This is a privacy notice in accordance with the EU General Data Protection Regulation (GDPR). It has been prepared and updated to comply with current data protection legislation.
1. Data Controller
Company: Proseduuri Oy
Business ID: 2710574-2
Address: Hämeenkatu 7, 33100 Tampere, Finland
2. Contact Person for Register-Related Matters
Name: Sampo Karjalainen
Position: CEO
Phone number: 010 567 4370
Email address: sampo.karjalainen@proseduuri.fi
3. Name of the Register
Proseduuri Oy’s customer, marketing and website tracking register.
4. Legal Basis and Purpose of Processing Personal Data
The primary legal basis for processing personal data is Proseduuri Oy’s legitimate interest, based on a B2B business relationship, enquiries from potential customers or use of the website. Data is also processed for the performance of contracts and for compliance with statutory obligations.
Purposes of processing:
- Managing, maintaining and communicating in customer relationships.
- B2B sales, targeted marketing and offering suitable solutions to business customers.
- Monitoring website traffic, company information and user behaviour in order to develop the service and support sales.
- Business planning, development and statistics.
5. Data Content of the Register
The register contains the following data concerning company contact persons:
- First and last name of the person
- Company name and Business ID
- Position at the workplace and area of responsibility within the company
- Company industry, street address, postal code and city
- Phone number and email address
- Website behavioural data, visit information and interactions, such as chat conversations and forms
6. Regular Sources of Information
Data is primarily obtained from the data subject themselves, such as through website forms, chat interactions, configurators and direct contacts, or from the company they represent. In addition, information about website visits and visiting companies is collected automatically using tracking technologies. Data may also be collected and updated from public sources or official company registers within the limits permitted by law.
7. Website User Tracking, Cookies and Widgets
We use the Leadfeeder service on our website to identify visiting companies and analyse website usage. Leadfeeder identifies information about organisations visiting the website based on IP addresses and other public identifiers. In terms of data protection, Proseduuri Oy acts as the data controller and Leadfeeder acts as the processor of personal data.
We also use our own proseduuri.cloud widgets on the website for customer-specific chat, solution configuration and various contact and order forms. Data collected through these widgets is transferred directly to systems controlled by the data controller.
If you do not want your visits to be tracked, you can manage tracking through the website’s cookie and tracking settings or block cookies in your browser settings.
8. Recipients of Data and Regular Disclosures
Data is processed internally by Proseduuri Oy in the sales CRM system for customer relationship management, sales and marketing purposes. Data is not disclosed to external parties, except for compliance with statutory obligations or to trusted subcontractors, such as CRM and tracking technology service providers, who act as processors of personal data on behalf of the data controller.
9. Transfer of Data Outside the EU or EEA
Data is stored and processed only within the European Union (EU) or the European Economic Area (EEA). Data is not transferred to third countries.
10. Data Retention Period
Personal data is stored in the sales CRM system indefinitely for as long as it is necessary for managing the customer relationship, actively maintaining the sales process or fulfilling legitimate interest. Data will be deleted when there is no longer a legal basis for processing or when the data subject requests deletion of their data.
11. Rights of the Data Subject
Under the GDPR, the data subject has the right to:
- Access their personal data and request a copy of it.
- Request the rectification of inaccurate or incomplete data.
- Request the deletion of their data, also known as the right to be forgotten, from the CRM system and other registers.
- Object to the processing of their personal data or request restriction of processing.
- Prohibit the use of their data for direct marketing.
- Lodge a complaint with the Data Protection Ombudsman if they consider that data protection legislation has been violated in the processing of personal data.
12. Principles of Register Protection
The data is stored in information systems and CRM software protected by technical security methods commonly used in business operations, such as firewalls, passwords and encrypted communications. Access to the data contained in the register is restricted to the data controller’s personnel whose duties require processing of the data. Each user logs into the system using a personal username and password.