IONA's Privacy Policy

PRIVACY POLICY

Privacy is very important for us at IONA (“we” or “IONA”), and we strive to process any personal data as transparently as possible. This Privacy Policy describes how we collect, use and store personal data and how you can use your rights as a data subject. We process personal data in accordance with the applicable legislation, including the EU General Data Protection Regulation (2016/679).

1.) Data Controller

IONA & Co Oy (Business ID: 2914622-2)
Jaakonkatu 5, 00100 Helsinki, Finland

2.) Contact information

If you want to exercise your rights or you have any questions relating to the processing of personal data, you can contact us at: privacy@iona.fi

3.) What personal data do we collect and for what purpose?

General

The purpose of the processing depends on the personal data in question. Below we have described the processing in different situations. We do not process personal data for purposes other than those for which it was collected in the first place. Personal data may also be used for the analysis and development of the systems in which the personal data is processed.

If you don’t provide us with your personal data as described below, we may not be able to establish/continue our relationship with you or with the entity you are representing, communicate with you or the entity you are representing, or we may not be able to provide you or the entity you are representing all our services or website with all the functionalities.

Customers and business partners

If you are a customer or business partner of IONA or their representative, or a prospective customer or business partner or their representative, we process the following personal data:

Name
Email address, phone number and other organization information, such as job title and location
Other information provided to us (such as feedback, information on your participation in events organized by us and information that you have provided to us in connection with the participation)

The personal data collected is used for managing and governing the customer and partnership relationship and for the performance of our services as well as for marketing and developing our business and services. The personal data is processed based on our legitimate interests, which are based on the foregoing purposes. If you don’t provide us with the foregoing information, we may not be able to establish or continue a relationship with you or the entity you are representing or provide our services to you or the entity you are representing.

The personal data collected consists primarily of the information that you choose to provide us. We may also obtain data from other members of the organization that you represent. Where applicable, we also process your personal data obtained from publicly available sources, such as websites, or may obtain information from other controllers.

Website visitors

We use cookies or similar technologies on our website. Cookies are small text files that are stored on your equipment, such as computer. Cookies enable functions to be performed and contain information on how you interact with websites.

If you visit our website, we process the following personal data:

IP address
Your usage of the website, such as the time spent on the website, your interests based on the pages you have visited and the interactions you have completed on the website
Website through which you have moved to our website
Browser type
Location
Your employer and job title

The collected data is used for analyzing and developing our website, business and services, and for marketing (including targeted marketing). We also use the data for statistical purposes. In the case of targeted marketing, we use automation algorithms for advertising our products and services to you based on your behaviour on our website.

The processing is based on our legitimate interests (which are based on the foregoing purposes) as regards so-called essential cookies, which are necessary for the operations of the website and for any other cookies the processing is based on your consent. You can manage your cookies settings here. Please note that some parts of our website may not function properly or cannot be accessed if the use of cookies is refused.

The personal data is collected via third-party cookie and similar technologies. At the moment, we use the following service providers:

Other contacts

If you are in any other way in contact with us, for example, via our website or phone, by signing up for an event organized by us, subscribing to a newsletter etc., we may process the following information:

Name
Email address, phone number and other organization information, such as job title and location
IP-address
Other information provided to us (such as feedback, information on your participation in events organized by us and information that you have provided to us in connection with the participation)

The collected personal data is processed for the purpose of responding to your request and for keeping in contact with you. We may also process such data for marketing and developing our business and services. The personal data is processed based on our legitimate interests, which are based on the foregoing purposes or in some cases, the processing is based on your consent, for example, if you subscribe to our newsletter.

The personal data collected consists primarily of the information that you choose to provide us. Where applicable, we also process your personal data obtained from publicly available sources such as websites, or may obtain information from other controllers.

Employees

If you are an employee of IONA, we process the following personal data:

Name and birth date
Contact information such as email address, phone number and home address
Salary, bank account information and other information required for the payroll
Job title, previous job titles, duration of employment and other basic employment relationship data
CV information such as former jobs, educational background, language skills etc.
(Occupational) health information related to the employment (such information on sick leaves)
Other information customarily processed in connection with employment

The collected personal data is processed for the purpose of maintaining and governing the employment relationship you have with us and for the purpose of fulfilling our obligations as an employer set out in the applicable legislation. The processing is needed for the performance of the employment contract to which you are a party and also for compliance with our legal obligations.

The personal data collected consists primarily of the information that you choose to provide us. In some situations, we may obtain data from third parties, such as occupational health providers or authorities.

4.) How we may share and transfer your data

We process your personal data within the IONA Group. However, we may share your personal data with our advisors and consultants and with our service providers and suppliers when they perform services on our behalf and for us. If we are involved in a merger, acquisition or asset sale, we may transfer your personal data to the other parties involved. However, we will, in such cases, continue to ensure confidentiality.

We may need to transfer your personal data outside the EU or the EEA. However, if we transfer your data outside the EU or the EEA, such transfers will be carried in accordance with the applicable legislation and subject to appropriate safeguards, such as standard data protection clauses adopted by the European Commission.

5.) Duration of the processing

We process personal data only for as long as it is necessary for the purpose for which the personal data was collected, unless applicable legislation requires a longer period for storing the personal data or the data is needed for the establishment, exercise or defence of legal claims.

In the case of a newsletter, we process the personal data only for as long as you subscribe to the newsletter.

6.) Your rights

As a data subject, you have a right to:

request access to your personal data and a copy of your personal data we process;
request the correction of incorrect personal data relating to you and, in some cases, to request the deletion of your personal data;
request the restriction of processing of your personal data or to object to the processing; and
receive, in certain circumstances, your personal data in a structured, commonly used and machine-readable format, and the right to transfer the data to another system; and
when the processing is based on your consent, to withdraw your consent (for clarification, the withdrawal does not affect the lawfulness of the processing based on the consent before its withdrawal).

If you consider that your rights have been infringed, you also have the right to lodge a complaint with the competent supervisory authority. In Finland, the right authority is the Data Protection Ombudsman. More information about your rights and how to lodge a complaint can be found at www.tietosuoja.fi.