At the moment, our team is complete. However, you can send an open application to tyopaikka@ursula.fi

PRIVACY POLICY: 

1. Data controller
   Oy Ursula, Pursimiehenkatu 27, 00180 Helsinki Café Ursula, Ehrenströmintie 3, 00140 Helsinki
2. Contact Person Responsible for the Register
   Katriina Lehtonen, kaivopuisto@ursula.fi

3. Name of the Register
   Employee Register
   Job Applicant Register

4. Legal Basis and Purpose of Personal Data Processing
   The legal basis for processing personal data in accordance with the EU General Data Protection Regulation (GDPR) is:
   • The individual’s consent (documented, voluntary, specific, informed, and unambiguous)
   • A contract to which the data subject is a party
   • Law (employer’s obligation to retain employee data)
   • The legitimate interest of the data controller (e.g., customer relationship prior to a contract, employment relationship, membership).
   The purpose of processing personal data is the management of employment relationships and recruitment. The data will not be used for automated decision-making or profiling.

5. Register Data Content
   The data recorded in the register includes: Legally mandated employment information and job applications from applicants. Employee data is retained for the period required by law. Job applicant data is retained for a maximum of one year. The IP addresses of website visitors and cookies necessary for the functionality of the service are processed on the basis of legitimate interest, for example, to ensure information security and to collect statistical data on website visitors when these can be considered personal data. Consent is requested separately for third-party cookies when necessary.

6. Regular Data Sources The data recorded in the register is obtained from the individuals themselves as well as through employment. The contact information of representatives of companies and other organizations can also be collected from public sources such as websites, directory services, and other companies.
    

7. Regular Disclosures of Data and Transfer of Data Outside the EU or EEA
   Data is not disclosed to third parties.

    

9. Principles of Register Protection

   The processing of the register is conducted with care, and information processed through information systems is appropriately protected. When register data is stored on Internet servers, both the physical and digital security of the hardware is adequately maintained. The data controller ensures that stored information, server access rights, and other critical information for the security of personal data are handled confidentially and only by employees whose job duties require it.

    

10. Right to Inspection and Right to Request Correction of Information

    Every individual in the register has the right to inspect the information stored about them in the register and to request the correction of any inaccurate information or supplementation of incomplete information. If a person wishes to inspect the information stored about them or request correction, they must submit a written request to the data controller. The data controller may request the requester to prove their identity if necessary. The data controller will respond to the individual within the timeframe stipulated by the EU General Data Protection Regulation (usually within one month).

11. Other Rights Related to the Processing of Personal Data

    Individuals in the register have the right to request the deletion of their personal data from the register (“right to be forgotten”). Additionally, data subjects have other rights under the EU General Data Protection Regulation, such as the right to restrict processing of their personal data in certain situations. Requests should be submitted in writing to the data controller. The data controller may request the requester to prove their identity if necessary. The data controller will respond to the individual within the timeframe stipulated by the EU General Data Protection Regulation (usually within one month).