Draft Privacy Notice — Done Robotics
Status: draft for owner/legal review. Not published. This draft must be checked against the final live forms, mail provider, Google Drive destination, cookie tooling and production hosting before release.
Last updated: [DATE BEFORE PUBLICATION]
1. Controller and contact
Done Robotics Ab Oy (Business ID 3130259-7) is the controller for personal data processed through this website.
Address: Sahakatu 2, 65170 Vaasa, Finland
Privacy questions and requests: legal@donerobotics.com
2. What we process
We process only the information a visitor chooses to provide, for example contact details and message content in a future contact or open-application flow. An open application may include a CV and other recruitment information.
The public website does not currently collect or send form data until the relevant secure processing is activated.
3. Why we process it
We use the information to respond to enquiries, assess open applications and manage recruitment communication. We do not use CVs or application information for automated employment decisions.
4. Systems and recipients
The planned site uses Lovable Cloud in Europe for private operational form records. Accepted open applications are intended to be sent to the fixed Done Robotics careers mailbox webcarreers@donerobotics.com and retained in authorised company email and Google Drive. Support enquiries are directed to support@donerobotics.com.
Before publication, this section must name the final mail provider, Google Drive/recruiting storage location, CV scanning/quarantine provider and any AI/Jev service actually enabled.
5. Retention
Open applications and CVs are retained for 12 months unless an authorised reviewer records a hiring hold. Other enquiry retention is [CONFIRM PERIOD]. Records are deleted or anonymised when no longer needed, subject to legal obligations.
6. Security
Application data and CVs are intended to remain in private access-controlled storage. Public users cannot browse application records. CV upload, scanning and delivery are not activated until their controls have been tested.
7. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection or data portability. Contact legal@donerobotics.com. You may also complain to the competent supervisory authority.
8. International transfers
If Done Robotics enables a processor that transfers personal data outside the EU/EEA, this notice will be updated before that processing begins to describe the transfer and applicable safeguards.
9. Changes
We may update this notice when website functions or processors change. The current version will be published on this page.