Privacy policy

Privacy policy of Netprofile Finland Oy's marketing and stakeholder register  

Updated 27.3.2020

You are in our register because we have a relationship.

We comply with the legislation on the collection and processing of personal data and respect your privacy. Your personal data is on our register because we have a work-related and generally reciprocal relationship with you or because you have registered with us and wish to receive communications from us. 

Our activities as a consultancy and coaching company providing communications and marketing communications services to businesses require the collection, processing and retention of job role-based personal data relating to the performance, verification and reporting of job tasks. 

In our Privacy Policy, we describe in more detail the sources, purposes and types of personal data we collect, how and by whom it is processed, and what rights and choices you have to inspect, edit or delete your data. 

As the controller, Netprofile Finland processes your personal data in accordance with the principles set out below and in accordance with applicable law. As legislation and/or our operations may change or evolve, these principles will certainly be updated. 

We will do our utmost to ensure that we are worthy of your trust every day. Please read our Privacy Policy and give us your feedback if there is anything concerns you. Our relationship is important and valuable to us, and hopefully to you. 

Controller

Netprofile Finland Oy
Business ID: 02821461-7
Ludviginkatu 3-5 B
00130 Helsinki

Contact person for matters concerning the register

Christina Forsgård, christina@netprofile.fi.

Name of the register

Netprofile Finland Oy's marketing and stakeholder register 

We process personal data of our customers, other stakeholders, potential customers and their representatives in the register.

Purpose of processing personal data

Our processing is based on legitimate interests in the case of marketing and on the performance or expectation of a relationship or contract between you and us in the case of customer and stakeholder relations. 

We only market our services to businesses and on a job role basis, in which case we only process personal data relating to them. To the extent permitted by law, we will use relevant information you provide to us or in relation to our relationship to target our marketing and communications to you based on your job role, your information needs and your demonstrated interest. 

We may also use your personal data to develop our services and for public relations purposes. 

We will also send you digital newsletters or direct marketing messages based on your job role, online subscription or other consent. 

Your personal data is collected, processed and stored in our records to comply with legal obligations, such as for accounting and regulatory purposes, in accordance with the relevant legal requirements and time limits. 

Data content of the register

As a general rule, we collect, process, use and store job role-based personal data for the purposes of managing personnel, customer, supplier, subcontractor, partner or influencer relationships, billing and providing our communication and marketing communication services to our business customers. 

We also use personal data for our own marketing, to acquire new customers and to develop our business. 

We use Google Analytics and Hubspot to analyse and improve the use of our website and to target content of interest to our website users. 

Our records contain your name, telephone, email, address, employer, title and other information you provide. Cookies enable us to obtain behavioural information about our visitors, which we use, for example, to plan our marketing. This allows us to target our communications as accurately as possible. 

Based on our relationship with you, the following information about you may be stored in our records: 

  • The first and last name, work email address, title, area of responsibility and social media profile addresses of our client company contact person. 
  • Company name, contact details, business ID, sector of activity, addresses of social media pages and profiles, and other information relevant to our relationship or the performance of our assignment. 
  • Information related to the establishment, management, communication, quality and assignment of the relationship, such as ordering, billing and delivery information.  
  • Self-reported information, including, for example, interests. 
  • Data relating to customer and training feedback. 
  • Data relating to the use of the Netprofile online service and the receipt of direct marketing messages. 
  • Marketing, promotional and public relations data, such as attendance at our events, and our accolades and gifts.  
  • Cancellation or other marketing opt-out information for our newsletters or newsletters. 
  • Cookies sent to the data subject's browser and related data. 

For job applicants, we mainly process data received from the person themselves or data provided on LinkedIn: 

  • Basic information about the jobseeker  
  • CV of the job applicant, application, references provided by the applicant and information related to any job interview (when met, who interviewed).  

The personal data are processed mainly by the management and shareholders of the company. We use LinkedIn for recruitment and solicit applications via LinkedIn. Applicant data is stored on LinkedIn. We may also keep the above information about job applicants in our register of persons and job applicants. 

