Privacy Policy

Controller

Engineerly decides why and how the personal data described in this notice is processed. Our details:

Company

Engineerly OÜ

Privacy requests

hello@engineerly.fi

This notice covers this website, its forms and the mailboxes behind them.

Information we receive

What we receive depends on how you contact us.

• Inquiry form: your name, work email address, company, phone number (optional), the type of engineering support you need, your expected start date, estimated monthly hours, work mode, software and tools (optional), your project description and the language of the page you used.
• Open application: your name, email address, engineering discipline, portfolio or LinkedIn address (optional), background summary (optional) and the language of the page you used.
• Application for a position: your name, email address, portfolio or LinkedIn address (optional), cover note (optional), the position, your CV file (PDF, DOC or DOCX, up to 4 MB), the language of the page you used, and the time and wording of the consent you gave for storing your CV. Your CV may contain further details, such as your address, education and work history.
• Email: if you write to hello@engineerly.fi or careers@engineerly.fi instead of using a form, we receive your email address and everything in your message and its attachments, including a CV you choose to send.
• Technical data: when you load pages or send a form, our hosting provider processes your IP address, browser type and the page you requested in its request logs. We use these logs only to run and secure the website.
• Form protection: to limit repeated submissions, we turn your IP address into a shortened one-way code. We normally keep it for about 10 minutes after your latest attempt. If our usual storage is unavailable, it can stay in the short-lived memory of the server until that server restarts. The code is pseudonymous data, not anonymous, and it is not stored with your submission.

We do not ask for sensitive information such as health data or trade union membership. Please leave it out of your CV and your messages.

Purposes and legal basis

• Inquiries: we use your details to reply, to discuss engineering support and to prepare a possible agreement with your company. The legal basis is steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in handling business inquiries (Article 6(1)(f)).
• Open applications: we use your details to review your background and to contact you if a suitable opportunity arises. The legal basis is steps taken at your request before entering into a contract (Article 6(1)(b)) and our legitimate interest in keeping an open application for the period stated below (Article 6(1)(f)).
• Applications for a position: we review your application for that position, which is a step taken at your request before entering into a contract (Article 6(1)(b)). We store your CV on the basis of your consent (Article 6(1)(a)), which you give with the checkbox on the application form. You can withdraw your consent at any time; this does not affect processing that took place before.
• Emails: we use them to answer you and to keep a record of the matter, on the basis of steps before a contract (Article 6(1)(b)) or our legitimate interest in business correspondence (Article 6(1)(f)).
• Running and protecting the website: we use request logs, form protection and a notification to our staff when a submission arrives. The legal basis is our legitimate interest in keeping the website and its forms secure, available and free of spam (Article 6(1)(f)).

We do not use your details for marketing, we do not sell them, and we make no decisions about you by automated means.

Service providers and transfers

These service providers process personal data on our behalf to run the website. They act on our instructions and under data processing terms. Our own staff who handle your submission see it in the website's content management system.

• Vercel

  Hosting and delivery of this website, request logs, protection against abuse, the scheduled deletion of old submissions, and private storage of CV files. Pages are delivered through Vercel's global network; the application and the stored CV files are in the location shown.

  Location Frankfurt, Germany

• Neon

  Database service that stores the details sent through the inquiry and application forms, and the website's content.

• Upstash

  Short-term storage for the form protection codes and for the sign-in sessions of our staff.

• Resend

  Sends the email that tells our staff a submission has arrived. The email holds a reference number and the time, never the details you entered.

• Microsoft 365

  Email service for hello@engineerly.fi and careers@engineerly.fi, where the emails you send us are received and stored.

Some of these providers are based in, or belong to groups based in, the United States, and their staff can access data from outside the EU and the EEA. Where personal data is transferred outside the EU and the EEA, the transfer relies on a safeguard under Chapter V of the GDPR, such as the European Commission's adequacy decision for the EU-US Data Privacy Framework or the standard contractual clauses in the provider's data processing terms. You can ask us for details of the safeguard that applies by emailing hello@engineerly.fi.

We do not pass your details to anyone else, except to authorities where the law requires it.

How long we keep information

• Inquiries: deleted automatically 730 days after we receive them.
• Open applications: deleted automatically 365 days after we receive them.
• Applications for a position, with their CVs: kept until we delete them or you ask us to. There is no automatic deletion date. To have yours deleted, email hello@engineerly.fi.
• Emails to hello@engineerly.fi and careers@engineerly.fi: kept in our mailboxes only as long as we need them for the matter, then deleted.
• Form protection codes: normally about 10 minutes after your latest attempt; if our usual storage is unavailable, at most until the server restarts.
• Request logs: kept by our hosting provider for the short period its plan sets.
• Backups: encrypted copies of the database age out after 30 days. A submission we delete can remain in a backup copy for up to 30 days. CV files are not part of these copies.
• When we delete a submission we keep a record that it was deleted, with an internal number, the date and the reason, but without your name, email address or message.

Cookies and your device

The public pages of this website do not set cookies. Cookies are used only for our staff when they sign in to manage the website's content.

If you choose a language with the language switcher, your browser stores that choice on your device, in local storage under the name engineerly-locale, so that the home page can open in your language on your next visit. The entry is not sent to us, and you can delete it in your browser settings.

Your rights

You have the right to ask for access to your personal data, to have it corrected or deleted, to have its processing restricted, and to receive the data you gave us in a portable format where that applies. You can object at any time to processing based on our legitimate interest, and withdraw a consent you gave, such as the consent to store your CV.

To use these rights, or to ask about this notice, email hello@engineerly.fi. We may ask you to confirm your identity, and we reply within one month.

Complaints

If you think we process your personal data unlawfully, you can complain to a supervisory authority. In Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee). In Finland it is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi). You can also complain to the authority in the country where you live or work.