Skip to content

Privacy Policy

Privacy Policy 

The purpose of this data protection statement is to inform the data subject of the information required by the information obligation of the EU Data Protection Regulation (2016/679).

The data protection statement was prepared on 18 October 2021.

1. Registrar
GrowthBay Finland Oy (3127110-2)
Kansakoulukatu 3, 00100 Helsinki

The contact person responsible for the register
Kalle Söderholm, Managing Director, GrowthBay Finland Oy
+358 44 243 4951

2. Register name
GrowthBay Finland Oy's customer, stakeholder, and marketing register.

3. Purpose of personal data processing and legal basis for processing
The purpose of processing personal data is managing customer relations, keeping in touch, and, for example, making various inquiries. Personal data is used for the company's communication, marketing, and sales.

The legal basis for the processing of personal data is the legitimate interest belonging to the controller to process data and communicate to contact persons of stakeholders about matters related to their area of responsibility.

Personal data is collected from the registrants themselves and from public sources, such as the internet, public websites of companies, network community services, or other similar registers in accordance with data protection legislation.

The information is not used for automated decision-making or profiling.

4. Data content of the register
The following information is processed in the register
Person's name, position/job title and area of responsibility, company/organization, contact information (phone number, e-mail address, address), website addresses, IP address of the network connection, information about ordered services and their changes, billing information, other information related to the customer relationship and ordered services, newsletters and opening and clicking data of other e-mails comparable to newsletters, such as messages.

IP addresses of website visitors and cookies necessary for the functions of the service are processed on the basis of a legitimate interest, e.g. to take care of information security and for the collection of statistical data of website visitors in those cases when they can be considered as personal data. If necessary, consent is requested separately for third-party cookies.

5. Regular sources of information
The information to be saved in the register is obtained from the customer, e.g. From messages sent via web forms, by e-mail, by phone, via social media services, contracts, customer meetings, and other situations where the customer gives out their information.

Information about contact persons of companies and other organizations can also be collected from public sources such as websites, directory services and other companies.

6. Recipients or recipient groups of personal data
Personal data is disclosed to the authorities within the limits permitted and required by the applicable legislation.

Regular transfers of data and transfer of data outside the EU or EEA
Information is not regularly disclosed to other parties. Information can be published to the extent agreed with the customer.

7. Principles of registry protection
Care is taken when processing the register and the information processed with the help of information systems is properly protected. When registry data is stored on Internet servers, the physical and digital data security of their hardware is taken care of accordingly. The registrar ensures that stored data as well as server access rights and other data critical to the security of personal data are handled confidentially and only by those employees whose job description it is.

8. Personal data retention period
Personal data is stored as long as it is necessary to store it to fulfill the purpose for which it was collected in accordance with this privacy statement. In the storage of personal data, inactive personal data are taken into account, which are deleted regularly.

9. Rights of the registered in the processing of personal data
Right of inspection
The registered person has the right to check what information concerning him has been stored in the personal register and to receive a copy of the information. The registrant must send an inspection request to the email address In the inspection request, the registrant must provide the necessary information to search for information. If necessary, the controller will ask for additional information to identify the data subject.

The response to the inspection request will be sent to the person who submitted the inspection request by e-mail, unless the data subject requests that information be sent in another way.

The right to demand correction of information
GrowthBayFinland Oy takes care of the quality of the personal data it processes to the best of its ability. GrowthBay Finland Oy corrects, deletes or supplements incorrect or unnecessary personal data on its own initiative or at the request of the data subject.

The right to restrict processing
The data subject has the right to have GrowthBay Finland Oy limit the processing if, for example, the data subject disputes the accuracy of the personal data. In that case, the command the recording is limited to a period during which the data controller can ensure their accuracy.

The right to demand deletion of data
The registered person has the right to demand the deletion of his personal data or object to their processing when it is based on a legitimate interest. The registrant always has the right to object to direct marketing by sending an email to

The right to file a complaint with the supervisory authority
The registered person can make a complaint about the processing of personal data to the supervisory authority, which is the data protection commissioner.

10. Cookies
GrowthBay Finland Oy uses cookies on its website. You can find more information about the use of cookies on the cookie policy page.

11. Changing the privacy statement
GrowthBay Finland Oy has the right to change this privacy statement. Changes may be necessary, for example, due to the improvement and development of our services or due to changes in legislation.