Privacy Policy

Privacy Policy

Last updated: 8 August 2026

This Privacy Policy explains how MEVISION Group Oy processes the personal data of website users, people who contact us, job applicants, people who register with our Talent Bank, and business partners.

1. Data Controller

MEVISION Group Oy
Business ID: 3637318-3
Urputie 1 D 40
00410 Helsinki
Finland

Website: https://mevisiongroup.fi
Email: info@mevisiongroup.fi
Telephone: +358 45 120 0944

Contact person for data protection matters: Marko Ekqvist.

2. Personal Data We Process

We may process the following personal data:

  • name, email address, telephone number and address details
  • the subject and content of an enquiry and any other material submitted to us
  • Talent Bank and job application information, such as education, work experience, skills, qualifications, licences, language skills, preferred work area, work preferences, availability, salary or fee expectations, CV and references
  • information about entrepreneurs and business partners, such as company name, Business ID, contact person, services, operating area, capacity and pricing
  • customer, contract, assignment, invoicing and payment information
  • information related to comments and user accounts, where applicable
  • technical data, such as IP address, browser type and version, device information, time of visit, pages viewed and server log data.

For the Talent Bank and recruitment, we request only information that is necessary for the relevant role or cooperation. Please do not submit sensitive personal data, such as health information, criminal record information or your personal identity code, unless its submission has been agreed separately and there is a lawful basis for processing it.

3. Purposes and Legal Bases for Processing Personal Data

We process personal data for the following purposes:

Enquiries, Quotations and Customer Service

We process information submitted through the contact form, by email or by telephone in order to respond to enquiries, prepare quotations, plan assignments and manage customer relationships.

Depending on the circumstances, processing is based on a contract, steps taken at the request of the data subject prior to entering into a contract, a legal obligation, or MEVISION Group Oy’s legitimate interest in conducting and developing its business and serving its customers.

Talent Bank, Recruitment and Assignment Matching

We process information submitted to the Talent Bank or in connection with a job application in order to assess an applicant’s skills and suitability, offer suitable employment or assignment opportunities, maintain contact, and prepare an employment relationship or other form of cooperation.

Processing in connection with the general Talent Bank is based on the applicant’s consent. Processing related to a specific role may also be based on steps taken at the applicant’s request prior to entering into a contract, the controller’s legal obligations and legitimate interests.

We process only information that is necessary for the position for which the person is applying. Information is collected primarily from the applicant. If information needs to be obtained from other sources, we comply with the Finnish Act on the Protection of Privacy in Working Life and obtain the applicant’s consent where required.

Partner Network

We process information about companies, entrepreneurs, light entrepreneurs and other partners in order to assess cooperation opportunities, maintain our partner network, communicate about assignments and manage contractual relationships.

Processing is based on consent, a contract, steps taken prior to entering into a contract, or MEVISION Group Oy’s legitimate interest in maintaining a partner network that supports its operations.

Website Operation and Security

We process technical data to ensure the operation of the website, compile usage statistics, investigate errors, prevent misuse and maintain security. Processing is based on our legitimate interest in maintaining a safe and functional online service.

The hosting service’s AWStats analytics may produce aggregated usage statistics from server logs. These statistics are used to assess website usage and technical performance and are not intended to create marketing profiles of individual visitors.

The use of cookies and similar technologies that are not strictly necessary for the operation of the website is based on the user’s consent.

4. Sources of Personal Data

Personal data is obtained primarily from the data subject, for example through online forms, by email, by telephone, when entering into a contract or during other communications.

Technical usage data is generated automatically when the website is used. Where necessary, we may verify information about a business partner or qualifications reported by an applicant using public registers or references provided by the applicant, within the limits permitted by law and with consent where required.

5. Voluntary Provision of Data

Contacting us and registering with the Talent Bank are voluntary. Information marked as mandatory on a form is required in order to process an enquiry or add an applicant to the Talent Bank. If the necessary information is not provided, we may be unable to respond to the enquiry, assess the application or offer an assignment.

6. Recipients of Personal Data and Parties Processing It

Personal data is processed only by MEVISION Group Oy employees and persons acting on our behalf who require the information to perform their duties.

We may use trusted service providers to process personal data, including:

  • website maintenance, hosting, backup and information security services
  • email and communications services
  • WordPress and plugins required for the operation of the website
  • Google Forms and Google Sheets for Talent Bank or partner forms
  • services for preventing spam and misuse
  • accounting, payroll, insurance and other services required to fulfil legal obligations.

Where these service providers act as processors, they process personal data on behalf of MEVISION Group Oy and in accordance with its instructions.

The name, skills, experience, qualifications and availability of a job applicant or person registered with the Talent Bank may be presented to a prospective client company in connection with a specific role or assignment. The applicant will be informed of the disclosure in advance, and consent will be obtained where required. Contact details will not be disclosed unnecessarily before an assignment has been agreed.

Data may also be disclosed to public authorities or other parties where required by law. We do not sell personal data to third parties.

