Privacy notice

The short version

• We found your professional profile in a public source — nearly always LinkedIn — and may have added public work details from a professional data provider.
• HelloWork uses an AI assistant. It helps us find and assess profiles, and it writes and sends many of our messages on Janne Valtakari’s behalf. Janne sets the rules it follows and is responsible for what it does.
• You can talk to a person at any time: say so in the conversation, or write to hello@hellowork.fi.
• We never put you forward to a customer without asking you first, we never sell personal data, and your data is not used to train AI models.
• If you would rather we did not contact you, one message stops it for good: reply “no”, or write to hello@hellowork.fi.

Who we are

HelloWork Oy is the controller of the personal data described in this notice. Your contact for anything about your data is Janne Valtakari, hello@hellowork.fi.

Business ID (Y-tunnus): 2901438-5Address: Lapinlahdenkatu 16, 00180 Helsinki

Where your data came from

If we contacted you without you having applied to us, we found your professional profile in publicly available professional sources — most often LinkedIn. We may add public work details (such as past roles and skills) from People Data Labs, a professional data provider, and we receive information from the customers and recruitment partners whose roles we fill.

The categories of data we hold are: your name, your public professional profile (current and past roles, employer, location, stated skills and languages), any public contact details, what you send us (for example a CV or your answers to our questions), and the record of our conversation with you.

How we use AI

HelloWork works with an AI assistant. It reads public profiles and forms a view on whether someone might suit a particular role, writes and sends first messages, and carries on the conversation — asking the questions the role needs answered and answering yours. Messages are sent in Janne Valtakari’s name because he is responsible for them, but many of them are written and sent by the assistant without him reading each one first.

You can ask for a person at any time, and Janne will take over the conversation. If the assistant concludes that a role is not a match for you, you can ask Janne to look at it personally.

We never put you forward to a customer without your agreement. Your data is not used to train AI models.

Before we contact you

We keep a short record of the decision to contact you or not, so that we can explain it if you ask and so that we do not write to you twice about the same thing. If we decided not to get in touch, that record is reduced after 90 days to the bare fact that a decision was made and when.

If you tell us not to contact you, we keep that instruction for as long as we exist. Deleting it would mean writing to you again by mistake — it is a note to ourselves to leave you alone, and it is used for nothing else.

Why we process it

We match people to consulting and permanent roles our customers are hiring for. Our legal basis is legitimate interest in operating a recruitment business (GDPR Article 6(1)(f)). Where you give it to us directly — when you send us your CV for a role, agree to be kept in our talent pool, or agree to be put forward to a specific customer — the basis is your consent.

How we weighed it: your public profile exists so that people can find you for work, and a message about a role is the kind of contact that profile invites. We limit ourselves to professional information, we do not pass your details to a customer without asking you, we stop for good when you say no, and we delete after 24 months. We think that outweighs the small intrusion of one message, but you decide: you can object at any time.

Who sees your data

Your details go to a customer or recruitment partner only after you have agreed to be put forward for their role.

We use service providers who process data on our behalf and only for us: Anthropic (the AI assistant), Supabase (database), Vercel (hosting), Unipile (LinkedIn messaging), LinkedIn (where most conversations happen), Mailgun (email, EU) and People Data Labs (public work details). Some of them are based in the United States; those transfers are protected by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

We keep your profile, CV and our conversation for 24 months after our last contact with you, and then delete them. If you ask us to delete them sooner, we do.

If we have a screening call with you and it is recorded or transcribed, we ask for your agreement first; you can say no and the call still happens. Recordings and transcripts are deleted after 12 months.

Your rights

You can ask us what we hold about you, correct it, delete it, restrict how we use it, or ask a person to review a decision our assistant made. We answer within one month.

To object: reply “no” to any message from us, or write to hello@hellowork.fi. We stop contacting you for good. We keep only a note that you asked us to stop, so that nobody writes to you by mistake later.

To withdraw a consent you have given (for your CV, to be kept in our talent pool, or to be put forward to a customer): tell us in the conversation or write to hello@hellowork.fi. We stop that use and delete what it covered. Withdrawing does not affect what we did before you withdrew.

You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).