Kaldet

Legal

Privacy Policy

How Kaldet processes personal data across the Platform.

Privacy Policy

Manual profiles at launch: CV AI assistance is unavailable until EU processing is verified. You can write and edit your profile, upload your CV and use ordinary job matching without AI assistance. Existing AI opt-ins do not enable CV processing in this release. Kaldet does not send profile text to AI for background matching explanations. Disabling assistance cannot recall requests sent before this restriction.

Current availability: Paid placements are not currently offered. References to billing and payment records below apply only to historical records, if any.

Date of publication: [DD-MM-YYYY]

Kaldet operates a job platform (the "Platform") at kaldet.com, connecting job seekers with employers in Finland's new and emerging industries. In this privacy policy we explain how we process your personal data if:

  • You visit the Platform (you being a "Visitor").
  • You create an account or profile with us, join our waitlist, set up job alerts, or apply for a job through the Platform (you being a "Job Seeker").
  • You create an employer account, post a job, purchase a paid placement, or receive applications through the Platform (you being an "Employer").

This privacy policy also describes the rights you have when we process your personal data, and how you can exercise them.

When we refer to a "User" in this privacy policy, we mean any Visitor, Job Seeker, or Employer, unless stated otherwise.

1. About the processing of personal data

Personal data is all information that can be directly or indirectly linked to a living, physical person. Examples of personal data are name, email address, telephone number, and IP address. Processing of personal data is any use of personal data, such as collecting, storing, analysing, sharing, and deleting it.

There are laws and regulations on how organisations may process personal data, known as data protection laws. The main ones that apply to our use of your personal data, as described in this privacy policy, are the EU General Data Protection Regulation (2016/679, "GDPR") and the Finnish Data Protection Act (Tietosuojalaki 1050/2018).

Most obligations under the GDPR apply to the data controller. A data controller is the party that decides why personal data will be processed and how the processing will be carried out. A data controller can use a data processor. A data processor may only process personal data as instructed by the data controller, and may not use it for its own purposes.

Kaldet is the data controller for the processing of your personal data described in this privacy policy.

Please note one point that matters for Job Seekers. When you apply for a job through the Platform, we pass your application to the Employer who posted that job. From the point the Employer receives your application, that Employer is an independent data controller for how they use your data in their own recruitment. Their handling of your data is governed by their own privacy policy, not this one.

2. What personal data do we process?

All Users

  • Device information. When you visit the Platform, we collect information about your device, such as IP address, browser type and version, session behaviour, traffic source, screen resolution, preferred language, approximate geographic location, operating system, and device settings and usage.
  • Technical and statistical data. When you visit the Platform, we collect technical and statistical data about your use of it, such as which pages you visit and your activity on the site.
  • Communications data. We collect and store your communication with us, including the content of that communication. This may include the content of emails, support messages, survey responses, and information you add to your account.
  • Contact details. Such as your name, email address, telephone number, and, where relevant, physical address.
  • Account data. Such as your login credentials, account settings, and preferences.

Job Seekers

  • Profile information. Such as your job title, work history, skills, education, sector interests, location preferences, and any other details you add to your profile.
  • Application information. Such as your CV, cover letter, work samples, answers you provide when applying for a job, and a record that you opened your email client to apply to an email-based listing. An email-client record shows application intent; it does not confirm that the email was sent or received.
  • Job alert and preference data. Such as the sectors, roles, and locations you follow, and the alerts and digests you have signed up for.
  • Waitlist data. Such as the email address and any details you provide when you ask us to notify you about the Platform.

Employers

  • Employer and job posting data. Such as company name, the details of the roles you post, and the content of listings, including any paid placement.
  • Applications received. The applications and candidate data that Job Seekers submit to your roles through the Platform.
  • Billing data. Such as billing name, billing address, business identifier, and the transaction records relating to any paid placement you purchase. We do not store full payment card numbers; card payments are handled by our payment provider.

