an employer in relation to the requirements of the employment agreement, legislation, collective agreements and various authorities. Such processing is based on legal obligation or fulfillment of an agreement.
The processing of personal data is also necessary to fulfill our legitimate interests so that we can fulfill our obligations as an employer in relation to the employment contract, legislation, collective agreements and the requirements of various authorities. As an employee, you have a reasonable expectation in terms of your existing employment relationship to expect that we will as an employer process your data described in this privacy policy. Taking into account the purposes mentioned above, your justified expectations and the nature of the data, we consider that this processing does not conflict with your fundamental rights or freedoms.
We process information related to work ability and health, and only conduct tests and evaluations within the limits of the law when your position requires it or if work-related issues justify them. Health information is processed to determine if there is a valid reason for an absence from work or when necessary for the payment of sick leave or other similar health-related benefits. Additionally, health data may be processed in other situations specifically regulated by law. The processing of personal data related to work ability is based on our legal obligation.
Various test data, references, suitability assessments, drug testing and other health-related checks and examinations are based on your consent.
Recruiting and job candidates
We process personal data relating to recruitment so that we can receive and process job applications and make decisions about open positions or applications, and, ultimately, offer employment and conclude employment contracts.
The processing of job candidates’ personal data is necessary to fulfill our legitimate interests. When you apply for a position, we must process your necessary personal data so that we can take you into account when making a decision about offering employment. When sending a job application, you have a reasonable expectation that we will process the personal data as described in this privacy policy, as it is data that is commonly processed in connection with recruitment. Taking into account the purposes mentioned above, your justified expectations, the nature of the data, and the fact that you can object to the processing as described below, we consider that the processing does not conflict with your fundamental rights or freedoms.
When we offer employment to a person, we must also process personal data for preparing an agreement.
Various test data, references, suitability assessments, drug testing and other health-related checks and examinations as well as personal data from third parties are processed based on your consent.
What data we collect about you and from which sources?
We collect personal data about you mainly from yourself when contacting us or data that is generated during employment at Beamex. We also may at our consent get personal data from public sources, social media channels (e.g. LinkedIn) or from current or previous colleagues or supervisors. We may also receive personal data from a recruiting consultant or a consultant performing tests during a recruiting process. Our recruiting decisions are based always on information given by you or with your consent from other sources. Employee data is received also from tax authorities.
Job applicants provide us typically following data:
- Basic details (name, birth date, contact details)
- Education, work experience, skills
- Possible job application and resume
- Job applicants data relating to applying for a position
- Data from personality and aptitude tests
Relating to job applicants or candidates, we may get following data from public sources, such as LinkedIn:
- More specified data relating to education, work experience and skills
Relating to employees, we usually collect and process following personal data:
- Data usually provided by the employee: name, address, phone, birth date, social security id, gender, bank account, education, degrees, performance reviews, emergency contact, external training
- Data usually created by the employer: start/end date of employment, group status, nature of employment contract, working time, nature of employment, work time tracking, pension system, collective agreement, insurance policy, cost center, department, supervisor, skills, language skills, position, position specific training, employment related documentation, internal trainings, employer’s property
- Other data: performance management information, such as development discussions and possible warnings; statements related to working capacity and state of health (if/when applicable), work ability assessment and sick leave certificates; work travel information (if any); absence information
- Third party sources: tax data
Who uses the data and is it transferred to anyone else?
Primarily your personal data is used by our employees when they need to perform their work tasks. We may also subcontract some processing of personal data, such as the systems used for storing data (majority of personal data is in electronic form). In these situations we make sure with contracts and otherwise that the confidentiality is maintained and personal data processed in compliance with laws. We may also transfer data to a third party if required by law or by an authority. We may also transfer personal data if we would be a party to a merger or an acquisition.
We often use service providers when recruiting people. These companies are in contractual relationship to us and they use your personal data strictly for our benefit.
We do not sell or rent personal data for marketing purposes.
Is your data transferred outside the European Union (EU)?
Personal data is primarily processed within the EU/EEA area, but transfer of personal data outside the EU is possible. For instance, possible transfers could concern such situations, where some of the servers where your personal data is stored or other services providers are located outside the EU. If this happens, we make sure that your data is transferred and processed in a legal manner with adequate safeguards, such as by using the EU Standard Contractual Clauses. When we transfer personal data as a data controller to a data processor that processes personal data on our behalf and is located outside the EU/EEA, we rely on module 2 of the Standard Contractual Clauses. We also incorporate by reference the Standard Contractual Clauses to many of our own agreement templates and terms and conditions. You can read more about the use of Standard Contractual Clauses from here.
