Contacts
Data Controller: Tutkimustie Oy (Y 2010879-9), Naulakatu 3, 33100 Tampere, tel. +358 3 212 6266 and email info(at)tutkimustie.fi.
Data Protection Officer (Tietosuojavastaava): Miia Moisio, Tutkimustie Oy, privacy (at) tutkimustie.fi.
Processing of personal data
We store personal data only for a legitimate reason. The use of the Services is voluntary, and the personal data is processed solely for the purposes presented.
The data is processed by the personnel responsible for providing the service and maintaining its content at Tutkimustie Oy. Additionally, our subcontractors, with whom Tutkimustie Oy has agreements in place, process personal data in accordance with the GDPR requirements.
Your rights
If you are a resident of the European Economic Area (EEA), you have certain data protection rights:
1. The right to access, update, or request the deletion of your personal data.
2. You have the right to have your information rectified if that information is inaccurate or incomplete.
3. You have the right to object to our processing of your Personal Data.
4. You have the right to request that we restrict the processing of your personal information.
5. You have the right to withdraw your consent at any time where Tutkimustie Oy relied on your consent to process your personal information.
You have the right to lodge a complaint with a Data Protection Authority if you are dissatisfied with the collection or use of your personal data. For more information, contact details can be found at tietosuoja.fi (Tietosuojavaltuutetun toimisto).
What information we collect and why
Our data register contains the following information:
- information about the controller's customers, their representatives, and contact persons,
- information about potential customers,
- information on job seekers and
- information on other stakeholders, as well as
- information about website visitors.
We process personal data for the following purposes:
- marketing, implementation and development of products and services,
- customer contact, invoicing and customer service management,
- the exercise of the rights and obligations of the customer and the controller, as well as
- processing of job applications and communication related to recruitment.
The information stored in our customer register may include your name, position, email address, telephone number, company name, address, IP address and location, customer relationship and order information, billing information, login credentials, user activity data, content of messages sent to us, and information related to order data.
The newsletter and marketing register may contain company name, name, position, email address, phone number, IP address and location, user activity data, and personal marketing information (meetings, invitations, reminders).
The job applicant register may contain name, contact information, IP Address and location, additional information provided by the applicant, recruitment-related communications and our employees' assessments.
If you send an email to our customer service or chat with us via chat, we may retain the messages.
Personal data is obtained from the following data sources:
- from the data subject to manage the customer relationship,
- from the data subject himself/herself when applying for a job,
- from the data subject as part of another working relationship,
- from a representative of another entity in a customer,
cooperation or other contractual relationship with the controller, or
- publicly available sources, such as the Internet and the Trade Register.
In addition, we may obtain personal data from third parties provided by the data subject in text files, audio or video files or other file formats. This information is subject to the same principles of protection and processing of personal data as other personal data.
The legal basis for the processing of personal data includes consent, a contract, the controller's legal obligations and the legitimate interest of the controller. On our website you can register for services by providing your personal data and you can contact us using the contact form. The information stored in the register is received directly from you via messages sent on forms, by email, telephone, social media services, contracts, customer meetings and other situations in which you disclose your information to us.
We process and store personal data only for as long as it is necessary for the purpose of the personal data described above. We retain marketing and customer information for as long as there is consent or legal basis for it, but no longer than 10 years. We regularly delete personal data that is no longer needed.
Who has access to your data
Personal data is processed only by the employees and sub-processors of Tutkimustie Oy,
who need to process the data to carry out operations and services.
We have appropriate written agreements with all processors and ensure they comply with the data security and privacy practices required by the GDPR. We use the following service providers, subcontractors, and cloud services to deliver our services:
Sub-processors:
• Domainkeskus Oy (previously MMD Networks Oy): Hosting Services. Location: EU/EEA.
• Stena Recycling Oy (1956402-5) - Location: EU/ETA - Secure destruction of confidential material.
• Freelancers and individual subcontractors of Tutkimustie Oy – Processing location: EU/EEA - Production of content and text services. We provide specific details upon request.
Cloud service providers:
• Microsoft Corporation – Processing location: EU/EEA (West Europe and North Europe) – MS Azure and O365 services in accordance with Microsoft's standard terms.
• Webropol Oy – Processing location: EU/EEA - Survey tools.
Financial administration, marketing, and communication services used in processing customer data:
• VismaSign – Processing location: EU/EEA – electronic signature system.
• Accountor Finago Oy (0836922-4) – Processing location: EU/EEA – Financial administration cloud services.
• Aallon Tampere Oy (0153649-9) – Processing location: EU/EEA – Financial administration services.
• Fennoa Oy (2593931-3) – Processing location: EU/EEA – Financial administration cloud services.
• Hämeen atk- ja tilipalvelu Oy (0491887-1) – Processing location: EU/EEA – Financial administration services.
• Idman Vilén Grant Thornton Oy (0206206-1) - Processing location: EU/EEA - Financial administration services.
• Tavoittaja.fi - Processing location: EU/EEA - Automated SMS services.
• Moontalk Oy - Location: EU/ETA - Call processing, together with telecommunications operators (Elisa Oyj).
Protecting your data
We handle your data with care, and the data processed through our information systems is protected with appropriate technical and administrative measures. When storing personal data on internet servers, the physical and digital security of the hardware is properly ensured. The controller ensures that stored data and other critical personal data are processed confidentially and only by those employees whose job description includes handling such data. We review, monitor, and evaluate our data protection policies and systems regularly.
Transfer of data
We do not transfer personal data, including data within customer research materials or other confidential materials, outside the European Union or the European Economic Area.
The information collected for the newsletter and marketing register is stored and processed within the EU/EEA or in third countries that the European Commission considers to have an adequate level of protection, or is processed by service providers that have entered into agreements ensuring compliance with the legal standards for international data transfers (such as Privacy Shield) or have sufficient safeguards for the protection of the rights of data subjects. We carefully select partners and work with service providers involved in newsletters, marketing services, and analysis services.
Cookies
We use cookies on our website. Cookies are small files that the internet browser stores on your device.
Cookies are necessary for the proper functioning of this website. Cookies help us to get an overview of your visit, which allows us to develop the website and tailor it to your needs and wishes. Cookies store information such as which forms you have filled in and whether you have previously visited a page. We also use cookies for targeted advertising on other websites. We use cookies as part of our service because we want to provide you with interesting and relevant content.
The storage time of cookies on your device varies. The deletion time is calculated based on your most recent visit. Once the cookie expires, it will automatically disappear from your device.
When you visit our website, you receive a cookie notification. If you do not allow cookies, no information about your use of the website will be stored. You can also disable cookies in your browser settings. If you do not allow the use of cookies, you can still use our website, but not all functions may work properly.
SAML (HAKA)
When logging in to OmaTutkimustie via SAML (HAKA), the following personal data may be requested from the identity provider you use: unique identifiers to verify the user’s account, name, and email address. This information is necessary to enable access to the service.
Information collected from the website for marketing purposes
We use Google Ads and Google Tag Manager to advertise our services and monitor ad performance. The related data collected from website use is not tracked individually. We only use Google's tools on our public websites, never in our secure online services.
Changes to this Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. By checking this page regularly, you can keep up to date with the ways we protect your personal data.
Questions
If you have any questions about our Privacy Policy, please contact us by email privacy (at) tutkimustie.fi.
For more information about our Terms of Service, upload document here (in Finnish).
This Privacy Policy was updated on January 23, 2025.