Privacy notice for applicants of the Rakettitiede Group
We are careful with the data of our rocket passengers (also known as customers) and the people who happen to fly by our website. In this privacy protection policy, we explain the measures we take to ensure the confidentiality of your data.
We process the data of our customers, potential customers and people who happen to fly by our website. Below, you will find a brief summary, after which you can find further information (sections 1–11).
Summary
Data Controllers
Rakettitiede Oy (2387967-9)
Rakettitiede LAB Oy (3586868-6)
Tähtikontrolli Oy (3572072-9)
Together, as the Rakettitiede group, we
Rakettitiede Oy acts as the contact point for data subjects.
Postal address
Fredrikinkatu 40 A 2 a
00100 Helsinki
As a rule, we act as joint controllers, as we use shared information systems and service providers for jointly defined purposes. Each company may also act as an independent data controller where applicable.
In all matters related to data protection, you can contact us at yksityisyys@rakettitiede.com
We process
browsing information generated when you browse our website;
contact information, i.e. your name, email address and telephone number (if you have already boarded the Rocket); and
customer data, i.e. information necessary for organizing your rocket flight.
We need your data to
provide a non-disruptive flight through our website,
manage our customer relationship (communication between spacecraft passengers and crew is important) and
market our services, as we know we can offer a wonderful flight and we want to tell you all about it (don’t forget that you can tell us to stop sending you material at any time).
We receive your information when you
navigate through our website,
subscribe to our newsletter,
contact us in other ways or
buy a ticket (i.e. become our customer) or
when we find it in other public sources (such as your company’s website). This only applies to our potential customers.
We offer cookies for the journey to ensure an uninterrupted flight, i.e. the best possible functionality on our website. You will also receive cookies from our service providers. We understand if you are not hungry, and you can decline the cookies at any time (see section 10 for further information on cookies).
Who else processes your data?
Personal data may be processed by all joint controllers listed in this notice.
In addition, personal data may be processed by data processors from whom we procure services, for example, in the areas of sales and marketing, communications, IT systems, and finance, accounting, and invoicing. Accordingly, for example, the following parties may process your personal data:
Infrastructure: Google
Analytics: Google Analytics
Customer communication and marketing: Agileday, Hubspot, Leadoo, LiidIT, Vantica Oy and Webinargeek
Personal data may also be disclosed to our subcontractors involved in delivering client work, where required by the purpose of the agreement. We ensure that all recipients always have a lawful basis for processing personal data.
We erase your data
no later than five (5) years after the end of our flight together (customers),
no later than two (2) years after we last tried (unsuccessfully ☹️) to tempt you with a flight (marketing) or
as soon as you request for your data to be erased, unless we have a compelling reason to continue processing your data. If we do, we will inform you about it.
Privacy protection policy in more detail:
1. Our role in safeguarding your privacy
This privacy policy applies to you if you intend to apply or have already applied for a job with us, or if we have contacted you after obtaining your details from, for example, various recruitment events.
In this privacy policy, we want to provide you with as clear a picture as possible of how and for what purposes we use your data – exactly as we would want it explained to ourselves.
Our responsibility
Regarding your data, we are a 'joint controller' or, in some individual cases, an independent 'controller'. This means that since we collect and store your data, we are also responsible for safeguarding your privacy and, among other things, the secure storage of your data. We also do our best to ensure that we only record correct and up-to-date information about you.
When acting as joint controllers, we share the responsibility in a manner agreed upon between us. Regardless of our internal arrangements, you, as a data subject, have the right under the General Data Protection Regulation to exercise your rights under the regulation in relation to and against each controller.
Your responsibility
It is your responsibility to familiarise yourself with this privacy policy. We may also update this privacy policy, in which case we will announce the changes here (see section 10). Please check our up-to-date policy from time to time.
If you have any questions whatsoever regarding your privacy or the processing of your data, please do not hesitate to contact: yksityisyys@rakettitiede.com (more detailed contact information here).
2. Purpose and basis of processing personal data
We use applicants' data to communicate with them and to assess their suitability for the job. The basis is our legitimate interest.
With your consent, we also collect information from your referees and store your data for future recruitment purposes. In this case, the basis for processing is your consent.
Legitimate interest
We may collect and store your personal data only if the data we process and the ways we use it are proportionate to its purpose. Below is a summary of our assessment regarding the proportionality of the data processing:
You are looking for a great job, and we are looking for the best possible employee – so our interests align. You choose the information you provide to us, and we do not collect information about you without your permission from anywhere else. We only keep your contact details after the recruitment process has ended with your permission.
We find the data processing we carry out in the manner described above to be proportionate. If you disagree with us on the proportionality of the processing of your data, please contact us (see also section 5 for your right to object to the processing of your data).
Consent
You can give us permission to keep your contact details to inform you about future job opportunities. We usually ask for permission either when you submit your job application or after the recruitment process has ended.
If you have named referees, we may ask for your permission to contact them. We will always ask for your permission separately.
Remember that you can withdraw your consent at any time and ask us to delete your data (see section 5).
