Geonova's privacy policy

Geonova's privacy policy for customers and partners
Geonova's privacy policy for jobseekers

Geonova's privacy policy for customers and partners

This Privacy Policy (hereinafter "Policy") describes how Geonova Ltd ("Geonova" or "we") collects, processes and discloses personal data in connection with the management of customer and partner relationships and website visits. It also describes the rights you have in relation to the processing of your personal data.

We care about your privacy and your right to data protection. We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws and regulations.

Data Controller

Geonova Oy (Business ID: 3295535-4)

Valimotie 17-19
00380 Helsinki

Contact person: Tapo Lehtoranta, tapo.lehtoranta(at)geonova.fi

Collection of personal data

Your personal data may be collected in different ways. As a general rule, we collect and process personal data that

you have given us when you contact or deal with us;
are generated in connection with your visit to the website; and
Obtained from other sources, to the extent permitted by applicable law, e.g. the Trade Register, the Business and Community Information System or the Postal Address Information System.

We collect and process personal data in the following categories of personal data:

Basic information such as name, title, relationship with the company you represent and contact details (email address, postal address and telephone number);
relationship data, such as service and order information, contract information, payment information and billing information
marketing information, such as preferences and marketing authorisations or bans;
your communications and related information, such as correspondence, requests for services, participation in events we organise and information about the exercise of individual rights;
information collected in connection with your use of our website, such as information collected from the website through cookies or similar technologies (device ID and type, operating system and application settings);
project information, such as resourcing, assignments and hourly billing; and
other information as determined on a case-by-case basis, based on your consent.

You are not required to provide us with your personal information, but refusal to do so may make it difficult or impossible for us to do business with you, or the company you represent, or to perform certain functions you request.

Purpose and legal basis for processing personal data

We only collect and process personal information that is necessary for the conduct of our business, to establish and manage customer relationships or for other relevant operational or commercial purposes.

Your personal data will be processed for the following purposes:

1. Sales and customer relationship management

We process your personal data for the purposes of selling services and managing the customer relationship between us and you or the company you represent. These activities include, but are not limited to, setting up a customer relationship, customer support, billing and contractual matters. In these cases, the processing of personal data is based on a contract between us and you, or the company you represent, or on our legitimate interest in managing our customer relationship and serving you based on your choices.

2. Procurement of services, collaborative projects and management of business relationships

We may process your personal data in connection with the procurement of services and collaborative projects in order to manage the business relationship and related dealings between us and you or the company you represent. These activities include, but are not limited to, billing, reporting and contract management. In these cases, the processing of personal data is based on a contract between us and you, or the company you represent, or on our legitimate interest in obtaining the services necessary to conduct our business and to cooperate with and manage business relationships with our selected partners.

3. Provision of services

We may process your personal data in connection with the provision of services to offer and deliver services to you or the company you represent, and to manage our projects and operations. These activities include, but are not limited to, access management, customer support, service requests, troubleshooting, billing and reporting. In these cases, the processing of personal data is based on a contract between us and you, or the company you represent, or on our legitimate interest in the proper organisation of the provision of our services, projects, deliveries and operations.

4. Communications, marketing and related analytics

We may process personal data for marketing purposes and to inform you about the services offered by Geonova or about Geonova as a company. Your personal data may also be used for market research and customer surveys. In addition, your personal data may be used for analytics to help us develop and improve the customer or user experience, our own operations or those of our partners. We may combine information about you that we have obtained from public sources and through various interactions. The processing of personal data is based on our legitimate interest in obtaining relevant information to better understand our stakeholders, including our customers, and to market our services and improve our operations.

You may at any time object to the processing of your personal data for direct marketing purposes (see "Your rights").

We use Leadoo's user tracking to monitor how our users move around our website and combine this data with user information collected through, for example, chat interactions. Leadoo uses etag tracking which is technically different from cookie-based tracking, but subject to the same laws as cookies. Check the Leadoo Marketing Technologies LLC Privacy Policy (https://leadoo.com/privacy-policy/) to learn more about what is tracked in the system. In the GDPR sense, we act as the controller and Leadoo as the data processor. If you do not want to be tracked you can clear your browser cache. For more information on how Leadoo works check https://leadoo.com/privacy-policy-processor/

6. Service development, data security and internal reporting

Personal data is processed to ensure the quality and security of our services. We may also process personal data in the course of providing our services for the analysis and development of our services and operations, such as automating operations and improving process efficiency, and for statistical purposes, such as business management. In these cases, the processing is based on our legitimate interest in ensuring an adequate level of security of our services, in providing our services efficiently using available technologies and in ensuring the competitiveness of our services and operations.

