1. Who We Are
STRIVE, XStryv are part of The Nordic Venture Oy. XStryv is a recruitment and matchmaking platform specializing in connecting students and recent graduates with potential employers. Our mission is to help students realize their potential by linking them to some of the most exciting startups in Finland. In addition to above, we organize events such as the Startup Crawl, which provides students and startups with an opportunity to meet in an informal setting. In this Privacy Policy, STRIVE, XStryv, and The Nordic Venture Oy may be collectively referred to as 'we,' 'our,' or 'the Company.'
2. What Data We Collect
When you sign up for our platform or events, we may collect:
- Identification and contact details (name, email, phone number, LinkedIn, etc.)
- Professional and educational information (CV, skills, job interests)
- Event-related information (ticket, attendance, participation details)
- Media (photos and video taken during events, where you may appear)
3. Why We Process Your Personal Data
We process your personal data to:
- Facilitate the recruitment process by sharing your contact and relevant information with potential employers.
- Manage your event participation (sign-ups, communication, logistics).
- Enhance your experience on our platform by providing personalized job recommendations.
- Create and use photos and videos from the event for marketing, communications, and documenting purposes (both online and offline).
- Improve our platform and events through analytics and user feedback, ensuring a better user experience.
4. Legal Basis for Processing
Our legal basis for processing your personal data includes:
- Consent: When you sign up for our platform or events, you consent to us processing your personal data and to being photographed/filmed for marketing purposes.
- Contract: Processing necessary to provide the services you requested (e.g. event registration, recruitment matching).
- Legitimate Interests: Ensuring the smooth operation of our platform, improving services, and promoting our events and community, provided these interests are not overridden by your data protection rights.
5. Who Will Receive Your Data
Your personal data may be shared with:
- Potential employers participating in our events and recruitment activities.
- Event partners and venues (only data necessary for logistics and safety).
- Third-party service providers who assist us in operating our platform and providing our services (e.g., hosting services, IT support). These third parties are bound by contracts that ensure compliance with GDPR standards, including data security and confidentiality obligations.
- Regulatory and legal authorities if required by law.
6. Photography & Marketing
By attending our events, you acknowledge that photos and videos may be taken where you could appear.
- These materials may be used in marketing, communications, and documentation, both online (website, social media) and offline (brochures, presentations).
- If you wish not to be photographed, please inform the organizers at the event. We will do our best to accommodate this request.
7. Data Storage Duration
Your personal data will be stored for a maximum of 5 years, unless otherwise required by law or necessary for the performance of a contract. We will regularly review the necessity of keeping your personal data and delete it securely when no longer needed.
- Photos & videos: may be retained and used indefinitely for marketing, unless you object
8. International Data Transfers
If we transfer your data outside the European Economic Area (EEA), we ensure that the transfer is carried out in compliance with GDPR requirements. This includes using standard contractual clauses approved by the European Commission or other appropriate safeguards.
9. Your Data Protection Rights
As a user of our platform, you have the following rights concerning your personal data:
- Right to Access: You can request access to your personal data that we hold.
- Right to Correction: You can request corrections to any inaccurate or incomplete personal data.
- Right to Erasure: You can request the deletion of your personal data, subject to certain conditions.
- Right to Restriction: You can request the restriction of processing your personal data in certain circumstances.
- Right to Object: You can object to the processing of your personal data for direct marketing purposes or other specific reasons.
- Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.
10. Withdrawal of Consent
If you have given your consent for the processing of your personal data, you can withdraw your consent at any time. To withdraw your consent, please contact us at hello@xstryv.com. Please note that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
11. Automated Decision-Making
Currently, we do not make decisions based solely on automated processing. If this changes, we will inform you about the logic involved, as well as the significance and consequences of such processing. You will also have the right to contest the decision and request human intervention.
12. Data Protection Officer
If required, we will appoint a Data Protection Officer to oversee compliance with GDPR and ensure the protection of your personal data.
13. Contact Us
If you have any questions or concerns about this agreement or our data processing practices, please contact us at: hello@xstryv.com, partner@thenordicventure.com