Privacy Policy
This Privacy Policy explains how we collect and process personal data when you use our website or contact us. We operate in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish legislation.
​
1. Controller
eStaff Fabrik Oy
Business ID: 3355278-4
Address: Karaportti 5, 02610 Espoo, Finland
Email: privacy@esfabrik.fi
​
2. Purposes and Legal Bases for Processing
A. Website operation and security
We process technical data to deliver, secure and maintain our website. Legal basis: Legitimate interest (GDPR Art. 6(1)(f)) to maintain a secure and functional website.
B. Cookie-based analytics and performance monitoring
With your consent, we use analytical cookies to understand website usage and improve functionality. Legal basis: Consent (GDPR Art. 6(1)(a)). Analytics tools are configured to minimize personal data (e.g., IP anonymization where available).
​
C. Communication and inquiries
If you contact us, we process your email address and message to respond and provide requested content. Legal basis: Legitimate interest (GDPR Art. 6(1)(f)) or performance of pre-contractual steps (GDPR Art. 6(1)(b)).
​
D. Recruitment and job applications
If you apply for a position through an external recruitment platfrom or by emailing us directly, we process the information included in your application and attachments to assess your suitability for current and future positions. Legal basis: i) Legitimate interest (GDPR Art. 6(1)(f)) to evaluate candidates and ii) Steps prior to entering an employment contract (GDPR Art. 6(1)(b)). We do not request sensitive data (GDPR Art. 9). If voluntarily provided, it is processed only as permitted by law.
3. Categories of Personal Data We Process
A. Technical and website usage data
Collected automatically when visiting the site:
-
IP address (minimized where possible)
-
Device and browser details
-
Website interaction and navigation data
-
Session identifiers and security logs
-
Cookie preferences
-
Approximate region-level location
​
B. Communication Data
-
Email address
-
Any information included in your message or form submission
​
C. Recruitment data
-
Contact details
-
CV content and attachments
-
Data received from recruitment platforms
​
4. Cookies
Our use of cookies is explained in detail in our Cookie Policy. Optional cookies are used only with your consent.
​
5. Data Sharing and Transfers
We use trusted service providers who assist in operating our website and services:
-
Wix.com Ltd. (hosting and infrastructure)
-
Google LLC (analytics)
These service providers may process data outside the EU/EEA. Transfers use Standard Contractual Clauses (SCCs) or equivalent safeguards. We do not sell personal data or share it with third parties for their own marketing purposes.
​
6. Retention Periods
Technical and website data: Retained per Wix and analytics provider settings.
Communication data: Retained for up to 24 months, unless further correspondence requires more.
Recruitment data: Retained up to 36 months, then deleted or anonymized.
​
7. Your Rights
Under the GDPR, you have the right to:
-
Access, correct or delete your data
-
Restrict or object to processing
-
Withdraw consent (for future processing)
-
Receive your data in a portable format
-
You may contact your local data protection authority. In Finland, this is the Office of the Data Protection Ombudsman.
​​
8. Security
We apply appropriate technical and organizational measures to protect personal data, including secure hosting, encrypted connections and access controls.
​
9. Changes to this Privacy Policy
We may update this Privacy Policy when necessary. The latest version is available on this page.