Controller and contact person for matters relating to the processing of personal data
Loihde Analytics Oy (business ID 1645592-3)
Hevosenkenkä 3, 02600 Espoo
Katja Ahola, Managing Director, Loihde Analytics Oy
Legal basis and purpose of processing personal data
We process personal data on the basis of the following legal grounds under the EU General Data Protection Regulation
- the consent of the individual
- a contract to which the data subject is a party
- legitimate interest of the controller
The purposes of processing personal data are the provision, delivery and customer management of our services, the development of our services, the marketing and communication of our services, recruitment and the fulfilment of our legal obligations. The data will not be used for automated decision-making or profiling.
Data content of the register and data sources
The personal data we collect from you will be entered into our register mainly through the forms and event registrations you fill in on loihdeanalytics.com. We may also receive your personal data from your company contacts. We may also collect your personal information from public sources, registers or social media channels. We also collect visitor data from our website through Snoobi Analytics and Google Analytics. This information is used to develop our website and target marketing.
The personal data of customers or potential customers stored in our registers include:
- Name, title, company/organisation, contact details (phone number, email address, address).
- Information related to the use of social media such as LinkedIn, Facebook, Instagram, etc.
- Other data related to the customer relationship and the services ordered.
- Other information provided by the person himself/herself
The personal data of the jobseekers to be recorded in our register are:
- Contact details of the jobseeker
- Jobseeker's contact details
- Other information provided by the jobseeker himself/herself
The personal data provided by the jobseeker (application form, job application form, jobseeker's personal data)
We will keep your personal data for as long as required by the purpose for which they are used or by the contract. Legislation, such as the Accounting Act, may also affect the retention periods for data contained in accounting records. In principle, personal data contained in accounting records will be kept for six years, and in certain situations for ten years, depending on the applicable legal provision. Unnecessary or outdated personal data will be deleted.
Regular disclosures and transfers of data outside the EU or EEA
There is no regular disclosure of data to other parties. However, we may disclose your data in confidence to third parties or subcontractors. Subcontractors are typically customer management service providers or personal data storage services. We will ensure that such transfers are bound by agreements that safeguard data protection and confidentiality requirements. Where we transfer data outside the EU or EEA, we will ensure that the transfer is carried out in a manner required by law, for example by agreeing on processing and confidentiality issues using standard contractual clauses approved by the European Commission. We may also disclose your data to third parties as required by law and contractual obligations.
Principles of register protection
We exercise due care in processing your personal data, and the data processed by our computer systems is adequately protected. Where we store your personal data on internet servers, the physical and digital security of their hardware is adequately ensured. We ensure that stored data, server access rights and other information critical to the security of personal data are treated confidentially and only by those employees whose job description includes this.
The EU General Data Protection Regulation gives you, as a data subject, a number of rights which you can exercise in a number of situations to influence the processing of your personal data.
First, if we process your personal data on the basis of your consent, you have the right to withdraw your consent to the processing of your data at any time.
You also have the following rights:
Right of access.
Right to rectification: you also have the right to have your data rectified and to have inaccurate or incomplete information corrected or completed.
Right to be forgotten: You also have the right to ask us to delete information about you. We have an obligation to delete your data if there is no longer a legal basis for processing your data or if the legal or contractual obligation to retain it has expired. We are also obliged to delete your data if the processing was based on your consent and you have withdrawn it.
Right to restriction of processing.
First, you have the right to object to the processing of your data for direct marketing purposes. In addition, you have the right to object to the processing of your data in certain cases where our processing is based on a legitimate interest and there is no compelling reason for the processing which overrides your interests or rights and the processing is not necessary for the establishment, exercise or defence of legal claims.
Right to data portability.
If you wish to exercise any of the above rights, you should send a request to contact(at)loihdeanalytics.com. Please include your name, address, telephone number and attach a copy of your driving licence, passport or other proof of identity to verify your identity. We will act on your request without delay and will inform you of the measures taken to exercise your rights, as a general rule within one month of receiving your request.
You also have the right to lodge a complaint with a supervisory authority about the way we process your personal data. In Finland, complaints are addressed to the Data Protection Ombudsman, whose website can be found at www.tietosuoja.fi.