7. Enforcement of rights and compliance with the law

We may also process your personal data to investigate misconduct, to protect, defend or enforce our rights in government proceedings or in connection with disputes, for example, to prove compliance with contractual obligations or to respond to legal claims. In these situations, processing is based on our legitimate interest in being able to demonstrate compliance with our activities and to adequately protect our rights.

We may process your personal data to fulfil our legal obligations, for example, in relation to accounting or to comply with legal requests for information from public authorities (e.g. tax authorities).

8. Other purposes for which you have consented

We may also process personal data for other, one or more explicit, purposes if you have given your consent to such processing.

Transfers and disclosures of personal data

We may transfer personal data to third parties:

To the extent permitted or required by law, for example, to comply with a request from a competent authority or in connection with legal proceedings;
where our service provider processes personal data on our behalf and in accordance with our instructions. We control and are responsible for such processing of your personal data;
when we are involved in a merger, acquisition, or sale of a business or part of a business;
when we determine that disclosure is necessary to enforce our rights, protect your safety or the safety of others, investigate wrongdoing, or respond to a request from a governmental authority; and
where you have consented to the disclosure of your information. In such cases, the information will be disclosed in accordance with that consent.

Transfers of personal data outside the EU or EEA

We do not transfer personal data outside the EU or the European Economic Area.

Cookies

We use cookies and other similar technologies on our website www.geonova.fi.

Cookies are small text files placed on your device to collect and remember useful information to improve the functionality and usability of our website. We may also use cookies and other similar technologies for statistical purposes, such as compiling statistics on website usage, understanding how users use the website and improving the user experience.

You can choose to block the setting of cookies, restrict the use of cookies or delete cookies from your browser. As cookies enable our website to function, restricting the use of cookies may affect the usability of the website. In this case, the website may not function properly.

You can read more about cookies here.

Retention of personal data

Personal data will only be kept for as long as necessary to fulfil the purposes of use specified in this Notice.

Personal data is stored for the duration of the customer and partner relationship. Personal data may also be retained to the extent permitted or required by applicable law, where necessary, after the termination of the customer and partner relationship. For example, after the end of the customer/partner relationship, we typically retain personal data necessary to respond to claims or actions under applicable statute of limitations provisions. We may also, for example, retain personal data to the extent necessary to comply with a direct marketing injunction you have given us.

Personal data will be deleted when it is no longer necessary to retain it in order to comply with the law or the rights or obligations of either party.

Your rights

You have the right to inspect your personal data. You may also request at any time that your personal data be corrected, updated or deleted. Please note, however, that personal data that is necessary for the purposes of this Notice or that is required to be retained by law cannot be deleted.

You have the right to object to or restrict the processing of your personal data to the extent required by applicable law. You have the right at any time to object to the processing of your personal data for direct marketing purposes, in which case we will no longer send direct marketing communications.

In certain cases, you have the right, in accordance with applicable law, to transfer the personal data you provide to us from one system to another, i.e. to receive your personal data in a structured, commonly used, machine-readable format and to transfer your personal data to another controller.

When we process your personal data on the basis of consent, you have the right to withdraw your consent at any time. We will not process your personal data thereafter unless there is no other legal basis for the processing.

You can exercise your rights by sending a request to us at asiakaspalvelu@geonova.fi. Please note that not all data subjects' rights are unlimited. Please specify in your message which right you wish to exercise.

You may be asked to confirm your identity, to specify your request and to provide additional information in relation to your request.

We will respond as soon as possible. If for any reason Geonova does not accept your request, we will explain why. If you consider that your personal data are not being processed fairly, you have the right to refer the matter to the Data Protection Officer. You can find the contact details of the Data Protection Officer on the Data Protection Officer's website: www.tietosuoja.fi.