With your consent, we may also collect and process other information about you. 

Regular sources of information 

The collection of register data is based on the performance of work related to the stakeholder relationship or other relevant connection with Netprofile. 

As a general rule, we obtain your personal data from you at the start of the cooperation, at the conclusion of a contract, at our meetings, when you apply for a job with us or when you subscribe to our newsletter or other material via our website. We may also receive personal data from our supplier registers, your employer or a training provider. 

We may also collect additional job-related personal data about our customers, partners, potential customers and other stakeholders from public sources or registers and social media channels such as Twitter, LinkedIn, Facebook, Instagram and YouTube. 

We do not collect, process or store personal data that is not necessary for the performance of our work. 

Regular disclosures of data 

We do not disclose personal data to third parties for marketing purposes. We only disclose to potential subcontractors contact and personal data relevant to the performance of the job or task in question and related to the person's job role. We may disclose information to fulfil contractual obligations or where required by law or competent authority.  

Transfer of data outside the EU or EEA 

Your data may be transferred outside the EU because the communication tools, website platforms and data centres we use to host our content creation, project management and CRM cloud services may be located in countries such as the United States. 

If your personal data is transferred outside the EU/EEA, there are legal grounds for doing so: the European Commission has determined that the recipient country ensures an adequate level of data protection, the transferee is Privacy Shield certified, or the transfer is made using standard clauses published by the EU Commission. Any data transfer will be carried out on the basis of the law and with adequate safeguards. 

Grounds for the protection of the register and the retention period of personal data 

Your personal data is confidential. Access to your personal data is limited and protected by user-specific IDs, passwords and access rights. It is processed only by our employees and, to a limited extent, by our partners such as our financial management and accounting services and IT support services. 

We store your data mainly in digital form on servers of well-known and commonly used service providers, which are protected in accordance with general data security practices.  

We will retain personal data only for as long as necessary to fulfil the purposes of processing personal data as defined in this notice or, for example, to comply with accounting and employment obligations under applicable law.  

Outdated and unnecessary personal data will be deleted as appropriate. 

Rights of the data subject Rekisteröidyn oikeudet

In accordance with the applicable data protection legislation, you have the following rights: 

Withdraw consent 

In case we only process your data on the basis of your consent, you can withdraw your consent at any time by notifying us. In our direct marketing letters, there is a legal link where you can unsubscribe from our emails if you wish. 

Right of access, deletion and restriction

You have the right to know whether we process personal data about you, what personal data we process about you and what we use it for. You have the right to request that we delete or restrict the use of your personal data. You also have the right to object to the processing of your personal data on grounds relating to your particular personal situation, where we have a legitimate interest in processing your personal data. 

The right to have errors corrected 

You have the right to request that we correct inaccurate, outdated or incomplete personal data about you. 

Right to object to direct marketing

You have the right to object to the processing of your personal data for our direct marketing purposes. 

Right to have your data transferred 

Where we have processed your data on the basis of your consent or for the performance of a contract, you have the right to receive the data you have provided to us digitally in a commonly used format so that the data can be transferred to another service provider. 

Right to appeal to a supervisory authority

You have the right to complain to the relevant supervisory authority (the Data Protection Officer) or to the supervisory authority of the EU Member State where you reside or work if you consider that we have not processed your personal data in accordance with the applicable data protection law. You should send requests about your rights by email or letter. We will respond to requests within one month of the request at the latest, unless there is a specific reason to extend the deadline for responding. 

We want to manage our records well and in accordance with the law

We want to keep our records up to date, comply with good data protection practices and meet our legal obligations. For these reasons, we may ask you to clarify your request and verify your identity before processing your request. We may also refuse to comply with your request on any other legal grounds. 

This Privacy Policy will be updated over time 

It is likely that as the world and we change, so we will also make changes to this Privacy Policy. These changes will take effect once we have posted the updated Privacy Policy on our website. We therefore welcome you to consult this Privacy Statement regularly.  

Questions, comments or concerns about your privacy with us?  

Please contact Christina Forsgård, christina@netprofile.fi