Witted Privacy Policy
1. What Is This Policy For?
Witted is a group of companies providing IT consulting, recruitment, and related services. We collect certain personal data about our existing and potential customers, partners, freelancers, and recruitment candidates. We collect this data so that we are able to respond to requests for new business, manage our consultant network, and process job applications sent to us. We also use analytics on our website to learn more about how it is used and how we can improve it.
In this Privacy Policy, you will find details about the data we collect about you and how we use it.
2. Controller
Witted Megacorp Oyj (2778226-8)
Kaikukatu 4 C, 3rd floor 00530 Helsinki, Finland
Email: contact@witted.com
Together "Witted", "we", "us".
This Privacy Policy covers the processing activities of Witted Megacorp Oyj and its group companies acting under common data governance. Certain Witted group companies may act as independent controllers for their own processing activities and maintain separate privacy notices where applicable.
3. Purpose and Legal Basis for Processing
Witted processes personal data only where a legal basis exists. The legal basis depends on the context in which the data is collected:
Website visitors:
Personal data collected through cookies and analytics is processed on the basis of consent. You may withdraw your consent at any time via our cookie settings.
Customers and partners:
Personal data is processed on the basis of a contract or on the basis of Witted's legitimate interest in managing business relationships, responding to requests, and developing our services.
Freelancers and software professionals looking for a job:
Personal data is processed on the basis of Witted's legitimate interest in matching consultants with suitable project opportunities, or in connection with the preparation or performance of a contract. If you have subscribed to receive email notifications about matching project opportunities (“project alerts”), that processing is based on your consent, which you may withdraw at any time by unsubscribing or by contacting us at contact@witted.com. Depending on the opportunity, we may notify you about a matching project either by an automated email or through personal contact from a Witted consultant; both are part of the same project alert service you have subscribed to.
Recruitment candidates:
Personal data is processed primarily on the basis of consent. Data may also be processed in connection with the preparation of a potential employment contract or in order to comply with the employer's statutory obligations. In certain situations, legitimate interest is used as the basis for retaining data after the recruitment process has concluded.
4. What Data Do We Collect and How Do We Use It?
Freelancers looking for projects & Software Professionals looking for a job
If you are looking for a project as a freelancer or a job as a software professional, we collect the following information about you. You may have provided this on our website, in our systems, or we have obtained it during the contacting process:
- Name and contact information
- Professional interests and skills
- Where you'd like to work
- LinkedIn profile link
- Cover letter, CV, or other files you provide
- Data from discussions, interviews, and other communication with you
We use this data only for the purposes of processing your application, communicating with you, and finding the relevant professional information required for matching you with the best jobs and projects. We do not share your information with anyone else, unless it is expressly required by applicable laws or requests by public authorities. Witted requires all employees with access to any personal data to treat such data with strict confidentiality. If you have subscribed to project alerts, this includes a Witted consultant contacting you personally about a specific opportunity that matches your profile, in addition to or instead of an automated notification email. You can ask us to stop contacting you personally at any time, without affecting your other project alert preferences, by contacting us at contact@witted.com. Being contacted about a project in this way is separate from, and does not by itself make you, a recruitment candidate — see “Recruitment Candidates” below for when that applies.
Recruitment Candidates & Talented Direct Recruitment Services
Witted Recruitment
If you are a recruitment candidate in Witted Recruitment's process, we collect the following information about you. You may have provided this on our website, in our systems, or we have obtained it during the contacting process:
- Name and contact information
- Professional interests and skills
- LinkedIn profile link
- Cover letter, CV, or other files you provide
- Data from discussions, interviews, and other communication with you
We use this data only for the purposes of processing your application and communicating with you during our recruitment process. We do not share your information with anyone else, unless it is expressly required by applicable laws or requests by public authorities. We only process your personal data as a recruitment candidate where you have taken a specific action to become one, for example, by submitting an application or creating a candidate profile. We do not automatically convert contacts from other lists or purposes (such as subscribers to our project alert emails) into recruitment candidates without such a separate action on your part. For clarity, this is different from being personally contacted about a specific project or consultancy opportunity, as described under “Freelancers looking for projects & Software Professionals looking for a job” above — that kind of contact stays within the project alert service and does not, by itself, place you in Witted's recruitment process.
Talented Direct Recruitment
If you are part of Talented's direct recruitment process, we collect the same categories of information as described above. We use this data only for the purposes of processing your application and communicating with you during the recruitment process. Note that candidate data may also be shared with client companies for the purpose of filling a specific role. Such sharing takes place only with the candidate's explicit consent and to the extent necessary for the recruitment process. We do not share your information with anyone else, unless it is expressly required by applicable laws or requests by public authorities.
Witted requires all employees with access to any personal data to treat such data with strict confidentiality.
Customers, partners and other contacts
If you are a customer, partner, or other business contact of Witted, we collect the following information about you. You may have provided this to us directly, for example when you send us a contact request; we may have received it from a reliable public source such as public company databases; or it may arise in the context of our services to you or your dealings with us:
- Name, title, and contact information
- Organisation information and position
- Requests and notes on contacts, e.g. services ordered or billed, meetings
- Newsletter, marketing, event, and invitation information
- Derived data
We obtain this data when you send contact requests to us, by receiving data from a reliable public source such as public company databases, or in the context of our services to you or your dealings with us.