7. Transfers of Personal Data Outside the EU or EEA

Some of our service providers, such as Google, may also process personal data outside the European Union or the European Economic Area. In such cases, we ensure that there is a valid basis for the transfer under the General Data Protection Regulation. The transfer mechanism may be, for example, an adequacy decision by the European Commission or the Standard Contractual Clauses approved by the Commission, together with supplementary safeguards where necessary.

More information about Google’s privacy practices: https://policies.google.com/privacy

8. Retention of Personal Data

We retain personal data only for as long as required by the purpose for which it is processed, the contractual relationship or applicable law.

  • Enquiries and related communications are generally retained for no more than 24 months after the matter has been concluded.
  • Talent Bank data and open applications are retained for no more than 24 months from receipt or the most recent update, unless the person renews their consent or requests earlier deletion.
  • Partner network data is retained for the duration of the cooperation and generally for no more than 24 months after the most recent contact, unless longer retention is necessary because of a contract, assignment or legal obligation.
  • Necessary data concerning a selected employee, person carrying out an assignment or contractual partner is transferred to the appropriate personnel, contract, customer or accounting records and retained in accordance with the applicable retention periods.
  • Accounting records are retained for the period required by law, generally six or ten years depending on the type of record.
  • Technical log data is deleted or overwritten in accordance with the service provider’s retention policy once it is no longer required for website security, maintenance or error investigation.
  • Comments and their metadata, where applicable, are retained for as long as the comment remains published or the data is required for moderation and the investigation of misuse. The data is then deleted or anonymised.
  • User account data, where applicable, is retained for as long as the account remains active or the data is otherwise required to provide the service.

Data may be retained for longer than the periods stated above where this is necessary for the establishment, exercise or defence of legal claims or to comply with another legal obligation.

9. Cookies

The website may use cookies and similar technologies for website operation, security, forms, user preferences and usage statistics.

Cookies that are strictly necessary for the operation of the website may be used without separate consent. Analytics, marketing and other non-essential cookies are set only with the user’s consent, where they are used. Users can manage their consent through the website’s cookie settings and delete cookies through their browser settings.

If commenting is enabled and you leave a comment, you may choose to save your name, email address and website in a cookie. This makes it easier to leave another comment, and the cookie is retained for no more than one year.

If the website provides user accounts or login functionality, WordPress may set cookies related to login details and display preferences. A temporary cookie used to determine whether the browser supports cookies is deleted at the end of the browser session. Login cookies are normally retained for two days, for two weeks if “Remember Me” is selected, and display preference cookies for no more than one year.

10. Comments and Media

If commenting is enabled, information entered in the comment form, together with the user’s IP address and browser version information, may be collected for comment moderation and spam detection.

An anonymised hash generated from the email address may be sent to the Gravatar service to check whether the commenter uses the service. Gravatar’s privacy policy: https://automattic.com/privacy/. After a comment has been approved, the commenter’s profile picture, where applicable, may be publicly visible in connection with the comment.

If images can be uploaded to the website, image files may contain location data, such as EXIF GPS data. Do not upload images containing unnecessary location data. The metadata of published images may be viewable or downloadable by other users.

11. Embedded Content from Other Websites

The website may contain content embedded from other websites, such as videos, images, maps, forms or social media posts. Using embedded content may be equivalent to visiting the relevant service provider’s own website.

The third party may collect information about the user, use cookies and monitor interaction with the embedded content in accordance with its own privacy practices. If the user is logged in to the relevant service, the service provider may associate the interaction with the user’s account. The user’s consent will be requested before non-essential embedded content is loaded where required by law.

12. Rights of the Data Subject

Under applicable data protection law, you have the right to:

  • receive information about the processing of your personal data
  • obtain access to personal data concerning you
  • request the correction of inaccurate or incomplete data
  • request the deletion of personal data where there is no longer a lawful basis for processing it
  • request the restriction of the processing of personal data
  • object, on grounds relating to your particular situation, to processing based on legitimate interests
  • withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before the withdrawal
  • receive personal data you have provided in a structured, commonly used and machine-readable format and transmit it to another controller where the requirements for this right are met
  • lodge a complaint with the Office of the Data Protection Ombudsman if you believe that your personal data has been processed unlawfully.

You can exercise your rights by contacting info@mevisiongroup.fi. We may request any additional information necessary to verify your identity. We will respond without undue delay and, as a rule, within one month.

Office of the Data Protection Ombudsman: https://tietosuoja.fi/en/notification-to-the-data-protection-ombudsman

13. Automated Decision-Making

We do not make decisions based solely on automated processing of personal data that would produce legal effects concerning a person or similarly significantly affect them. We do not use automated profiling to select job applicants.

14. Protection of Personal Data

Personal data is protected by appropriate technical and organisational measures. Access is restricted to people who require the data to perform their duties. Protective measures include access controls, passwords, secure connections, system updates, backups and the security practices of our service providers.

15. Updates to This Privacy Policy

We may update this Privacy Policy if our services, personal data processing practices or applicable law change. The current version will be published on this page, and the date of the latest update will be stated at the beginning of the Policy.