Privacy policy - Professio

Privacy policy Professio Group Oy.

Laatijan tiedot
Created on May 20, 2018
Updated on May 7, 2024

Registry details

1 Registry name

Professio Group Oy’s registry.

2 Registry controller (name, address, phone)

Professio Group Oy, Keilaranta 1 A, 02150 Espoo, +358 (0)20 780 6220.

3 Contact person for registry matters (name, email)

Jenni Laine, rekisteri@professio.fi

4 Purpose of processing personal data

Personal data is primarily processed for managing customer relationships and for marketing and informing about events organized by Professio.

Personal data is processed for the following purposes among others:

Ordering products and services and customer assignments

Managing customer relationships

Delivering products and services

Ensuring and managing service and payment transactions

Customer satisfaction and market research

Personalized customer service and targeted customer communication and monitoring of service use

Marketing and targeted marketing to customers and potential customers

Statistics and data analysis

Fulfilling rights and obligations under the law

Recruitment

The legal basis for processing personal data is the contractual relationship between Professio and the registrant or legitimate interest. In terms of contractual relationships, the processing of personal data is also based on legal obligations.

Purpose of the registry:

The registry is used alone and together with other registries of Professio Group Oy and Cor Group Oy for managing and maintaining the user relationship with the registrant; planning and developing the business of Professio Group Oy; for statistical and market research; and for advertising, marketing, and direct marketing of Professio Group Oy and its customers (event partners). Professio Group Oy and its affiliates within the same group at any given time have the right to use and disclose personal data in the Personnel Registry for justified purposes (such as recruitment, direct marketing, distance selling, and market research) in accordance with data protection legislation.

Cookies are used on Professio’s websites. They help us, for example, to recognize your device when you return to the site, remember your preferences and choices, improve your user experience, and customize our ads on our pages and in possible other services.

Essential cookies:

Some cookies are essential for the technical operation and use of our site. These cookies do not collect information about the registrant that could be used for marketing or to remember the user’s selected sites.

Performance measuring cookies:

Our performance-measuring cookies collect information about how registrants use our websites (e.g., the most used pages, possible error messages). These cookies do not collect identifiable information about registrants; they are anonymous and used only to improve website functionality.

The websites use Google Analytics, Facebook, LinkedIn, Hotjar, Adform, and Twitter cookies.

Functional cookies:

Functional cookies enable our website to remember the registrant’s choices (such as username, language, or region) and provide better and more personalized features.

Third-party cookies:

Our pages also have buttons that facilitate sharing content to different online communication environments and social media. By using these buttons, the registrant can set the selected service’s cookie on their device. These cookies are not under the control of Professio. For more information on third-party cookie use, please visit the respective third party’s website.

Our website may accept cookies from these third-party services. These may include ads shown through Facebook or Google services, for example. Professio’s ads can be targeted in third-party services, such as Facebook, LinkedIn, and Google, based on the user having visited our service.

Our websites may have chat functionalities provided by a third party. These cookies are not under the control of Professio. For more information on third-party cookie use, please visit the chat service’s website.

Registry Content, Data Sources, and Data Disclosure

5a Registry Content

Depending on the context of use, the registry stores the following information: Professio collects and processes only such personal data of registrants that are essential and necessary for the purposes outlined in this privacy statement. This includes information provided by registrants themselves and data collected from other sources.

Data Sources

Personal data is regularly obtained and collected:

Directly from the customer via phone, registration form, online, email, or similar means.
Through the use of services via cookies or similar technologies.
Personal data can be collected and updated from registries of the controller and its affiliates within the same group, the population register, credit information registries, and other similar public or private registries and data sources, as well as the controller’s partners.
Additionally, personal data can be collected, for example, from social media related to the controller’s activities, where information about the registrant is available.
During the customer relationship, information obtained from the customer using Professio and other CorGroup companies’ services
From the database of Suomen Asiakastieto Oy
From Profinder as a data transfer compliant with the GDPR.