How long is your personal data stored?
Job applicants
With your consent, we store your data for 12 months. Retention periods may also be based on legal obligations or on the period for making legal claims. We may also update the data if necessary. If consent was the only basis for processing the data, we delete the data after the consent is withdrawn.
Employees
We do not store your data for a longer period than necessary for their purpose or for longer than necessary for the performance of a contract. Retention periods may also be based on applicable laws, such as employment contracts act as well as bookkeeping and tax laws. We may also update the data if necessary.
Following retention periods also apply:
- the information needed to write the employment certificate can be kept for 10 years after the end of the employment relationship;
- payroll records can be kept for 10 years after the end of the accounting period;
- travel, expense reimbursement and other payment receipts can be kept, e.g. for at least the current year and the following 6 years;
- general employment data can be stored throughout the employment and for approximately 24 months after the employment has ended, due to the general time limit for presenting legal claims; and
- a list of employees exposed at work to biological agents that cause serious danger or serious illness to persons must be kept for at least 10 years after the end of the exposure.
How is your personal data stored and kept secure?
Your data is stored on servers, which are secured according to general industry standards and practices. We consider and keep your personal data confidential and do not disclose them to anyone else at Beamex than those who need it for their work or confidentially to our specific partners based on contracts we have made with them. Access to your personal data has been protected with user-specific logins, passwords and user rights.
All recruitment data is considered confidential, so we aim to limit the group of people who have access to applications and resumes. We also take into consideration your wishes relating to confidentiality.
Is it mandatory to provide personal data? What happens if you don’t give it to us?
In recruitment situations it is not mandatory to provide us information. Everything happens on a voluntary basis. However, if you don’t provide necessary information, we may not be able to process your application.
When you are an employee, we need to process certain personal data to fulfill contracts and legal rights and obligations related to employment.
Automated decision-making
We do not use automated decision making, such as profiling, in recruitment or employment matters.
What rights do you have relating to your personal data?
Manage your own data
If you have a user account for instance in our online recruitment platform or you are an employee, to a certain extent you may be able to access your own personal data and manage the data in your user account.
Withdraw your consent
If we process personal data based on your consent, you can at any time withdraw your consent. Withdrawal of consent does not affect the legality of the processing of personal data that took place before the withdrawal.
Access to data
You have the right to receive confirmation from us as to whether we are processing personal data concerning you and to know what personal data concerning you we are processing (e.g. a copy of the data). In addition, you have the right to receive additional information about the basis of the processing of your personal data. However, the right to access personal data can be restricted based on legislation, the protection of privacy of other persons and the protection of business secrets.
Right to have errors corrected
You have the right to request that we correct any inaccurate or outdated personal data we have about you.
The right to delete data
You have the right to request the deletion of your personal data. Your data will be deleted if there is no longer a legal basis for processing personal data.
Right to prohibit direct marketing
You have the right to request that your personal data is not processed for direct marketing relating to open positions.
Right to object processing
If we process your personal data based on our legitimate interest, you have the right to object the processing of your data for personal reasons.
Right to restrict processing
You may have the right to restrict the processing of your personal data. In this case, the controller generally does not process personal data other than by storing the data. You may have this right, for example, when you dispute the accuracy of your personal data, if the processing is against the law, or if you have objected to the processing of your personal data and are waiting for a response to the request for action in question.
Right to data portability
If we have processed your data on the basis of your consent or to fulfill a contract and the processing has taken place automatically, you have the right to receive the data you have provided us electronically in a commonly used machine-readable format so that the data can be transferred to another data controller.
How can you use your rights?
You can exercise your rights described above by contacting us, for example, by using the contact information provided in this statement. The use of your rights is basically free of charge for you. If you submit a request electronically, we will deliver the information electronically as far as possible, unless you request otherwise. If necessary, we may ask you to verify your identity or specify your request.
Complaint to the supervisory authority
If you believe that we do not process your personal data in accordance with this privacy statement or the applicable national and European Union data protection legislation, you can file a complaint with the supervisory authority if you wish. In Finland, the authority in question is the office of the Data Protection Commissioner (Office of the Data Protection Ombudsman, Tietosuojavaltuutetun toimisto, Street address: Lintulahdenkuja 4, 00530 Helsinki, FINLAND, https://www.tietosuoja.fi).
Can this privacy policy be updated?
We may make updates to this privacy policy when our operations change or develop. Also, changes in law may make it necessary to update this privacy policy. The changes become valid once we have published them in the form of an updated privacy policy. Please visit this page and read this privacy policy from time to time.