We are committed to complying with the General Data Protection Regulation (EU 2016/679, “GDPR”).

The purpose of the Regulation is to enhance individuals’ rights in managing and processing their personal data. According to the GDPR, the data controller is required to provide clear information to data subjects. This privacy policy fulfills that obligation.

General Information

To serve you in the best possible way, we need to collect and process some of your personal data. We value your privacy and are committed to protecting it. This privacy policy explains what personal data we collect, how we process it, and what rights and options you have regarding your data. As the data controller, we primarily process the personal data of contact persons and other representatives of our client companies. Personal data refers to any information related to an identified or identifiable person, such as name, email address, phone number, or job title.

We process your personal data in accordance with this privacy policy and applicable laws. Please read this privacy policy carefully. We may update this policy as our operations evolve or as legislation changes.

By using our services, visiting our website, or contacting us, you accept that we process your personal data in accordance with this privacy policy.

1. Name of the Register

Customer Register of Paketo Oy

2. Data Controller

Paketo Oy, Business ID: 0595621-2

The data controller responsible for the processing described in this privacy policy is Paketo Oy (hereinafter “Company” or “we”).

3. Data Processors

Only those employees of the data controller who have a work-related need to process customer information are authorized to access the systems containing customer data. Each user has their own username and password.

4. Purpose of Processing Personal Data

We collect, store, and process your personal data only for predefined purposes. The main purposes include:

● tailoring our services to you;
● fulfilling our contractual obligations;
● complying with legal obligations and claims;
● customer communication;
● responding to contact requests; and
● developing our business.

5. Personal Data Stored in the Register

We primarily collect your personal data directly from you during contact or later during the use of our services. For new customers, we may also collect information about prospects from LinkedIn, websites of potential client companies, or tools designed for customer acquisition (e.g., Leadfeeder).

We may also collect information from public sources and registers, such as the YTJ business information service. We collect visitor data on our website through Google Analytics to analyze and improve our website’s user-friendliness.

Personal data is significantly collected via our website and forms available on it. The customer data we use consists of information necessary for managing client matters, typically including the customer’s name, email address, and phone number. During the customer relationship, additional data is collected, mainly related to the client companies. We also use customer marketing tools and software, all of which follow data protection practices. Access to customer marketing systems requires a username and password.

6. Processing of Personal Data

We ensure that we always have a legal basis for processing your personal data. We may process your data under various legal grounds, including fulfilling contracts and legal obligations. When using subcontractors and service providers, we ensure that confidentiality and lawful processing of your data is maintained.

We also process personal data based on our legitimate interest, which includes providing services and developing our business. Some personal data may be processed based on your consent.

7. Data Disclosures

Primarily, your personal data is processed by employees of our company as part of their duties. We may also outsource some data processing activities, such as systems used for storing and handling personal data. In such cases, we ensure, through contracts, that confidentiality and lawful processing are maintained.

We may disclose data if required by law, court order, or competent authority. Your data may also be disclosed in connection with corporate or business transactions.

As a rule, personal data will not be transferred outside the EU.

8. Data Retention

We do not retain your personal data longer than necessary for its intended purpose or as required by contract or law. Retention periods may vary depending on the purpose and situation.

9. Data Protection

Your data is stored on our service provider’s servers, which are protected in accordance with industry standards. The personal data we collect and process is kept confidential and is only disclosed to those who need it for their work or to clients under confidentiality agreements. Access to your data is protected by personal usernames, passwords, and access rights.

10. Destruction of the Register

Documents containing customer data are securely destroyed after processing.

11. Data Subject Rights

Data subjects have the right to access their personal data stored in the register free of charge. You also have the right to request the deletion of your personal data (see also “Data Retention”). If the data is incorrect, you may request a correction in writing to the data controller. You may also restrict the use of your data. All requests for deletion, correction, and restriction must be submitted in writing and signed.

Withdrawal of Consent

If we process your data based on your consent, you may withdraw your consent at any time by notifying us in writing via email.

Access to Data

You have the right to receive confirmation of whether we process your personal data and to know what personal data we hold about you. You also have the right to obtain additional information on the legal basis for processing.

Right to Rectification

You have the right to request correction of inaccurate, outdated, or incomplete personal data about you.

Direct Marketing Ban

You have the right to prohibit the use of your data for direct marketing purposes.

Right to Object

You may object to the processing of your personal data if you believe that it has been processed unlawfully.

Right to Restrict Processing

In certain situations, you have the right to request that we restrict the processing of your personal data.

Right to Data Portability

If we have processed your data based on your consent or for the performance of a contract, you have the right to receive the data you have provided to us in a commonly used electronic format, so it can be transferred to another service provider.

You have the right to prohibit the processing of your personal data for direct marketing, distance selling, and other marketing and opinion research purposes. For such requests, please contact the data controller.

12. Additional Information on Data Protection

The data controller complies with the applicable regulations and standards concerning the retention of personal data and continuously reviews and improves practices related to the above matters.

Providing Personal Data and Consequences of Not Providing It

Providing data is voluntary, especially for potential customers. On our website, we typically ask potential clients for their name, phone number, email address, and a brief description of their needs. In some cases, providing and processing personal data is mandatory to the extent necessary to determine whether we have a conflict of interest in accepting a new assignment.

Use of Cookies on the Website

We use cookies on our website to provide the best possible user experience. Cookies are small text files that the web server stores on the user’s device. Cookies give us information about how users interact with our website. We may use cookies to develop our services and website, analyze website usage, and optimize and target marketing. Website users may give or deny consent to cookies through their browser settings. Most browsers automatically allow cookies. Please note that blocking cookies may limit the functionality of our website.

Data Controller

Contact information:

Paketo Oy, Kisällintie 7, 04500 Kellokoski, Finland