Data security

We take appropriate measures (including physical, digital and administrative measures) to protect personal data against loss, destruction, misuse and unauthorised access or disclosure. For example, access to personal data is limited to those persons who need it for the performance of their duties. In addition, our website is built to be secure, we use secure SSL and firewalls. Regular updates are made to the website, which reinforces the security of the site.

Please note that even appropriate measures cannot prevent all possible security breaches. In the event of a personal data breach, we will notify you in accordance with applicable laws.

Amendments to the Privacy Statement

We reserve the right to amend this Notice. We will notify you of any changes on our website www.geonova.fi, where you will also find the latest version of this Notice.

This Statement was last updated on 8 January 2025.

Contact us

If you have any questions about this Notice or for further information about the processing of your personal data, please contact us by email at asiakaspalvelu@geonova.fi.

Geonova Privacy Policy for Job Seekers

This Privacy Policy (the "Policy") describes how Geonova Ltd ("Geonova" or "we") collects, processes and discloses personal data in connection with the job application and recruitment process. The Statement also describes your rights in relation to the processing of your personal data.

Data Controller

Geonova Oy (Business ID: 3295535-4)

Valimotie 17-19
00380 Helsinki

Contact person: Tapo Lehtoranta, tapo.lehtoranta(at)geonova.fi

Collection of personal data

Your personal data may be collected in different ways. As a general rule, we collect personal data directly from you. To the extent permitted by applicable laws, we may also collect personal data from other sources, such as public databases.

We collect and process personal data relating to applicants that is necessary for the processing of job applications and the recruitment process, such as

Basic information such as name, home address, email, telephone number, place and date of birth;
information contained in your job application and related documents, e.g. educational background, previous work experience, qualifications, language skills and references; and
information collected and processed during the recruitment process, e.g. information on the progress of the recruitment process, notes on your application and any interviews and references.

You can choose not to provide us with your personal data, but we may not be able to continue the recruitment process with you.

Purpose and legal basis for processing personal data

We process applicants' personal data in the recruitment process, for example to process job applications, to inform applicants about the progress of the recruitment process, to organise interviews and to test professional or personal suitability. The legal basis for the processing of personal data is the possible performance of pre-employment measures on the basis of a request sent to us on the basis of an application.

Transfers and disclosures of personal data

We may disclose personal data to third parties, such as the recruitment agency:

To the extent permitted and required by law;
Where our partners process personal data on our behalf and in accordance with our instructions (e.g. suitability assessments). We will always ensure that your personal data is processed fairly;
where we are involved in a merger, acquisition or sale of a business or part of a business;
where we believe that disclosure of personal information is necessary to enforce our rights, protect your safety or the safety of others, investigate wrongdoing or respond to a request from a public authority; and
with your consent, to parties to whom the consent applies, such as referral sources.

Transfers of personal data outside the EU or EEA

We do not transfer personal data processed in the recruitment process outside the EU or EEA.

Retention of personal data

Personal data will only be kept for as long as necessary to fulfil the purposes of use as defined in this Notice.

Personal data will be deleted when its retention is no longer necessary to fulfil the law or the rights or obligations of either party.

Your rights

You have the right to object to or restrict the processing of your personal data to the extent required by applicable law.

You may be asked to confirm your identity, to specify your request and to provide additional information in relation to your request.

Data security

We take appropriate measures (including physical, digital and administrative measures) to protect personal data against loss, destruction, misuse and unauthorised access or disclosure. For example, access to personal data is limited to those persons who need it for the performance of their duties. In addition, our website is built to be secure, using secure SSL and firewalls. Regular updates are made to the website, which reinforces the security of the site.

Please note that even appropriate measures cannot prevent all possible security breaches. In the event of a personal data breach, we will notify you in accordance with applicable laws.

Amendments to the Privacy Statement

We reserve the right to amend this Notice. We will notify you of any changes on our website www.geonova.fi, where you will also find the latest version of this Notice.

This Statement was last updated on 08.01.2025

Contact us

If you have any questions about this Notice or for further information about the processing of your personal data, please contact us by email at asiakaspalvelu@geonova.fi.