Privacy Policy

I understand and respect the importance of your privacy. It is very important for me that you know exactly how and why I collect, process and store your personal data. I will only collect, process and store your personal data in the ways that have been outlined here in my privacy policy, and in a manner that is consistent with my obligations and your rights under the law.

This Notice explains how Suvi Hannus Oy (Suvi Hannus Ltd) complies with the DPA (the Data Protection Act), and the GDPR (the General Data Protection Regulation).

The Controller and Contact Person of your personal data

Suvi Hannus is both the controller and processor of your personal data collected.

Suvi Hannus Oy (Suvi Hannus Ltd), Business ID: 3153941-2

[email protected]

+358 40 7152 294

Date this Notice was created: 3rd of November 2020

Date this Notice was last modified: 3rd of November 2020

How I collect personal data

I regularly receive and process various types of personal data in connection with business operations with my clients. That data forms my client register. For example I gather information in connection with my business intake process (including marketing and selling) and when performing and managing assignments from my clients. Personal data are data that can be used to identify you or data that can otherwise be linked to you. I process personal data I obtain from you directly, for example when you send emails to me or communicate with me through other channels. 

What personal data I collect

I process the following types of your personal data in my client register: your name, your contact information (email, address, phone number), your employer, your title or position, your company / organisation, billing information and other information related to the business relationship and the services ordered.

Legal basis for the processing of personal data

The processing of personal data in the client register is based on the business relationship with corporate or individual clients with Suvi Hannus.

How I may share of transfer your personal data

I do not sell, rent, distribute, or otherwise make your personal data available to any third party for marketing purposes. However, I may share information with my suppliers when they perform services on my behalf. If I transfer your personal data outside the EU or the EEA, such transfer will be performed subject to appropriate safeguards required by applicable data protection laws.

How long I will store your personal data

Your personal data will be stored for the purposes mentioned above for as long as I have a meaningful business contact or other contact with you. When the processing of your personal data is no longer necessary for the purposes they were collected, I will delete or anonymise the personal data relating to you in a secure manner. 

Your rights and how to exercise them 

You have the right to: 

  • request a copy of the personal data I process relating to you
  • request the correction of incorrect personal data relating to you 
  • request the deletion of your personal data
  • request the restriction of processing of your personal data or to object to processing

If you wish to check the data stored about you or if you request a correction, the request must be sent in writing to [email protected] If necessary, I may ask you to prove your identity. I will respond to you within the timeframe set out in the GDPR (generally within one month).

In addition, you have a right to ask me not to send you marketing-related communications. Please note that if I restrict or delete your personal data, this may result in me not being able to provide to you the communications described above.