Prospectum Oy Privacy Policy
This Privacy Policy describes the data protection practices applicable to information collected through the websites owned by Prospectum Oy (www.prospectum.fi, www.eventos.fi, www.viestiseina.fi, www.prospectumlive.com, www.tavoittaja.fi).
It also describes the processing of personal data collected through forms on the websites or obtained from other public sources, and the rights of data subjects in relation to such processing.
This Privacy Policy explains the following:
- The types of information collected through the website, how that information is used, and the parties with whom it may be shared.
- The options and rights available to individuals regarding the processing of their personal data.
- The security practices and safeguards implemented to prevent unauthorized use or misuse of information.
- How an individual may request the rectification of inaccurate personal data.
This Privacy Policy does not apply to situations in which a customer administers a service provided by Prospectum Oy, such as the Eventos event management platform or the Tavoittaja.fi text messaging service. In such cases, Prospectum Oy acts as the data processor, and the customer organization acts as the data controller.
1. Data Controller:
Prospectum Oy, FI23531293, Ylistönmäentie 24, 40500 JYVÄSKYLÄ
2. Contact Person for Data Protection Matters
Pekka Neuvonen, CEO, 040 543 3500
3. Purpose of Processing Personal Data
Prospectum Oy collects information about companies that fall within the target group of its services and the individuals working within them. The data is collected via websites and other public sources.
Prospectum Oy is the sole owner of the collected data. We do not sell or rent this information to any third parties. Data is disclosed only to the Finnish Police or the Defence Forces as a result of a criminal legal process.
We may contact individuals who have provided their data to us via electronic communication channels to inform them about our services or about changes to this Privacy Policy.
4. Legal Basis for Collection and Processing of Data
The legal basis is an existing customer relationship or an identified potential user of our services, i.e. the legitimate interest of the data controller. The purpose of processing personal data is communication with customers, maintenance of customer relationships, and marketing.
5. Regular Sources of Data
We collect personal data directly from the user through online forms, email messages, or phone calls.
When an individual uses our website, we automatically collect information about their activity, such as pages visited, the device used, and IP address, through cookies or other tracking technologies.
If an individual fills in forms on the website, we collect the name, company, and contact details required for communication.
The data is stored in Prospectum Oy’s customer information system.
6. Regular Disclosure of Data and Transfer of Data Outside the EU or European Economic Area
All data collected by Prospectum Oy is stored within the European Union. Personal data is not disclosed to third parties except to the extent necessary, for example to fulfil an order.
7. Contents of the Register
We collect information about organizations and the individuals working in them.
Examples of information collected about organizations include:
- Organization name, marketing name, trade names, secondary trade names
- Organization contact details, financial information, industry information
The following information is collected about employees of organizations:
- Name, job title, contact details
- Email analytics data sent to the individual
- Other data exchanges with the individual
Prospectum Oy uses the following information systems and service providers for the collection and storage of the data mentioned above.
Website data collection: Google Analytics – web analytics service:
1. Purpose of Processing Personal Data:
The purpose of processing personal data in Google Analytics is to collect and analyze anonymous user data on the activity of website and application users. The data is used to understand user behavior, improve user experience, optimize website and application performance, and enable targeted marketing activities. No personal data is collected or stored through Google Analytics, as the service primarily operates based on anonymous and aggregated statistical data.
2. Content of Personal Data and Disclosure to Google Analytics:
Our websites use Google Analytics 4 cookies to collect the following information:
- Number of visitors
- Session statistics
- Approximate geographic location
- Browser and device information
3. Data Protection and Security
Google Analytics ensures that JavaScript libraries and measurement data can be transmitted securely. Google Analytics uses the HSTS (HTTP Strict Transport Security) protocol by default. It instructs browsers that support HTTPS (HTTP over SSL) to encrypt all communication between end users, websites, and Google Analytics servers using this protocol.
4. Data Retention Period
The retention period for Google Analytics data on the website is 14 months.
5. International Data Transfers
Google uses Standard Contractual Clauses when transferring personal data collected for online advertising and measurement outside Europe. The Google Ads Data Processing Terms, which apply to services where Google acts as a data processor, include both the European Commission’s Standard Contractual Clauses (to ensure that data transfers comply with the GDPR) and the UK Standard Contractual Clauses (to ensure that data transfers comply with the GDPR as incorporated into UK law), as required for lawful data transfers.
Google is committed to carrying out data transfers on lawful grounds and in compliance with applicable data protection laws.
You can read more about data collection in Google Analytics on Google’s website: https://support.google.com/analytics/answer/6004245?hl=fi
Website data collection: DealFront – data collection service
1. Purpose of Processing Personal Data:
The collected data is used solely to support B2B marketing, communication, service delivery, and contract management. The data is handled confidentially and is not shared with third parties without your consent, except where required by law or necessary to fulfil contractual obligations.