We use this data for managing the business relationship, processing requests, providing our services, promoting our services and communicating with you, and analysing, planning and improving our operations.
We do not share your data outside Witted's group companies, unless expressly required by applicable laws or relevant authorities. With your permission, we may share your data with our trusted partners if making your request happen requires us to do so. Witted requires all employees with access to any personal data to treat such data with strict confidentiality.
Witted Insights newsletter subscribers
- Email address
- Full name
- Company
- Job title
- Your communication preferences (e.g. Insights report, other email communications)
You provide this data when you subscribe to the Witted Insights newsletter via witted.com/insights or the associated sign-up form. We use it to send you the Witted Insights report and, where you have separately agreed, other email communications from Witted. This sign-up form is hosted by Mailchimp (The Rocket Science Group, LLC); by subscribing, your information is transferred to Mailchimp for processing on our behalf, as described in Section 6. We do not share this data with anyone else, unless it is expressly required by applicable laws or requests by public authorities.
5. Cookies and Analytics
Cookies are small text files that a website stores on your device when you visit it. They help the website remember information about your visit, such as your preferences or login status, and are commonly used to make websites work more reliably, understand how they are used, and, in some cases, show relevant content or advertising. We use cookies and similar technologies on our website to understand how it is used and to improve it. Below are the analytics and tracking tools we currently use.
Google Analytics
Google Analytics helps us understand how visitors use our website (e.g. pages visited, time spent) so we can improve it. See Google's own privacy policy for details on its processing.
Facebook Pixel
Facebook Pixel allows us to measure the effectiveness of our advertising and to reach relevant audiences on Meta platforms. See Meta's own privacy policy for details on its processing.
LinkedIn Insight Tag
LinkedIn Insight Tag allows us to measure the effectiveness of our campaigns on LinkedIn and to understand our website audience. See LinkedIn's own privacy policy for details on its processing.
6. Transfer of Data Outside of the EEA
Data on existing and potential customers, freelancers, and recruitment candidates may be stored by TeamTailor, Slack Technologies LLC, PipeDrive OÜ, Agileday Oy, Twilio Inc. (SendGrid), The Rocket Science Group LLC (Mailchimp), and Typeform S.L., as necessary for processing customer, consultant network, recruitment, and marketing communication data. In certain cases, our partners who offer jobs and projects and talents applying for a project may be located outside of the EEA and may therefore access your data from outside of the EEA.
We use Typeform (Typeform S.L.) to build and host various online forms used across our business, for example for event registrations, surveys, and other data collection. Although Typeform S.L. is based in Spain, form responses are processed on Typeform's infrastructure, which is primarily hosted in the United States. Any transfer of your personal data outside the EEA in this context is safeguarded by the Standard Contractual Clauses referred to below.
Project alert emails are delivered using SendGrid, a service of Twilio Inc. Your email address is processed on SendGrid's infrastructure within the European Economic Area. Any processing by Twilio outside the EEA is governed by our data processing agreement with them.
The Witted Insights newsletter (witted.com/insights) and certain other marketing communications and forms are delivered or hosted using Mailchimp (The Rocket Science Group, LLC), which is based in the United States. When you subscribe, your information is transferred to Mailchimp for processing on Witted's behalf. Where your data is processed outside the EEA in this context, such transfers are safeguarded under the EU-U.S. Data Privacy Framework and/or the Standard Contractual Clauses referred to below.
In such cases, Witted ensures the legality of such data transfer by having entered into appropriate contracts with such service providers to ensure the lawful processing of your data. Such contracts include the Standard Contractual Clauses adopted by the European Commission in its Implementing Decision of 4 June 2021 (2021/914/EU) on standard contractual clauses for the transfer of personal data to third countries.
7. How Long Do We Store Your Data?
We store the data concerning our existing customers, requests for new business co-operations, freelancers and recruitment candidates only as long as is necessary for the respective purpose. Since this period depends on the case at hand, we review the necessity of our data regularly and erase data when it is no longer needed.
After you unsubscribe from our communications, we keep a minimal, one-way, irreversible record of that choice, so that we can continue honouring it indefinitely without storing more personal data than necessary.
8. Your Rights and How to Exercise Them
Under applicable data protection law, you have the right to request access to, erasing and correcting your personal data as held and processed by Witted, as well as to send us any other requests based on then applicable data protection laws (e.g. request restriction of processing of the data). Further, you always have the right to prohibit us from sending newsletters or other marketing messages to you.
To exercise your rights, please contact us at contact@witted.com. We will respond within one month of receiving your request.
If you wish to lodge a complaint regarding the processing of personal data, you may contact a supervisory authority: in Finland, the Finnish Data Protection Ombudsman (Office of the Data Protection Ombudsman), www.tietosuoja.fi; and in Norway, the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no.
9. How Do We Secure Your Data?
Witted requires all employees with access to personal data to treat such data with strict confidentiality. Your data can only be accessed by Witted group employees when it is necessary for them to perform their work. We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Where we outsource processing to external service providers, we do so under appropriate data processing agreements.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page and, where appropriate, we will also notify you by other means. Where applicable law requires it, we will notify affected individuals of material changes.
The latest update 5 October 2026
