Funidata
>
Privacy Policy

Privacy Policy

Protecting your privacy is important to us. On this page, we explain how we process personal data in customer and marketing relationships, in connection with the use of our website (customer and marketing register) and in recruitment-related activities (job applicant register).

Customer and marketing register

This privacy policy applies to Funidata Oy's customers, potential customers, website users, partners and their representatives.

Data controller

Funidata Oy
Business ID FI27539129

Hiomotie 32
00380 Helsinki, Finland
info@funidata.fi

Contact details for data protection matters

For questions related to the customer and marketing register and requests related to the rights of data subjects, please contact info@funidata.fi.

Purpose of processing personal data and legal basis

We only process personal data to the extent necessary for the operations of Funidata Oy.

Depending on the situation, the processing of personal data is based on a contract or steps taken prior to entering into a contract, the consent of the data subject, the legitimate interest of Funidata Oy or a legal obligation. Processing based on legitimate interest is related to the conduct of business, the maintenance and development of customer and business relationships, the handling of contacts and the development of services. Processing is carried out in such a way that it does not violate the fundamental rights or freedoms of data subjects.

Personal data is processed for the management of customer and business relationships and the fulfilment of contractual obligations, including invoicing. The data is also used for sales and customer communications, marketing communications and newsletters, as well as communications related to events and webinars. In addition, personal data is processed for customer feedback, technical maintenance of services and websites, ensuring data security, and complying with legal obligations.

Mandatory provision of personal data

The provision of personal data is not mandatory, but in certain situations it is necessary for the conclusion of a contract or the provision of a service. Without the necessary information, we may not be able to process your enquiries or manage our customer or business relationship with you effectively.

What information we collect

We may process the following personal data:

  • Name and contact details
  • Organisation name, contact details and position or job title of the data subject
  • Information related to customer and business relationships, agreements and invoicing
  • Information provided by the data subject, such as the content of communications, customer feedback, and information related to events and webinars
  • Information related to marketing communications subscriptions and cancellations
  • Technical information related to the use of websites and services, such as IP address and information collected through cookies
  • Other personal data processed on a case-by-case basis, which is processed with the data subject's explicit consent and only for the specified purpose

We do not process special categories of personal data or other sensitive personal data.

Sources of data

Personal data is mainly obtained from the data subject themselves, for example in connection with contacts, agreements or event registrations. Data may also be obtained from public sources, such as the company register or event organisers.

Recipients of personal data

Personal data is processed by service providers acting on behalf of Funidata Oy, for example, IT and cloud services, marketing and analytics tools, financial management services and services related to the implementation of events. Service providers act as processors of personal data, and the processing is based on agreements between Funidata Oy and the service providers. Personal data will not be disclosed to third parties without a legal basis.

Transfer of data outside the EU/EEA

Personal data is mainly processed within the EU or the European Economic Area. If data is processed outside the EU/EEA, we ensure appropriate safeguards in accordance with applicable legislation.

Automated decision-making and profiling

Personal data is not used for automated decision-making or profiling within the meaning of Article 22 of the GDPR.

Data retention

Personal data is only stored for as long as is necessary for the purposes of processing. Data is deleted or anonymised when there is no longer any basis for processing.

Data retention periods are determined according to the type of data. Customer and contract data is retained for the duration of the customer relationship and for a reasonable period after its termination. Data related to invoicing and accounting is retained for the period required by statutory obligations. Potential customer data is stored for a maximum of 24 months from the last contact. Data related to marketing communications subscriptions is stored for as long as the consent is valid. Information related to events is stored for a maximum of 12 months after the event. Technical and security-related information is stored for a reasonable period of time to ensure the functionality of the systems.

Rights of the data subject

The data subject has the right to access their personal data, request the rectification or erasure of data, restrict processing, object to processing, and transfer data from one system to another in accordance with applicable law. The data subject has the right to object to direct marketing at any time.

Requests concerning the rights of the data subject will be responded to without undue delay and within one month at the latest.

The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman.

Cookies

We use cookies and similar technologies to improve the functionality, user experience and marketing of our website. You can manage your cookie settings through the cookie tool on our website. More detailed information about the cookies used and their duration is available in the cookie tool.

Data security

Personal data is stored in secure electronic systems and is only processed by persons who need it for their work. Data security is ensured through appropriate technical and organisational measures.

Job applicant register

The same data protection principles apply to the job applicant register as to our other personal data processing. The special features of the job applicant register are described below.

Contact details for data protection matters

If you have any questions about the job applicant register or requests related to the rights of data subjects, please contact rekry@funidata.fi.

Purpose of use of personal data and legal basis

We only process personal data to the extent necessary for Funidata Oy.’s recruitment process.

When recruiting, it is important for us to assess your skills and suitability for the position. We use the data in the recruitment process and in processing your job application, including application assessment, interviews and employee selection. The data is also used for communication between you and Funidata during the recruitment process and, where applicable, to support induction and the commencement of employment.

To fulfil the recruitment purposes described above, the processing of personal data is primarily based on measures taken at the applicant's request prior to the conclusion of an employment contract and on Funidata Oy.’s legitimate interest in carrying out the recruitment process. In certain situations, such as when obtaining information from references or storing data for a longer period, the processing is based on the applicant's consent.

What information we collect

In connection with the job application and recruitment process, we process the following information about you:

  • First and last name
  • Contact details (telephone number, email address)
  • Position applied for
  • Voluntary information you provide about yourself and your background (CV, LinkedIn profile, GitHub, portfolio, references)

In addition, we store the following information to the extent necessary during the recruitment process:

  • Assessment of your suitability for the position you are applying for or, with your consent, for other open positions
  • Communication with you and information collected during the interview
  • Information provided by your potential references
  • Information about the progress and outcome of the recruitment process
  • Any feedback we may give you to help you improve in your work or job search

Sources of data

Personal data is mainly collected from you when you submit a job application through our recruitment system, Teamtailor. Personal data may also be collected from various recruitment services that you use and in connection with various recruitment events. With your separate consent, data may also be obtained from other sources, such as references you have named.

Recipients of personal data

In the recruitment process, we use external recruitment and direct search services as well as a recruitment system. Such service providers process personal data on behalf of Funidata Oy as data processors, and the processing is based on agreements between the parties. Personal data will not be disclosed to third parties without a legal basis.

Data retention

Job applications and job applicant register data are generally stored for 12 months from the date of application. After this, the job applicant can give permission for the application to be stored in the recruitment system for longer. You can renew your consent to the storage of your data before it is deleted. Before your consent expires, we will contact you by email and ask you to actively renew your consent (opt-in) if you wish to continue storing your personal data. If you do not wish to renew your consent, your application and personal data will be deleted.

Applicants have the right to withdraw their consent at any time by contacting the data controller. Withdrawing your consent may prevent the recruitment process from continuing for that application, as we will then be unable to process your personal data for the purpose of job application.

Questions regarding the processing of job applicant data can be sent to rekry@funidata.fi .

Rights of the data subject

Job applicants have the same rights under the General Data Protection Regulation as other data subjects, including the right to access their personal data, request the rectification or erasure of their personal data, restrict the processing of their personal data, and lodge a complaint with a supervisory authority. More detailed information on the rights of data subjects can be found in the section "Customer and marketing register > Rights of data subjects" in this privacy policy.

Changes and updates

We will update this privacy policy as necessary. The latest version is always available on the Funidata Oy website.

Last update: 11 February 2026

‍