2. Content of Personal Data and Disclosure to DealFront:
Our websites use DealFront cookies to collect the following information:
- Personal data (name, title)
- Contact details (email address, phone number, postal address)
- Contract details (contract specifics, services, company information related to the contract)
- Company interaction history (calls, meetings, emails related to the contract) – most natural and standard
- Website traffic data and metadata
3. Data Protection and Security:
The processing and use of personal data take place exclusively within the territory of the Federal Republic of Germany, a member state of the European Union, or another contracting state of the European Economic Area.
Any transfer to a third country requires the prior consent of the data controller and may only take place if the specific requirements of Article 44 of the GDPR are met. This also applies to data backup performed by the data processor.
DealFront acts as a data processor and is obliged not to use personal data for any other purposes, in particular for its own purposes. No copies or duplicates may be made unless they are part of the order and necessary for fulfilling the main agreement, or unless the data controller has given prior written consent.
Processes or actions in which clearly readable text or information is converted into an unreadable or difficult-to-interpret string through encryption using a cryptographic system. Description of encryption measures:
- Data encryption in transit
- Data Encryption at-rest
You can read more about DealFront’s security practices in their “Data Processing Agreement in accordance with Art. 28 GDPR” document: https://marketing.dealfront.com/inside-eea-data-processing-agreement-dealfront-en.pdf
4. Data Retention Period:
Contact requests submitted via the website are stored in the customer relationship management system, and once the customer relationship ends, the data is deleted upon request.
Upon termination of the agreement, DealFront is obliged to delete the personal data. In addition, they are required to delete personal data in accordance with the GDPR if requested by the data controller.
SendGrid – email service
1. Purpose of Processing Personal Data:
We use SendGrid for sending and managing emails. With SendGrid, we can send important messages to individuals, such as order confirmations, information about our services, or other business-related communications.
2. Content of Personal Data and Disclosure to SendGrid:
In order to send emails securely and efficiently, we disclose certain personal data to SendGrid.
The personal data disclosed includes:
- Name of the individual
- Company/organization
- Contact details (phone number, email address)
3. Data Protection and Security:
We use security measures to protect your data. When sensitive information is transmitted through the website, it is protected both online and when stored.
You can read more about SendGrid’s privacy practices on their website: https://www.twilio.com/en-us/legal/privacy
4. Data Retention Period:
SendGrid stores email activity and metadata (such as opens and clicks) for 30 days. SendGrid also stores sending history and suppression lists (bounced messages and unsubscribes), as well as spam reports (which may include content), for as long as they are necessary.
Use of Google Tag Manager
Prospectum Oy’s customers may, if they wish, integrate Google Tag Manager (hereinafter GTM) into the web applications they manage. Google Tag Manager is a tool that allows website owners to manage and deploy marketing tags, such as tracking pixels or analytics scripts.
If our customer has chosen to include a GTM tag, end users are given the option to either accept or reject its use. Please note that Google may collect and process data in the manner described in its privacy policy (https://policies.google.com/privacy?hl=fi).
Prospectum Oy does not control the data collected via GTM. Instead, the data is controlled by the event organizer and Google, so we recommend reviewing both the event organizer’s and Google’s privacy policies for more information on how your data is processed.
8. Data Retention Period
The retention period for Google Analytics data on the website is 14 months.
SendGrid stores email activity and metadata (such as opens and clicks) for 30 days. SendGrid also stores sending history and suppression lists (bounced messages and unsubscribes), as well as spam reports (which may include content), for as long as they are necessary.
Contact requests submitted via the website are stored in the customer relationship management system, and once the customer relationship ends, the data is deleted upon request.
9. Data Protection Measures
We use security measures to protect your data. When sensitive information is transmitted through the website, it is protected both online and when stored.
When we collect sensitive information (such as usernames or passwords), the data is encrypted and transmitted to us securely. You can verify this by looking for a closed padlock icon at the bottom of your browser or by checking that the website address in the browser’s address bar begins with “https”.
In addition to encrypting sensitive data during transmission, we also protect data while it is stored. Only employees who need the information for specific tasks (such as invoicing or customer service) are granted access to personal data. The computers and servers where personal data is stored are kept in a secure environment.
10. Automated Decision-Making:
We do not apply automated decision-making to this data.
11. Rights of the Data Subject:
The data subject has the right to:
- An individual may opt out of future communications from us at any time by contacting: support@prospectum.fior+358 40 358 0600
- Access any information we may have about the individual.
- Modify or rectify the data we have stored about the individual.
- Request deletion of data.
- Express any concerns regarding how we use your data.
- Google Analytics:
- “Opt-out” option – You can opt out of the use of Google Analytics on our website. We provide a clear option to refuse the collection of your data through Google Analytics.
- An individual can prevent broader data collection by Google Analytics by installing the “opt-out” browser add-on provided by Google Analytics. This add-on prevents Google Analytics tracking from being activated in the browser when the individual visits our website and other websites.
- You can download the “opt-out” add-on from: https://tools.google.com/dlpage/gaoptout/
Changes
Our Privacy Policy may be updated from time to time, and changes will be announced on this page.
For any privacy-related questions, you can contact us immediately by phone at +358 40 358 0600 or via email support@prospectum.fi.