Privacy policy

Privacy Policy

Your privacy is important to us.

At Finitec, it is important to us that you can trust us to handle your personal data carefully, transparently, and with respect for your privacy. When processing your personal data, we strictly comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws, and we always aim to follow good data protection practices. This privacy policy describes how we collect, process, and protect the personal data of our experts at Finitec and at Finitec's subsidiaries AI Roots and CyberDo.

This privacy policy is updated regularly. The current version is always available at www.finitec.fi/privacy-policy. We will contact data subjects separately if there are significant changes to the privacy policy.

Data controller and Data Protection Officer

Processing of personal data

Sources of personal data

Disclosures of personal data

Data processors

Data transfers outside the EU/EEA

Data security

Data subject rights

Data Controller and Data Protection Officer

Data Controller

Name Finitec Oy

Business ID2454725-4

Email tietosuoja@finitec.fi

Address Kaisaniemenkatu 1 BA, 00100 Helsinki

Data Protection Officer

Name Lauri Huhtanen

Email privacy@barona.fiPhone020 198 3460

Processing of Personal Data

Purpose of processing	Legal basis	Data types	Retention time
Maintenance and management of expert profiles	Legitimate interest	Name Email address Phone number Job application documents, such as a CV and portfolio Information on expertise, education, experience, and skills Referee details and references provided by referees Information on previous collaboration and communications	2.5 years from the most recent contact or update
Management of the subcontracting relationship and invoicing	Contract	Name Email address Phone number Job application documents, such as a CV and portfolio Information on expertise, education, experience, and skills Information contained in contracts, such as invoicing details Information related to the collaboration, such as hours worked	Business contract or relationship2.5 years from the end of the subcontracting relationshipData related to invoicing is retained for 10 years from the end of the financial year
Presenting the expert to a client for an assignment	Legitimate interest	Name Email address Phone number Job application documents, such as a CV and portfolio	Same as the expert profile's retention time (2.5 years from the most recent contact or update)
Sending the newsletter	Consent	Name Email address	For the duration of the newsletter subscription

Sevendos uses the following companies for the processing of data:

Service Provider	Purpose	Location	Read More
Hubspot	Used for client relationship management	European Commission standard contractual data protection clauses, which have been approved by the European Commission	https://legal.hubspot.com/privacy-policy
Google G-Suit	Email accounts and document management	European Commission standard contractual data protection clauses, which have been approved by the European Commission	https://cloud.google.com/security/gdpr/
Google Analytics	Website usage analytics	European Commission standard contractual data protection clauses, which have been approved by the European Commission	https://support.google.com/analytics/answer/6004245?hl=en
Typeform	Collecting feedback and survey responses	European Commission standard contractual data protection clauses, which have been approved by the European Commission	https://help.typeform.com/hc/en-us/articles/360029580771-What-is-GDPR

4. Cookies and analytics

We use cookies on our website to improve its user experience. Cookies are small text files that a browser saves on your device, and they are used, for example, when a service wants to save your information when moving from one website to another. If you do not want to use cookies, you can change your cookie settings at any time in your browser. Please note that disabling cookies might impact how our website functions.

All the details of how we use cookies and how you can manage them can be found on our website.

5. What rights do you have?

You have the right to request access to, erase, and correct your personal data as held and processed by Sevendos, as well as to send us any other requests based on the applicable data protection laws (e.g., request restriction of processing of the data). Further, you always have the right to prohibit us from sending newsletters or other marketing messages to you. Please send any requests concerning your data to the email addresses set out above in Section 2.

Data protection laws are supervised in Finland by the Finnish Data Protection Ombudsman. If you have questions belonging to the jurisdiction of the Data Protection Ombudsman, or if you wish to lodge a complaint regarding the processing of personal data, you may contact the Data Protection Ombudsman’s office as instructed at www.tietosuoja.fi.
In Germany, if you wish to lodge a complaint, you can do it with the Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (Federal Commissioner for Data Protection and Freedom of Information).

6. How do we secure your data?

We consider all personal data we collect to be confidential. Your data can only be accessed by the Sevendos employees or our group company employees when it is necessary for them to perform their work related to your data.

The network and equipment of Sevendos and its partners have been secured by using appropriate measures to protect the personal data against unauthorized access and accidental or unlawful destruction, alteration, disclosure, transfer, or other unlawful forms of processing.