People in Company Profiles

We did not collect this data from you, so Article 14 of the GDPR requires us to tell you about it. Writing to every person individually would involve a disproportionate effort within the meaning of Article 14(5)(b): our company profiles name several hundred thousand people in many countries, we hold no contact address at all for many of them, and for the others the only address we have is a work address published for another purpose, so a letter would itself be an unrequested use of it. We therefore publish this notice and link to it from the site footer and from the people list on every company page. The balancing behind this choice is documented in our Legitimate Interest Assessment.

Only sources that publish this information for the public, or a correction from the company itself:

• The company's own website - the legal notice (imprint) or company-details page, where law or custom names the managing directors and other officers.
• SEC Form D filings - executive officers, directors and promoters named in filings published on the U.S. Securities and Exchange Commission's EDGAR system.
• Official company registers - the roles recorded in Norway's Central Coordinating Register for Legal Entities (Brønnøysund Register Centre) and the managers listed in France's public company directory (annuaire-entreprises.data.gouv.fr).
• Public job portals - the contact person an employer names in its own vacancy, from the portal's open data.
• The Hub (thehub.io) - team members that Nordic startups list on their public company profiles.
• Alion editors and the company - corrections made by our editors or by a representative of the company.

Your name (and its spelling in the original script), your job title or role and its short description as the source states it, the company, markers derived from the role (founder, decision-maker, hiring contact), and a link to the source page. Where the source itself publishes them, we also hold a work email address, a work telephone and mobile number, and a LinkedIn profile address. We do not hold photographs, private addresses, identity numbers or any special-category data about people in company profiles.

The legal basis for all of the purposes below is legitimate interest (GDPR Article 6(1)(f)): ours in publishing accurate profiles of hiring companies, and that of job seekers and business users in knowing who runs a company and who hires for it.

• Company profiles. Your name, role and source may appear on the company's page on Alion and in the "Who decides" panel of the company's cards in the job and startup listings.
• Delivering applications. A work address that an employer published as the contact for its vacancy may be used to deliver applications that candidates send through Alion for that company's vacancies.

We do not sell or hand out your contact details. No page and no paid feature shows another Alion user your email address or telephone number: a person appears only with a name and a role. Paying users can open the company's own contact points (role mailboxes such as jobs@ or info@, and the company's main telephone), never a person's.

We make no decision about you with legal or similarly significant effects. The founder, decision-maker and hiring-contact markers are read from the role the source states and describe the role, not the person.

Visitors of alion.io see the name, role and source as described above. Our hosting and email-delivery providers process the data on our behalf, and some of them are located outside the European Economic Area. A company receives the applications sent for its vacancies. No one else receives the data from us.

We keep an entry for as long as we keep the company's profile, unless you object or ask for erasure earlier. When a company profile is deleted, the entries of its people are deleted with it.

You may ask for access to your entry, its correction or its erasure, and you may object to its processing at any time (GDPR Articles 15-17 and 21). Use the "Is this you? Correct or remove" link under the people list on the company's page, or write to [email protected] with the address of the company page.

When you object, we hide your entry from every page and stop using your contact details for the purposes above. When you ask for erasure, we delete your details and keep only your name at that company, marked as removed: the public sources above may still list you, and without that marker our next reading of the same source would add you again. We answer within one month, and usually within a few days.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.