3. Duration of processing
We store our job applicants' data for slightly different periods depending on whether you have responded to our job advertisement or sent us an open job application.
If you respond to our job advertisement, we will, as a rule, only keep your data for as long as the recruitment process is open in your case. After this, we automatically delete the suitability assessment application data that is no longer necessary, but we will ask for your consent to keep the data intended for communication for future job opportunities (1 year). If we do not receive your permission, we will also delete your contact information. We keep email correspondence or other similar communication for 2 years so that, if necessary, we can return to what we have agreed and discussed.
If you send us an open job application, we will, as a rule, keep your application and contact information for 1 year in case a suitable position opens up for you. If you change your mind, you can ask us to delete your data at any time (see section 5).
4. Data we collect
We obtain the information concerning you primarily from you. This information includes, among other things:
name (identification, communication),
phone number (communication),
email address (communication),
email correspondence (communication, proof),
photo if you wish – we do not care what you look like, as long as you have the skills,
application letter (suitability assessment),
CV (suitability assessment),
profession (suitability assessment),
work history and experience (suitability assessment),
education and competence details (suitability assessment),
language skills (suitability assessment),
other information you submit voluntarily, such as hobbies, organizational activities, interests, etc. (suitability assessment),
your LinkedIn profile or similar public sources and the information they contain, with your permission (suitability assessment),
information we receive from your referees with your permission (suitability assessment),
work sample (suitability assessment), and
notes from the job interview (suitability assessment).
5. Your rights
You have the following rights regarding your data. If you wish to exercise your rights, please send us an email about it: yksityisyys@rakettitiede.com
Right of access and rectification
You have the right to check the information we process about you. If you do not know whether we process your data, you have the right to ask us for information about it. If you notice inaccuracies or deficiencies in your data, you can ask us to correct or supplement the information so that it is correct.
Right to object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on our legitimate interest. In this case, we can also, at your request, restrict the processing of your data (see below) until we resolve the issue. We can continue processing your data only if you give your consent or if we have a compelling reason to do so.
Right to restriction of processing
You have the right to ask us to restrict the processing of your data if:
you believe the data is incorrect,
you believe we are processing your data unlawfully, but you do not want us to delete it completely,
we no longer need your data for the original purpose, but you need it for the establishment, exercise or defence of legal claims, or
you have objected to the processing of your data (requested that we do not process it at all), but we are still considering a final decision.
Withdrawal of consent and deletion of data
If you have given us your consent to keep your contact details or to collect information from your referees, you can withdraw this consent at any time and ask us to delete your data.
Right to obtain information on joint-controller status
You have the right to obtain information on the key aspects of the arrangement between the joint controllers.
Right to lodge a complaint
You have the right to lodge a complaint with the Data Protection Ombudsman if you feel that we are violating applicable data protection legislation when processing your personal data.
6. Regular sources of information
As a rule, we obtain the information concerning you from you yourself.
We may also obtain information about you from your referees or public sources (e.g., LinkedIn), but only if you have given us permission to use such sources. In addition, we may obtain your details at various recruitment events either directly from you or from the event organizer, provided you have given the event organizer permission to disclose your details further.
7. Disclosures of data
In our daily operations, we use tools and services where we store information, including personal data. The most important of these is the recruitment application Teamtailor, but your data is also stored elsewhere. We have agreed on the rules for processing personal data with all these parties and ensured that they comply with data protection legislation.
Our service providers:
recruitment system (Teamtailor),
recruitment communication (Google Gmail, Hubspot) and
other infrastructure (Agileday, Google Drive, Slack, Leadoo).
We have the right to use third-party services in customer communication and marketing. We may transfer your personal data (see section 4) to third parties for these purposes. The third parties we use are obliged to comply with at least the requirements of the EU General Data Protection Regulation (GDPR) when processing your personal data.
Our clients
With the most promising consultant applicants, we create a "Raketti CV", which we can use to offer the consultant for client assignments already during the recruitment process. This cannot happen without your knowledge, as we will always ask you separately for permission to send such a CV to our client.
You can also otherwise ask us to delete your data if storing it is no longer necessary for us.
8. Data transfers outside the EU
The service providers we use (Google) may transfer data outside the EU/EEA to the United States.
United States – Privacy Shield
All our service providers who may transfer personal data to the United States have joined the EU-US Privacy Shield framework. The purpose of the framework is to ensure the secure processing of European data in the United States. Service providers certified under this program guarantee a level of data protection and security in line with high European standards. You can view certified service providers here: www.privacyshield.gov/list.
9. Principles of registry security
The secure handling of your data is important to us. We protect your data, among other things, in the following ways:
No one who does not need to do so because of their duties has access to your data.
Access to your data requires a personal username and password.
Your data is stored on secure servers. The servers are strongly protected against both technical and physical intrusions.
Our IT systems are protected by firewalls and other technical measures.
The data is backed up regularly.
10. Changes
We will notify you of changes to this privacy policy here.
Updated 4 June 2026
