This privacy policy discloses the privacy practices for websites (www.prospectum.fi, www.eventos.fi, www.viestiseina.fi, www.prospectumlive.com, www.tavoittaja.fi ) owned by Prospectum Ltd.

This policy also contains information regarding the website's forms, and the handling of personal information collected from other public sources.

This policy contains the following information:

• What information is collected through the website, how the information is used and who the information can be shared with.
• What options do you have regarding the processing of your personal information.
• The existing security procedures to prevent misuse of information.
• How you can request correction to inaccurate data.

This privacy policy does not concern cases where a client is administering a service, such as Eventos event management service or Tavoittaja.fi SMS service, provided by Prospectum Ltd. In these cases, Prospectum Ltd. is the data processor and the client organization the data controller.

1. Registrar 
Prospectum Ltd, FI23531293, Ylistönmäentie 24, 40500 JYVÄSKYLÄ

2. Contact person for matters regarding the register
Pekka Neuvonen, CEO, +358 40 543 3500

3. The register's purpose 
Prospectum Ltd. collects information about companies and their employees within their services’ target group. This information is collected from websites and other public sources.

Prospectum Ltd. is the sole owner of the collected information. We do not sell or rent the information to third parties. The information will only be shared with the Police of Finland or the Finnish Defense Forces in case of criminal proceedings.

We may contact people, who have given their personal information, via electronic means of communication to provide information regarding our services or changes to this privacy policy.

4. The basis of information collection and use 
The legal basis is an existing client relationship or a recognized potential user of our services. Personal information is used to contact clients, maintain client relationships and market our services.

5. Sources of information 
We gather personal information straight from the user via online forms, emails, or phone calls.

When a person is using our website, we collect data about their actions (such as which pages they’ve visited on the website or what device they’re using) and their IP address by using cookies or other tracking technologies.

The person’s name, company and necessary contact information are collected when they fill forms on the website. 

The information is stored in Prospectum Ltd.’s customer database.

6. Transfer of data outside the EU/EEA
All information collected by Prospectum Ltd. are stored in the EU area. No personal information is given to a third party unless necessary (e.g., to deliver an order).

7. Data content of the register 
We collect information about companies and their employees.

The information collected about organizations includes e.g.:

• Organization name, marketing name, trade name, auxiliary company name
  • Organization contact details, financial data, line of business

The information collected about organizations' employees includes e.g.:

• Name, job title, contact details
  • Analytics regarding emails sent to the employee
  • Other exchange of information with the empoyee

                        Prospectum Ltd. uses the following data systems and services to collect and store the information mentioned above.

Website data collection: Google Analytics - web analytics service:

1. The purpose of handling personal information

The purpose of handling personal information with Google Analytics is to collect and analyze anonymous user data related to website and application users. With this information, we seek to understand user behavior, enhance user experience, optimize website and application performance as well as target our marketing to the correct audience. No personal information is collected or stored with Google Analytics, and the service mainly runs with anonymous and general statistical data.

2. The contents of personal information and its disclosure to Google Analytics

The website uses a Google Analytics 4 cookie that is used to collect the following information:

1. Number of visitors
2. Session statistics
3. Estimated geographical location
4. Browser and device information

3. Data protection and security

Google Analytics ensures the safe transfer of JavaScript libraries and measurement data. Google Analytics uses HSTP (HTTP Strict Transport Security) protocol by default, which forces browsers supporting HTTPS (HTTP over SSL) to encrypt all data communication between the end user, website and Google Analytics servers.

4. Data retention period

The website’s Google Analytics register stores data for 14 months.

5. International data transfer

Google uses standard contractual clauses that are applied when transferring personal information collected through online advertising and measurements outside of Europe. Google Ads data processing terms, that are applied on services where Google works as the data processor, include the standard contractual clauses published by the European Commission (to assure that the data transferring is GDPR compliant) and the United Kingdom (to make sure that the data transferring is GDPR compliant according to the UK law) as appropriate data processing requires.

Google has pledged to process data with legal justification and according to applicable data protection laws.

You can read more about how Google Analytics collects data from their website:
https://support.google.com/analytics/answer/6004245?hl=fi

Website data collection: DealFront – data collection service:

1. The purpose of handling personal information

The collected information is used to support B2B-marketing, communication, delivery of services and contract management. All information is processed confidentially and they’re not shared with a third party without agreement, except for legal reasons or to fulfill a contract.

2. The contents of personal information and its disclosure to DealFront

The website uses a DealFront cookie that is used to collect the following information:

1. Personal details (name, job title)
2. Contact details (email address, phone number, address)
3. Contract information (contract details, services, contract negotiation details)
4. Contract negotiation history (phone calls, meetings, emails)
5. Website traffic and meta information

3. Data protection and security

The processing and use of personal information is done exclusively in the Federal Republic of Germany, a Member State of the European Union or another country of the European Economic Area.

