Privacy Policy

How Minda Group Oy collects, uses and protects your personal data.

Updated 7.5.2020

This register and privacy policy describes how Minda Group Oy (hereinafter Minda), as the controller, collects and processes data gathered from its website. As the controller, Minda is committed to complying with the EU General Data Protection Regulation (2016/679) and the Finnish Data Protection Act (5.12.2018/1050).

By using our website you accept this privacy policy.

1. Controller

Minda Group Oy Business ID: 3375972-6 Petsamontie 48 A 1 99800 Ivalo

2. Contact person for register matters

info(at)minda.fi

3. Name of the register and data subjects

Minda Group Oy's customer register and the MINDA profile survey participant register. The register contains personal data of our customers, potential customers and their representatives, as well as individuals who have participated in the MINDA profile survey.

4. Purpose of processing personal data

Data is used for customer relationship management, customer communications and improving the user experience of Minda's online services, with the goal of targeting our communications so that you receive messaging relevant to you. Data is also used for marketing purposes. Our legal basis is legitimate interest for marketing and the performance of a contract for customer relationship management. We also send you electronic direct marketing messages based on your consent. For the MINDA profile survey, data of participants is collected and used in assignments for Minda's client companies. Individuals submit their data to the register with their own consent and have the right to withdraw their consent at any time.

5. Register data content

We collect name, phone, email, address and other information you provide. Through cookies we obtain measurable data about our visitors, which we use, for example, when planning our marketing. This allows us to target our communications as precisely as possible. Data collected via cookies may also be used for targeted advertising (remarketing). We do not disclose your data to third parties for marketing purposes.

6. Regular sources of data

The collection of name and other contact information is based on a customer relationship or other connection to Minda. We collect data when a contract is concluded, when you register, or when you use Minda's services. We therefore collect personal data primarily from you. We may also receive personal data from your employer or another party who registers you for training we offer. We also track cookies and your visit to Minda's website leaves a trace, an IP address. Personal data may also be purchased for one-time marketing use from external registers. We may also collect personal data from public sources.

7. Regular disclosures of data

Data is not disclosed to third parties for marketing purposes. For some of our training programmes, we use external training providers or platforms for sharing training materials and discussions. In such cases, we may disclose the necessary information such as your name and email address to the service provider.

8. Transfer of data outside the EU or EEA

We may use service providers in the processing of your personal data who may have access to your personal data from outside the EU/EEA area, such as from the United States. We ensure that transfers are carried out appropriately and lawfully in accordance with personal data processing legislation.

9. Register security and retention period

We respect the confidentiality of your personal data. The register is stored in a database protected by firewalls, passwords and other technical means, accessible only to persons authorised by Minda. We delete outdated and unnecessary data in an appropriate manner. We retain personal data only for as long as necessary to fulfil the purposes of processing defined in this privacy policy. Data of participants in the MINDA profile survey is deleted from the system 24 months after it has been stored.

10. Rights of the data subject

You have the right at any time to object to the processing of your personal data for direct marketing purposes. Every direct email sent by Minda contains a legal unsubscribe link. In addition, you have the right at any time to: access information about the processing of your personal data; access your own data; request correction of inaccurate data; request erasure of your personal data; withdraw your consent; and request restriction of processing. You also always have the right to lodge a complaint with the relevant supervisory authority if you believe that we have not processed your personal data in accordance with applicable data protection legislation. Requests: Minda Group Oy, Petsamontie 48 A 1, 99800 Ivalo — info(at)minda.fi

11. Changes to this privacy policy

We continuously strive to develop our services and therefore reserve the right to amend this privacy policy by announcing the change on this page.