With this Privacy Notice we provide you information on why and how we process your personal data in the course of our business operations. We process your personal data for the following purposes:
NerdCloud Ltd (FI-32648178) acts as a controller for all personal data referred to in this Privacy Notice. We are located at PL 178 , 00101 Helsinki, Finland.
We also act as a processor for the personal data that our customers disclose to us when they use our Ottia service. Our customers are controllers for all such personal data, and they shall inform their data subjects separately about the ways with which their personal data is processed.
When we process personal data on behalf of our customers, we comply with the provisions of the Data Processing Agreement (DPA) concluded between us. You can find more information about the DPA from Section 7 of our Service Agreement.
We process your personal data in for the below mentioned purposes. Beneath each purpose for processing, you will also find information on what personal data we process and what are the legal basis for our processing activities.
Customer relationships
We process personal of our customers for the purposes of customer relationships.For these purposes we process contact details and other data disclosed to us.The legal basis for processing is the performance of our contractual obligations.
Strategic analysis of customer data to develop services and fulfill customer needs
We process the personal data of all our customers to develop our services and better fulfill customer needs.For these purposes we process contact details and data related to the use of Ottia service. The legal basis for processing is our legitimate interests, according to which we develop our services and better fulfill customer needs. NB! You have a right to object data processing for these purposes (see section concerning your rights).
Marketing
We process the personal data of our customers and leads for the purposes of marketing our services. For these purposes we process contact details and other data disclosed to us.The legal basis for processing is our legitimate interests, according to which we execute, establish and develop our customer relationships and business operations. NB! You have a right to object data processing for these purposes (see section concerning your rights).
Business partner relationships
We process the personal data of our business partners for the purposes of business partner relationships.For these purposes we process contact details and other data disclosed to us.The legal basis for processing is the performance of our contractual obligations.Recruiting
We process the personal data of job applicants for recruiting purposes. For these purposes we process contact details and other data disclosed to us, such CVs, relevant job history and expertise. The legal basis for processing is our legitimate interests, according to which we govern our recruiting practices. NB! You have a right to object data processing for these purposes (see section concerning your rights).
Communications
We process the personal data of people who contact us for communications purposes.For these purposes we process contact details and other data disclosed to us. The legal basis for processing is our legitimate interests, according to which we govern our communications. NB! You have a right to object data processing for these purposes (see section concerning your rights).
We collect personal data from data subjects themselves.
We may transfer your personal data to third parties, as it is a normal course of doing business in a digitalized world. When personal data is transferred to third parties, we ensure that we conclude adequate personal data processing agreements and safeguards in relation to the data transfers.
Your personal data may be transferred to data storage service providers and communications services providers.
We may transfer personal data outside the EU and the EEA. When doing so, we ensure adequate safeguards for the data transfer, such as standard contractual clauses and Privacy Shield arrangements.
The retention period of your personal data depends on the purposes for which we process your personal data. We inspect the necessity of the personal data stored regularly and keep records of the inspections.
Customer relationships
We process and store your personal data for as long as it is necessary to fulfil the contractual obligations.
Strategic analysis of customer data to develop services and fulfill customer needs
We process and store your personal data for as long as it is necessary to fulfil the purpose of data processing.
Marketing
We process and store your personal data for as long as you inform us that you do not want to receive our marketing, or we notice that you do not want to receive our marketing.
Business partner relationships
We process and store your personal data for as long as it is necessary to fulfil the contractual obligations.
Recruiting
We retain necessary data for as long as it is necessary to fulfil the purpose of data processing.
Communications
We retain necessary data for as long as it is necessary to fulfil the purpose of data processing.
You may have the right to use the below listed data protection rights. The contacts concerning the rights shall be submitted to the controller’s contact person. Your rights can be put into action only when you have been satisfactorily identified.
You may also have a right to lodge a complaint with Data Protection Ombudsman (Tietosuojavaltuutettu), if you think that the processing of your personal data infringes data protection laws.
Right to inspect
The data subject has the right to inspect what, if any, data the controller has stored of her/him.
Right to rectify and erasure
The data subject has a right to request the controller to rectify or erase the personal data concerning the data subject on the grounds provided by law.
Right to restriction of processing
The data subject can request the controller to restrict the processing of the personal data concerning the data subject on the grounds provided by law.
Right to data portability
The data subject shall have the right to receive the personal data concerning her/him, which he/she has provided to the controller, in a structured, commonly used and machine-readable format where the processing is based on consent or a contract.
Right to object
Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning her/him for such marketing.Where personal data are processed on the basis of the legitimate interests of the controller, the data subject shall have the right to object the processing of personal data concerning her/him for such purposes in accordance with the law.
Automated individual decision-making, including profiling
The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
Right to withdraw consent
Where the legal basis for the processing of personal data is the consent of the data subject, the data subject shall have the right to withdraw her/his consent.
You can make all requests and inquiries related to your data and this Privacy Notice to our contact person Samuli Argillander, CEO], samuli@inoob.io.
We have a unilateral right to modify this Privacy Notice. The modifications take effect immediately when we post the up to date version of our Privacy Notice to our website.
Last update 10 March 2022.