Transfer of information to a third-party country requires the registrar’s prior consent and can only be done if it fulfills the special requirements of GDPR Article 44. This also applies to any backup copies made by the data processor.

DealFront service works as the data processor and is obligated not to use personal data for other purposes, especially for their own gain. Copying and creating duplicates is forbidden, if it’s not part of the order and essential to fulfilling the main contract or the registrar hasn’t given prior written consent.

Measures or functions where a clearly readable text or information is encrypted into an unreadable code by using an encryption method (cryptographic system). Description of encryption methods:

• Data Encryption in transit
• Data Encryption at-rest

You can read more about DealFront’s security policies from their “Data Processing Agreement in accordance with Art. 28 GDPR” document:
https://marketing.dealfront.com/inside-eea-data-processing-agreement-dealfront-en.pdf

4. Data retention period

Contact requests made on the website are saved in a customer relationship management system and this information is deleted by request once the customer relationship comes to an end.

DealFront is obligated to remove personal information once the contract comes to an end. They’re also obligated to remove personal information GDPR compliantly if the registrar so requires.

SendGrid - email service

1. The purpose of handling personal information

We use SendGrid to send and manage emails. With SendGrid, we can send important messages, such as order confirmations and information about our services, or other business-related communication.

The contents of personal information and its disclosure to SendGrid

To make email communication as safe and effective as possible, we transfer certain personal information to SendGrid:
This personal information includes:

• name
• company / organization
• contact details (email address, phone number)

3. Data protection and security

We use precautionary measures to secure your data. When sensitive information is sent through the website, it's protected both online and in storage.

You can read more about SendGrid's privacy policies from their website:
https://www.twilio.com/en-us/legal/privacy

4. Data retention period

SendGrid stores email action and meta information (such as opens and clicks) for 30 days. SendGrid stores send history and exclusion lists (bounced messages, optout) as well as spam reports (that contain information) as long as it is necessary.

You can read more about SendGrid's security policies from their website:
https://sendgrid.com/policies/security/

Use of Google Tag Manager:

Optionally, the users administering our software may choose to include their Google Tag Manager (later GTM) ID on the apps and websites they administrate. Google Tag Manager is a tool that allows website owners to manage and deploy marketing tags (such as tracking pixels or analytics scripts) on their websites and apps.
If the described client has chosen to include your GTM ID, the end user will be prompted to accept the use of GTM, which they can also choose to deny. Please note that Google may collect and process data as described in their Privacy Policy (https://policies.google.com/privacy?hl=en) Prospectum Ltd does not control the data collected by Google through GTM. The data is rather controlled by both the event organizer and Google, and thus we encourage you to review the event organizer's and Google's Privacy Policies for more information on how they handle your data.

8. Data retention period 

The website’s Google Analytics register stores data for 14 months.

SendGrid stores email action and meta information (such as opens and clicks) for 30 days. SendGrid stores send history and exclusion lists (bounced messages, optout) as well as spam reports (that contain information) as long as it is necessary.

Contact requests made on the website are saved in a customer relationship management system and this information is deleted by request once the customer relationship comes to an end.

9. Register security 

We use precautionary measures to secure your data. When sensitive information is sent through the website, it's protected both online and in storage.

When we collect sensitive information (such as usernames and passwords), the data is encrypted and transferred securely. You can confirm this by finding the closed lock symbol at the top of your browser window or by making sure that the website URL starts with “https”.

In addition to transferring sensitive information securely, the information is also safely stored. Only employees who require this information for a certain task (such as billing or customer service) have access to personal information. All computers and servers, where the personal information is stored, are in a secure environment.

10. Automated decision-making 

We do not use automated decision-making.

11. The registered person's rights 

The person has a right to:

• Opt out of future contact at any time by contacting us via email at support@prospectum.fi or by calling +358 40 358 0600  
• See what information we're storing about them.
• Change/correct information we've stored about them
• Ask us to remove information
• Express any concerns they may have related to the way we’re using their information.

• Google Analytics:
  • A chance to “Opt-out” – The person can opt out of using Google Analytics on our website. We offer a clear option to opt out of their information being collected with Google Analytics.
  • The person can block Google Analytics from collecting information by installing an opt-out add-on provided by Google Analytics into their browser. This add-on stops Google Analytics from tracking them on our website and other sites.
  • The person can download the opt-out add-on from here: https://tools.google.com/dlpage/gaoptout/

Changes

Our privacy policy may change over time and all changes are mentioned on this page.

If you have any questions regarding our data protection, please contact us by calling +358 40 358 0600 or by sending an email to support@prospectum.fi.