Privacy Policy.

Osaamistehdas Oy
Business ID 2571242-6
Iso Roobertinkatu 20–22, 00120 Helsinki, Finland
Phone 0400 809 009
Email tietosuoja@osaamistehdas.fi

In order to serve you in the best possible way, we process certain personal data concerning you as part of our operations. We value your privacy and are committed to protecting your personal data in accordance with applicable legislation.

In this privacy policy, we describe:

• what personal data we collect
• for what purposes and on what grounds the data is processed
• how the data is protected
• what rights you have

The processing of personal data is based on applicable legislation and the grounds for processing described in this privacy policy. We may update this privacy policy as our operations or legislation change.

We collect personal data primarily from you, for example:

• when you contact us
• when you register for a service
• when you place an order
• when you make meeting or space bookings or enquiries about them
• while you are using our services

We also collect website visitor data using analytics tools (e.g. Google Analytics) to develop the site and target marketing.

Categories of personal data we collect

1. Identification and contact information

• Name
• Date of birth
• Language used in the service
• Address
• Email address
• Phone number

2. Payment and order information

• Billing information
• Payment information
• Purchase history
• Ordered products and price information
• Delivery address
• Chosen delivery method

3. Service-related information

• Test or training registration information
• Meeting room booking information
• Date, language and location
• Test results
• Internship results

4. Login information

• Email address used for Google or Facebook login
• Verification data

5. Website usage and analytics data

• Browsing and usage data
• Device identification data
• Data used for product recommendations and targeted content
• Product reviews

We process personal data for the following purposes:

1. Providing the service and processing orders (contract)

• Processing and delivering orders
• Receiving, confirming and handling meeting and space bookings
• Managing registrations
• Customer service
• Invoicing

2. Statutory obligations

• Bookkeeping
• Regulatory obligations

3. Developing services and maintaining the customer relationship (legitimate interest)

• Maintaining the customer relationship
• Developing business operations
• Analysing services
• Preventing misuse
• Direct marketing based on the customer relationship

4. Processing based on consent

• Electronic direct marketing (when required by law)
• Use of cookies for analytics and marketing
• Producing targeted content

Your personal data is processed by our staff according to their duties. We may use external service providers, such as:

• IT and system service providers
• Payment service providers
• Analytics and marketing services

We ensure through contracts that personal data is processed lawfully and confidentially. Data may also be disclosed:

• when required by law or authorities
• in connection with a corporate transaction

As a rule, personal data is not transferred outside the EU/EEA. If the servers of a service provider we use are located outside the EU/EEA, we ensure that the transfer is carried out using the safeguards required by law (for example, the EU's standard contractual clauses).

We do not retain personal data for longer than is necessary to fulfil its purpose of use or as required by law. Retention periods may vary depending on the purpose of use and legislation.

Personal data is stored in protected systems.

• Access to data is restricted by user rights
• User-specific credentials and passwords are used
• Data is handled confidentially

We use cookies and other similar technologies on our website to improve the user experience, ensure the site functions correctly, and for analytics and marketing purposes. Cookies are small text files stored on the user's device.

For example, we use:

• Necessary cookies (site functionality)
• Analytics cookies (e.g. Google Analytics)
• Marketing cookies

Users can manage the use of cookies:

• via the cookie consent tool shown on the website
• via browser settings

Please note that blocking necessary cookies may affect the functioning of the website.

You have the following rights regarding the processing of your personal data:

Withdrawing consent

If we process your personal data based on your consent, you can withdraw your consent at any time by notifying us. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Right of access

You have the right to obtain confirmation as to whether we process personal data concerning you. If we do process your data, you have the right to obtain a copy of the data as well as further information about the grounds, purposes and retention periods of the processing.

Right to rectification

You have the right to request the correction or completion of inaccurate, incorrect or incomplete personal data.

Right to object to direct marketing

You may object at any time to the processing of your personal data for direct marketing purposes. After this, we will no longer process your data for that purpose.

Right to object to processing

If we process your personal data on the basis of legitimate or public interest, you have the right to object to the processing on grounds relating to your particular situation. In that case, we will stop the processing unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims. Please note that in some situations, objecting may affect our ability to provide services.

Right to restriction of processing

In certain situations defined by law, you have the right to require us to restrict the processing of your personal data, for example when the accuracy of the data has been contested.

Right to data portability

If the processing is based on consent or a contract and is carried out automatically, you have the right to receive the personal data you have provided to us in a commonly used, machine-readable format, and the right to transfer that data to another data controller.

Exercising your rights

You can exercise the rights described above by contacting us by email at tietosuoja@osaamistehdas.fi. We may need to request additional information to verify your identity.

If you believe that the processing of your personal data does not comply with the law, you have the right to lodge a complaint with the supervisory authority: Office of the Data Protection Ombudsman, tietosuoja.fi.