You are here

Employee Candidate Data Protection Description

Effective Date: 17 February 2017



Data Controllers:


1) Konecranes Global Corporation, 2711339-8

Address: Koneenkatu 8, 05830 Hyvinkää, Finland

Telephone:  +358 20 427 11

2) Konecranes Plc, 0942718-2

Address: Koneenkatu 8, 05830 Hyvinkää, Finland

Telephone: +358 20 427 11


Contact Persons in Matters Related to Data File:

1) Lasse Toivonen (Data Protection Manager)

2) Lasse Toivonen (Data Protection Manager)

Address and telephone number as above.


Data File Name:


Konecranes Group Employee Candidate Data file


The Purpose for Processing and Use of the Personal Data:

The general purpose for processing and use of the personal data of data subjects (as defined below) is recruitment of personnel to Konecranes Group companies.

In detail the purposes for processing and use of the personal data include the following items:Recruitment and talent management (incl. data and document management);

  1. Reporting and analytics;
  2. IT system and process development;
  3. Access management;
  4. Fulfilling of employer duties, recruitment matters and rights of employee candidates and employers.

The purposes for the processing and use of personal data fulfill the requirements imposed by the applicable laws.


Data Subjects:


Konecranes Group employee candidates




Data Content:



Identification and general personal data such as:

  • First name;
  • Last name;
  • Street address;
  • Postal code;
  • City;
  • State;
  • Country;
  • Phone number;
  • Email address;
  • Title(s);

Education and work experience data such as:

  • Name and place of study;
  • Field of education;
  • Degree;
  • Major and minor subject(s);
  • Previous employer(s);
  • Previous position(s);
  • Duration(s) of employment(s);
  • Description(s) of tasks and responsibilities;
  • International experience;

Information of skills such as:

  • Language skills;
  • IT skills;
  • Driver’s license;
  • Other skills relevant to the position if any;

Recruitment management information such as:

  • Medical data (if any);
  • Application/cover letter;
  • CV;
  • Assessments;
  • Video interview;
  • Desired type and location of employments;
  • Area and tasks of interest;
  • Source of information about the position;


Regular Sources of Data:

Employee candidate, former employer(s), external resources supporting Konecranes business processes (e.g. recruitment consultants), public sources.


Regular destinations of disclosed data and whether the data is transferred to countries outside the European Union or the European Economic Area:


Personal data are not disclosed (to be independently used by other data controllers) regularly except within companies of Konecranes Group and even then at all times in accordance with applicable laws.

Personal data are transferred outside EU and/or EEA only as allowed by and in accordance with applicable laws (including EU directive 95/46/EC as the case may be).  

If personal data are transferred to external data processors (subcontractors or vendors), possibly residing outside EU and/or EEA, appropriate contractual arrangements, as required by the applicable laws, are executed to secure lawful and appropriate processing of personal data. Sensitive personal data (e.g. health data) may in some cases be included in these transfers.


Security Principles of Data File:

Personal data is protected by technical and organizational measures against accidental and/or unlawful access, alteration, and destruction or other processing including unauthorized disclosure and transfer of personal data.

Such measures include but are not necessarily limited to proper firewall arrangements, appropriate encryption of telecommunication and messages as well as use of secure and monitored equipment and server rooms. Data security is of special concern when third parties (e.g. data processing subcontractors) providing and implementing IT systems and services are retained.

Data security requirements are duly observed in IT system access management and monitoring of access to IT systems. Personnel processing personal data as part of their tasks is trained and properly instructed in data protection and data security matters.


Rights of Data Subject:

In accordance with the law the data subject has right to:

  1. access the personal data on him/her in the data file and at request, receive a copy of the recorded personal data;
  2. request inaccurate personal data to be rectified, incomplete personal data to be supplemented and outdated or obsolete personal data to be erased; and
  3. prohibit the processing of personal data for the purposes of direct marketing, market research and opinion polls.

In order to use these rights, the data subject shall contact the above mentioned contact persons in writing.

The data subject should note that applicable laws may contain restrictions and other provisions that relate to the above rights.