Braveson Oy (business ID 3346042-5)

Contact Information:

• Address: Matarankatu 2, 40100 Jyväskylä
• E-mail address: hello (at) braveson.fi

2. Purpose of the use of personal data

Braveson Oy collects and processes personal data for the purposes of marketing products and services, business development, responding to contact requests, registering for events, arranging and maintaining customer meetings, submitting offers, implementing customer projects, training and events, billing and collection, processing customer feedback, and accounting.

The legal bases for Braveson’s processing of personal data are:

1. Consent of the data subject to the processing of data, e.g. use of customer feedback on Braveson’s website under the name of the person providing the feedback
2. To enforce contracts, e.g. a subscription contract
3. To comply with legal obligations, e.g. processing of supporting documents and archiving of contracts in accordance with the Accounting Act
4. Legitimate interest of the controller, e.g. direct marketing

3. Personal data stored in the register

4. Data subject rights

The data subject has the following rights, the exercise of which should be requested at the following address contact details

Right of access

The data subject may check the personal data we have stored.

Right to rectification

The data subject may request the rectification of inaccurate or incomplete data concerning him or her.

Right to object

The data subject may object to the processing of personal data if he or she considers that the personal data have been processed unlawfully.

Direct marketing ban

Data subjects have the right to object to the use of their data for direct marketing.

Right of withdrawal

The data subject has the right to request the erasure of data if the processing is no longer necessary. We will process the request for erasure, after which we will either delete the data or provide a reasoned justification why the data cannot be deleted.

The data controller is obliged to keep the accounting records for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting records cannot be deleted before the expiry of this period.

Withdrawal of consent

If the processing of personal data concerning a data subject is based solely on consent and not, for example, on customer or membership, the data subject may withdraw consent.

The data subject may appeal against the decision to the Data Protection Ombudsman

The data subject has the right to request that we restrict the processing of the disputed data until the matter is resolved.

Right of appeal

The data subject has the right to lodge a complaint with the Data Protection Ombudsman if he or she considers that we are in breach of the applicable data protection legislation when we process personal data.

Contact details of the Data Protection Ombudsman: www.tietosuoja.fi/en/contact-information

5. Regular data sources

As a rule, Braveson collects customer data directly from the data subject himself, for example in response to a customer’s request for contact, in connection with a customer meeting or at trade fairs and other events.

Information about visitors to Braveson’s website is collected through cookies for Google Analytics, which Braveson uses to improve the performance of its website.

Provision of information and consequences of not providing it

The provision of personal data is a prerequisite for, among other things, the calculation of a quotation, the conclusion of an order contract and the delivery of a project or order to a customer. If the necessary personal data are not provided, the order contract and the delivery of the project may not be possible. In other cases, the provision of personal data is entirely voluntary.

6. Duration of processing

7. Processors of personal data

Customer data collected and processed by Braveson may be processed by Braveson’s partners or system providers as follows:

• Talenom Oyj for billing, collection and accounting purposes
• Google Inc. for the analysis of visitor data on Braveson’s website (Google Analytics)
• Dealfront Finland Oy for the analysis of Braveson’s website visitor data (Leadfeeder)
• Microsoft Inc. for email and other M365 services
• If P&C Insurance Plc in connection with the processing of insurance events (e.g. a claim)
• Personal data collected on client projects may be disclosed to the client for purposes such as project implementation, communication and post-project follow-up.

8. Data transfers outside the EU

The personal data collected and processed by Braveson is processed and stored mainly within the EU/EEA. Microsoft’s M365 services are generally provided within the EU, but data may also be transferred outside the EU. For more information on data processing for Microsoft M365 services: https://docs.microsoft.com/en-us/microsoft-365/enterprise/eu-data-storage-locations.

In the case of Google Analytics, data may also be transferred outside the EU. For more information on Google’s data processing and data protection, click here: https://business.safety.google/compliance/.

9. Automated decision-making and profiling

Braveson does not perform automated decision-making or profiling based on the personal data collected.

10. Cookie policy

We use cookies (including Google Analytics) to improve content and user experience. Cookies are small text files that are stored on your device to collect and remember information, including to improve the functionality and usability of our website. We may also use cookies and similar technologies for statistical purposes, such as to better understand how users use the website and to improve the user experience.

You can give your consent or opt-out of cookies through a separate cookie survey. Restricting the use of cookies may in some circumstances affect the usability of the website.