Last updated: 1 January 2026

This Privacy Policy applies to the TestHouse Enko Oy website enko.fi and to the processing of personal data through the contact and recruitment services available on the website.

TestHouse Enko Oy processes personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 (GDPR), the Finnish Data Protection Act (1050/2018), and other applicable legislation.

1. Data Controller
TestHouse Enko Oy
Business ID: 2634240-4
Website: enko.fi

If you have any questions regarding the processing of your personal data or wish to exercise your rights under data protection legislation, you may contact TestHouse Enko Oy.

2. What Personal Data Do We Process?
The personal data we process depends on how you use our website.

Contact Form
When you use the contact form, we may process information such as:

name
email address
company or organisation
the content of your message
other information you provide voluntarily through the form
technical information, such as IP address and the time of submission, where this information is collected by the technical system used for the form.
We process this information in order to respond to your enquiry and handle the matter concerned.

Recruitment
Personal data related to recruitment may be processed through the Teamtailor recruitment service used by TestHouse Enko Oy. This may include:

name and contact details
employment history and education
CV and application information
other information provided by the applicant
notes and assessments related to the recruitment process
information concerning references, where applicable
other information provided by the applicant during the recruitment process.
Applicants should avoid providing unnecessary sensitive personal data or other special categories of personal data unless such information is necessary and there is an appropriate legal basis for processing it.

3. Purposes of Processing Personal Data
We process personal data for the following purposes:

responding to enquiries and handling contact requests
managing customer and business relationships
managing recruitment processes and processing applications
assessing applicants and communicating with them during the recruitment process
maintaining the functionality, security and usability of the website
analysing website traffic and usage
measuring website marketing and advertising performance where the required consent has been given
complying with legal obligations and establishing, exercising or defending legal claims.

4. Legal Grounds for Processing
Depending on the circumstances, the processing of personal data is based on one or more of the following legal grounds under the GDPR:

Legitimate interests:
Processing contact requests, managing customer and business relationships, maintaining website security, and carrying out other legitimate business activities of TestHouse Enko Oy.

Contractual measures:
Processing that is necessary to take steps at the request of the data subject prior to entering into a contract or to perform a contract.

Consent:
Processing related to cookies, analytics, marketing or similar purposes where consent is required under applicable legislation.

Legal obligation:
Processing that is necessary for TestHouse Enko Oy to comply with a legal obligation.

In recruitment, personal data is primarily processed for the purpose of carrying out the recruitment process and assessing an applicant’s suitability for a position. Where applicable, the applicant may be asked to provide separate consent for retaining their information for future recruitment opportunities.

5. Disclosure of Personal Data and Data Processors
TestHouse Enko Oy does not sell personal data or disclose personal data submitted through the contact form to third parties for their own marketing or other independent purposes.

We may, however, use technical service providers and other data processors to process personal data on our behalf. Such service providers process personal data only for the purposes defined by TestHouse Enko Oy and in accordance with our instructions and applicable data protection legislation.

The recruitment service Teamtailor, provided by Teamtailor AB, is used for recruitment purposes. Teamtailor acts as a service provider and data processor on behalf of TestHouse Enko Oy where applicable.

Personal data may also be processed by service providers responsible for website hosting, technical maintenance, email services, information security and other services necessary for operating the website.

Personal data may be disclosed to public authorities where disclosure is required or permitted by law.

6. Cookies, Analytics and Marketing Technologies
The enko.fi website may use cookies and similar technologies to ensure the functionality of the website and to analyse website usage and marketing performance.

Depending on the services and features in use, the website may use technologies provided by third parties, including:

Google services, such as Google Analytics and Google Tag Manager
Meta services and Meta Pixel
LinkedIn Insight Tag
cookies and technologies provided by Teamtailor.
Third-party analytics and marketing technologies are used in accordance with applicable legislation and, where required, with the user’s consent.

You can manage your cookie preferences through the cookie settings available on the website.

7. Teamtailor and Recruitment Data
Personal data submitted as part of a recruitment process is stored and processed through the Teamtailor recruitment system.

Teamtailor provides data protection features that allow organisations to manage candidate data, retention periods, consents and data subject requests.

Applicants have the right to request information about the processing of their personal data and, where applicable, request the deletion of their personal data in accordance with applicable legislation.

Recruitment data is retained only for as long as there is a necessary and lawful reason to retain it. The retention period depends on the recruitment process, any consent given for future recruitment and applicable legal requirements.

8. Retention of Personal Data
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.

Contact form information is generally retained for as long as necessary to respond to and handle the enquiry, manage a potential customer or business relationship, or otherwise deal with the matter concerned.

Recruitment data is retained in accordance with the recruitment process and any applicable consent for consideration in future recruitment.

Personal data that is no longer necessary is deleted or anonymised appropriately.

9. Transfers of Personal Data Outside the European Economic Area
Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, TestHouse Enko Oy ensures that the transfer is carried out in accordance with applicable data protection legislation and that an appropriate transfer mechanism is in place, such as the European Commission’s Standard Contractual Clauses or another legally recognised safeguard.

10. Your Rights
Under applicable data protection legislation, you have the right to:

obtain information about the processing of your personal data
access your personal data
request correction of inaccurate or incomplete personal data
request deletion of your personal data in certain circumstances
request restriction of processing in certain circumstances
object to the processing of your personal data in certain circumstances
withdraw your consent at any time where processing is based on consent
receive your personal data in a structured, commonly used and machine-readable format where the applicable legal requirements for data portability are met.
Withdrawing consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

You can exercise your rights by contacting TestHouse Enko Oy.

You also have the right to lodge a complaint with the competent data protection authority. In Finland, the competent supervisory authority is the Office of the Data Protection Ombudsman.

11. Data Security
TestHouse Enko Oy takes appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, destruction and other unlawful processing.

Access to personal data is restricted to persons who require access as part of their duties.

12. Changes to This Privacy Policy
TestHouse Enko Oy may update this Privacy Policy from time to time, for example due to changes in legislation, services or the way personal data is processed.

The latest version of this Privacy Policy is always available on enko.fi.

TestHouse Enko Oy
Business ID: 2634240-4
enko.fi