3. Where do we receive your personal data from?

All Users

  • From the Platform. When you visit the Platform, we collect technical and statistical information about how you use it, along with information from your device.
  • Directly from you. Most of the information we process about you comes directly from you, for example when you create an account, post a job, apply for a role, or contact us. You can choose not to provide certain information, although some personal data is necessary for us to provide the service or process your request.

Job Seekers

  • From your profile and applications. We receive the information you enter into your profile and the applications you submit through the Platform.

Employers

  • From your account and listings. We receive the information you enter when you create an employer account and post roles.
  • From Job Seekers. We receive the applications and candidate data that Job Seekers submit to your roles.

4. For what purposes do we process your personal data?

Operate the Platform and provide your account. Affected Users: Job Seekers, Employers. Categories of personal data used: Contact details; Account data; Profile information; Employer and job posting data.

Publish job listings and facilitate applications between Job Seekers and Employers. Affected Users: Job Seekers, Employers. Categories of personal data used: Profile information; Application information; Employer and job posting data; Applications received.

Send you service messages relating to your account and activity, such as confirmation emails, application updates, password resets, security alerts, and notices that a role is live or expiring. Affected Users: Job Seekers, Employers. Categories of personal data used: Contact details; Communications data; Account data.

Send you job alerts, digests, and waitlist notifications that you have signed up for. Affected Users: Job Seekers. Categories of personal data used: Contact details; Job alert and preference data; Waitlist data.

Process payments for paid placements and keep the records we are required to keep. Affected Users: Employers. Categories of personal data used: Billing data; Communications data.

Collect information about your use of the Platform using cookies and similar technologies, as described in our Cookie Policy. Affected Users: Visitors. Categories of personal data used: Device information.

Maintain, develop, test, and secure the Platform, and prevent fraud and misuse. Affected Users: All Users. Categories of personal data used: Device information; Technical and statistical data; Account data.

Analyse how the Platform and its content are used and performing, to produce statistics and improve the service. Affected Users: All Users. Categories of personal data used: Device information; Technical and statistical data.

Ask for your participation in surveys and gather feedback. Affected Users: All Users. Categories of personal data used: Contact details; Communications data.

Protect and enforce our rights and the rights of others, for example in connection with legal claims. Affected Users: The Users affected by the legal issue, which may include any category above. Categories of personal data used: All the categories listed above may be used for this purpose.

5. Who do we share your personal data with?

Employers, when you apply for their roles. When a Job Seeker applies for a job through the Platform, we share the application with the Employer who posted that role, so they can consider it. As explained in Section 1, that Employer then acts as an independent data controller.

Our service providers. We share your personal data with the suppliers who provide the technology behind the Platform. These include our hosting provider, our transactional email provider, our payment provider, and our analytics providers. These suppliers act as our data processors and may only use your data as instructed by us.

Companies providing cookies on the Platform. If you consent, cookies may be set by companies other than us, who use the data collected in accordance with their own privacy policies. You can find details in our Cookie Policy.

Authorities and other public bodies, when required. We share your personal data with authorities when we have a legal obligation to do so.

Parties involved in legal proceedings. Where needed to protect or defend our rights, we may share your personal data with public authorities or other parties involved in a potential or existing legal proceeding.

Mergers and acquisitions. In connection with a potential merger, sale of assets, financing, or acquisition of all or part of our business, we may share your personal data with other parties involved in that process.

6. On what legal bases do we process your personal data?

To process your personal data, we need a legal basis, meaning a reason for the processing that is justified under the GDPR. Depending on the processing, we rely on the following.

  • Performance of a contract. We process your personal data to provide the Platform, your account, and the services you request, such as posting a role or applying for one, on the basis of our terms of service with you.
  • Legitimate interest. We process your personal data where we have a legitimate interest that is not outweighed by your rights, for example to operate and improve the Platform, to keep it secure, to prevent fraud, and to protect our legal rights. You can contact us for more information about how we balanced these interests.
  • Consent. We rely on your consent for certain processing, for example non essential cookies, waitlist notifications, and job alerts and marketing emails. You can withdraw your consent at any time, as described in Section 9.
  • Legal obligation. We process certain personal data to comply with the law, for example keeping accounting and tax records for payments.

