Privacy Policy

Privacy notice pursuant to the EU General Data Protection Regulation (EU) 2016/679

Last updated: 26 October 2026

1. Data Controller

Monad Oy (Business ID 2850261-9)
Hatanpään valtatie 24, Dynamo Business Park
33100 Tampere, Finland

2. Contact for Data Protection Matters

[email protected]

3. Name of the Register

Monad Oy’s customer, marketing and job applicant register.

4. Purposes and Legal Bases for Processing Personal Data

We process personal data for the following purposes:

  • Managing customer relationships, customer service and communications
  • Developing, marketing and selling services and products
  • Organising events and distributing newsletters
  • Managing recruitment processes and processing job applications
  • Invoicing and fulfilling contractual obligations
  • Analysing website and marketing channel activity and targeting marketing

The legal bases for processing may include:

  • The data subject’s consent (e.g. subscribing to a newsletter)
  • Performance of a contract and related measures
  • Compliance with the data controller’s legal obligations
  • The data controller’s legitimate interests where there is a relevant relationship between the data subject and the controller (e.g. an existing customer relationship or a justified interest in our services).

Data subjects have the right to withdraw their consent at any time by contacting us at the address provided in Section 2.

Recruitment and Use of Jobilla

We use the Jobilla AI Recruiter service to receive applications, manage applicant information and communicate with applicants during recruitment.

The processing of job applications and recruitment-related communications is based on taking steps at the applicant’s request prior to entering into an employment contract (Article 6(1)(b) of the GDPR). The retention of information necessary to investigate possible legal claims relating to recruitment is based on our legitimate interests (Article 6(1)(f) of the GDPR).

Monad personnel responsible for recruitment review every application and make decisions concerning whether an application proceeds, is rejected, or results in the selection of a candidate.

5. Categories of Personal Data Processed

Depending on the circumstances, we may process the following information, for example:

Customers and Business Partners

  • Name and contact details (email address, telephone number, organisation and position)
  • Company details
  • Any feedback, participation in events and newsletter subscriptions
  • Additional information provided voluntarily
  • IP addresses and technical identifiers

Job Applicants

  • Name and contact details
  • Employment history, education and skills
  • Attachments (CV, portfolio and application)
  • Answers provided by the applicant to questions on application forms and recruitment questionnaires
  • Links to portfolios and professional profiles provided by the applicant
  • Recruitment-related correspondence and interview and assessment notes prepared by recruiters
  • Details of referees, if provided
  • Additional information provided voluntarily
  • IP addresses and technical identifiers

We process only personal data that is directly necessary in relation to the position applied for and the employment relationship.

Other Contacts (e.g. Enquiries Submitted Through Forms)

  • Name and contact details
  • Organisation and position
  • Additional information provided voluntarily
  • IP addresses and technical identifiers

6. Regular Sources of Personal Data

  • Information provided by the data subject (e.g. through forms, customer relationships or job applications)
  • Publicly available sources (such as websites and the Trade Register)
  • The data subject’s employer or another cooperating party

Job applicant data is collected primarily from the applicants themselves. We obtain the applicant’s consent before collecting information from other sources unless an exception is provided by law. We inform applicants of information obtained from other sources before using it in decision-making concerning them.

7. Disclosure, Transfer and Protection of Personal Data

Personal data is processed only by Monad employees who need it for their work, and only to the extent required by their duties. Personal data is not disclosed unless required by law or necessary for the provision of a service.

We use trusted service providers to process personal data (e.g. IT and marketing service providers). We use contractual arrangements to ensure that they process personal data in accordance with data protection legislation.

Jobilla Oy acts as a processor of job applicants’ personal data on behalf of Monad. Jobilla processes applicant data in accordance with our documented instructions under a data processing agreement. Monad Oy is responsible for the processing of applicant data as the data controller.

Jobilla uses subprocessors to provide its service, for example for data storage, message delivery and technical maintenance. An up-to-date list is available on Jobilla’s terms and privacy page.

8. Transfers of Personal Data Outside the EU or EEA

Personal data may be transferred outside the EU or EEA through certain service providers (e.g. cloud and marketing services). In such cases, we ensure the protection of personal data by using standard contractual clauses approved by the European Commission or other lawful safeguards.

9. Retention of Personal Data

We retain personal data only for as long as necessary for:

  • Maintaining customer and business relationships
  • Carrying out recruitment processes (maximum two years)
  • Complying with legal obligations.

Personal data is reviewed and deleted regularly when it is no longer needed.

10. Use of Cookies and Web Analytics

We use cookies and similar technologies on our website to improve the user experience, analyse traffic and target marketing.

We use Cookiebot’s Consent Mode solution to manage cookie preferences. It displays an up-to-date list of cookies in use and enables visitors to manage their consent choices. Cookies are activated only on the basis of the visitor’s choice.

Cookie, tracking and advertising platforms in use:

  • Google Tag Manager
  • Google Analytics
  • Google Search Console
  • Google Ads
  • HubSpot (forms, chat, job applications and marketing automation)
  • Leadfeeder
  • Meta (Facebook/Instagram) – Meta Pixel for advertising optimisation and targeting
  • Reddit – Reddit Ads Pixel for conversion tracking and advertising targeting

Visitors can disable cookies through their browser settings. However, doing so may affect the functionality of the website.

11. Rights of Data Subjects

  • Access their personal data and request to inspect it
  • Request rectification or erasure of personal data, or restriction of its processing
  • Object to the processing of personal data in certain circumstances
  • Withdraw consent at any time
  • Lodge a complaint with the supervisory authority (in Finland, the Office of the Data Protection Ombudsman).

The applicability of these rights depends on the legal basis for processing and the requirements of data protection legislation. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You can exercise your rights by contacting [email protected]. If necessary, we may request additional information to verify your identity.