Privacy Policy

This privacy policy explains how Allocat processes personal data in relation to its consultancy exchange service platform (“Allocat Service”) and observes requirements under EU’s General Data Protection Regulation and applicable national laws. Personal data means information that allows a person to be directly or indirectly identified as an individual person.

Controller and controller representative

Allocat Oy

Address: Lapinlahdenkatu 16, FI-00180 Helsinki, Finland

Representative: Jyrki Kyläheiko

Email: info@allocat.app

Phone: +358400473978

Data subjects

Data subjects are persons who use the Allocat Service or visit Allocat website.

Purpose and legal basis of personal data processing

Personal data will be processed for the purpose of providing and developing the Allocat Service, in accordance with the legitimate interests of the controller.

For the sole purpose of providing the Allocat Service, personal data processing may also involve profiling to the extent permitted by law. Profiling means such processing where certain aspects relating to a person are evaluated by utilizing the personal data.

Additionally data is being processed for marketing purposes: analytics about website behaviour in order to develop marketing actions.

Personal data categories and sources

Only personal data that is relevant for the Allocat Service will be collected and processed, such as the following categories of personal data:

  • name
  • email
  • country of residence, EU citizenship
  • user role (candidate/company)
  • work skills and experience, language skills
  • education level
  • work history

Personal data will be collected though the Allocat Service.

Additionally website behaviour data is being collected with following cooperation partners in order to develop Allocat marketing:

  • Google LLC
  • Facebook Inc.
  • LinkedIn corporation
  • Hotjar Ltd.

In the sales meetings we use following tool to record the meeting. The recording is used for sales development, quality and training purposes.

  • Wudpecker

Personal data retention periods

Personal data will be stored and processed during the term of the user contract, and also thereafter as long as there are fair grounds for the processing but in no case longer than 3 months after the term of the user contract.  

The deletion of personal data will be performed following the controller’s data erasure procedures.

Recipients of personal data

Personal data will be disclosed only to company users when necessary for providing the Allocat Service.  

In addition, external hosting service providers (Amazon Web Services) and Google Analytics will be used for the purpose of data processing.

Personal data will not be transferred or processed outside the European Union.

Protection measures

Personal data will be protected by appropriate technical and organizational measures, such as access control and rights, event logging, protection of hardware and files, physical access restrictions, encryption of sensitive data, pseudonymization, user guidelines and supervision.  

All personnel and processors are obliged to keep personal data in strict confidence. Only authorized personnel and processors may access personal data.

Cookies

Cookies are utilized for enabling the correct operation of Allocat Service, and for analyzing how Allocat Service is used so that it can be developed and improved. Additionally cookies are being collected to target marketing actions. Website visitor can accept or decline the cookies with the help of the tool Cookiebot. If one or more cookies are blocked or removed, Allocat Service may not function properly. We use cookies from Google LLC, Facebook Inc., LinkedInCorporation and Drift to help us with support and to improve Allocat Service.  

Information that the cookies collect:

  • IP addresses
  • site pages visited
  • site page visit times
  • browser type
  • operating system
  • website visited before entering Allocat Service
  • information if the website visitor registers to Allocat service

Rights of data subjects

Each person shall be entitled to review personal data collected on them and have incorrect personal data rectified or erased. The persons shall be entitled to withdraw at any time the consents that they have given regarding the processing of personal data.  

Each person shall be entitled to request restriction of personal data processing, to object to processing of personal data, and to data portability of personal data, in accordance with EU’s General Data Protection Regulation. The persons are also entitled to lodge a complaint with a supervisory authority.

If the persons wish to exercise the above-mentioned rights, they should send a request to the controller using the contact details above.

Privacy notice date

This privacy policy has been published on 28th of August 2022.

Start increasing your utilization rate here!

Try for free by yourself or schedule a demo with our sales.