7. When do we transfer your personal data outside the EU or EEA, and how do we protect it?

We aim to process your personal data within the EU or EEA.

Some of our service providers, however, process personal data outside the EU or EEA, or have a parent company or subcontractor based outside it. Where this happens, we make sure a safeguard recognised by the GDPR is in place. These safeguards include:

  • An adequacy decision by the European Commission, confirming that the country in question offers a level of protection equivalent to the GDPR. This includes the EU-US Data Privacy Framework for transfers to certified organisations in the United States.
  • The European Commission's standard contractual clauses, where the recipient guarantees that GDPR level protection continues to apply and that your rights remain protected.

Alongside these, we apply appropriate technical and organisational measures to protect your personal data. You can contact us for more information about transfers of your personal data outside the EU or EEA.

8. How long do we keep your personal data?

  • Visitors. We keep your device and technical data for security and analytics purposes for up to one year. Retention periods for cookies are set out in our Cookie Policy.
  • Job Seekers. We keep your account and profile data for as long as your account remains active. Once you close your account, or after a period of inactivity, we delete or anonymise your data, unless we need to keep it for a legal reason. Applications you submit through Kaldet are kept for 12 calendar months after the role closes, unless you delete your account sooner. For historical closed roles without a reliable closure date, the 12 months run from the date we recorded as the retention go-live date, not from any later restart of the role. This describes our practice and is not a guarantee of legal compliance. Applications you have submitted to Employers outside Kaldet, or that an Employer has downloaded, are retained by those Employers under their own policies.
  • Employers. We keep your account and listing data for as long as your account remains active. We keep billing and transaction records for the period required by applicable accounting and tax law.
  • All Users. Where we process your personal data to protect and enforce our rights, we keep it until the relevant legal issue is fully and finally resolved.

9. What rights do you have, and how can you exercise them?

You have the following rights when we process your personal data. Some rights apply only when we rely on a particular legal basis.

To exercise any of these rights, you can log in to your account and use the settings there, or contact us at privacy@kaldet.com.

  • Right to be informed. You have the right to be informed about how we process your personal data, including if we plan to process it for a new purpose. We provide this through this privacy policy, through updates on the Platform, and by answering your questions.
  • Right of access. You have the right to know whether we process personal data about you, and to receive a copy of that data along with information about how we process it.
  • Right to data portability. You can request a copy of the personal data you provided to us, which we process based on a contract or your consent, in a structured, commonly used, machine readable format. Where technically feasible, you can ask us to transfer it directly to another recipient.
  • Right to erasure. In certain cases you have the right to have us delete your personal data, for example where it is no longer necessary for the purpose we collected it, where you withdraw your consent, or where you object and there is no overriding legitimate ground for the processing.
  • Right to object. You have the right to object, on grounds relating to your particular situation, to processing based on our legitimate interest.
  • Right to restrict processing. Where you believe the data is inaccurate, the processing is unlawful, or we no longer need the data, you can ask us to restrict the processing. You can also ask us to restrict processing while we assess an objection you have raised.
  • Right to rectification. You have the right to ask us to correct inaccurate data and complete data you consider incomplete.
  • Right to withdraw consent. Where we process your personal data based on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before you withdrew it.
  • Right to complain. If you have concerns about how we process your personal data, you can raise a complaint with the supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi). You may also lodge a complaint with the data protection authority in your own country of residence.

10. Where can you turn with questions?

If you want to exercise your rights, or you have any questions, comments, or concerns about how we handle your personal data, you can reach us at privacy@kaldet.com.

Data controller: [Legal entity name], [registered address], business identifier [Business ID].

11. Updates to this privacy policy

We update this privacy policy when necessary, for example because we begin processing personal data in a new way, because we want to make the information clearer, or because it is required to comply with applicable data protection laws. We encourage you to check this page regularly. You can see when it was last updated at the top of the page.