Privacy policy

Name of the register
Heron Innovations Oy (Heron Talent) customer and candidate register. We maintain our register based on European Union General Data Privacy Regulations. We process all information lawfully, fairly and in a transparent manner to the data subject.

Register controller
Heron Innovations OY
Company ID number: FI27405796
Address: Bulevardi 50, 00120 Helsinki
Email: jan@heroninnovations.com

Register processor
Heron Innovations OY 
Company ID number: FI27405796 
Address: Bulevardi 50, 00120 Helsinki
Email: jan@heroninnovations.com

For client relationship management we use a GDPR-compliant CRM system provider.
For candidate relationship management we use a GDPR-compliant ATS system provider.

For invoicing we use a GDPR-compliant invoicing service provider.

Data Protection Officer (DPO)
Heron Innovations Oy
Jan Luukkonen, CEO
jan@heroninnovations.com

Data processing consent
Our purpose for processing data is to find new recruiting opportunities and the best candidates for our clients.

Our purpose for collecting client data is related to business development, client relationship management, and marketing.

Our purpose for collecting candidate data is related to executive search, recruiting and staffing services including candidate sourcing, validation, and placement.

The content of collected data
We collect the following data from our clients and candidates:

– First and last name
– Job title
– Contact information
– A request for consent (approved or not approved)
– Website address (company site or portfolio site)
– CV or portfolio (only candidates)
– Profile links from social media (LinkedIn and Twitter)
– Meeting notes in text format

Data sources
We use the following data sources:
– LinkedIn, Twitter, Google Analytics, job boards and publication (paper or digital format), request for more information from our website.
– We collect personal data to our register when meeting clients or candidates in person, over the phone, via video calls or in events.

Personal data access / portability / modification
All our clients and candidates have a right to request access to their own data, a right to request modifying inaccurate or incomplete data, and a right to have their information forgotten. 

In the case of an access request, we will provide the data in a machine-readable format, e.g., CSV or XLS.

Data protection
All our register data is confidential. Only personnel who need the register data in their work have access to the data. We will not disclose any data to third parties unless there is an appropriate reason for doing so, e.g., recruiting projects. 

We also have selected all our software system providers based on their GDPR compliance and high standards of data protection.