User-provided or personally identifiable information:

Name, address, phone number, email address, position at the workplace, job area within the organization, company, organization, industry of the organization, areas of expertise, website addresses, billing information
Demographic data such as professional and educational information, job title
Information provided in surveys and research
Other information collected with the user’s consent
Information observed and collected about the user of the services
Usage and browsing data, ad displays, and clicks
Landing page to the service, device information (browser, screen resolution, operating system, mobile device model), cookie identifier, IP address, UserID (random number series), session time and duration, internet service provider
Usage is monitored with Google Analytics, Hotjar programs (data processor)
These and similar future programs are used to analyze service usage. Both services comply with the EU conditions for personal data processing.
Behavioral data is also anonymously collected to the service’s content management system
Recommendations, shares, bookmarks, visited pages
Newsletter automation services collect behavioral data about users, which is used, among other things, to generate automated newsletters

6 Regular Data Sources

The registrant’s own notification (via phone, registration form, online, email, or similar means)
VRK/Population Information System and telephone companies’ directory registers and other similar public and private registries.
Information obtained from the registrant during the customer relationship using Professio Group Oy and other Cor Group companies’ services.
Through the use of services via cookies or similar technologies- Personal data can be collected and updated from registries of the controller and its affiliates within the same group, the population register, credit information registries, and other similar public or private registries and data sources, as well as the controller’s partners.
Additionally, personal data can be collected, for example, from social media related to the controller’s activities, where information about the registrant is available.
The database of Suomen Asiakastieto Oy.
As data transfers compliant with the GDPR from Profinder’s database.

7 Regular Data Disclosures

The service provider and its affiliates within the same group at any given time have the right to use and disclose personal data in the Personnel Registry for justified purposes (such as direct marketing, distance selling, and market research) in accordance with data protection legislation. The registrant has the right to prohibit the disclosure and processing of their data for direct advertising, distance selling, and direct marketing by notifying the controller.

8 Data Transfer outside the EU or EEA

Data provided by registrants to Professio is not regularly disclosed or transferred outside the EU or EEA.

Data stored by cookies of services and social media platforms used by Professio, such as Twitter, Facebook, and Google Analytics, WebinarJam, may be stored on servers of these operators, which may be located outside the EU.

Registry Protection and Data Retention

9 Registry Protection Principles

User registry data is stored in databases protected by firewalls, passwords, and other technical means. The databases and their backups are located in locked and guarded premises with restricted access rights. Only pre-designated individuals have access and are authorized to use the data stored in the databases.

Personal Data Retention

Professio retains personal data for as long as necessary to fulfill the purposes defined in this privacy statement, unless the law requires retaining the personal data for a longer period (e.g., specific legislation, accounting obligations, or reporting responsibilities), or unless the company needs the data to establish, exercise, or defend legal claims.

Professio may, in accordance with legal requirements, use the registrant’s personal data for marketing purposes after the end of the customer relationship. Personal data is processed for the duration of the customer and contractual relationship and for a necessary period after the end of the customer and contractual relationship.

Data concerning potential customers is not deleted from Professio’s registry, but if personal data is no longer needed in the manner defined above, the data is passivated no later than 1 month upon the registrant’s request. This way, Professio ensures that the customer’s data is not collected again, for example, from public data sources, in situations where the customer has requested the deletion of their data. Passivated customer data is not used, for example, for marketing purposes.

Registrant’s Rights

10 Right to Access and Correct Information

The registrant has:

The right to access their data. According to Article 15 of EU 2016/679, the registrant has the right to access personal data concerning them.
The right to request correction of information. According to Article 16 of EU 2016/679, the registrant has the right to request the correction of incorrect data concerning them in the registry.
The right to inspect their data’s system log information. Log information reveals who has processed the registrant’s data, what changes have been made to the data, and when.

All requests are addressed in writing to Professio’s staff or the contact person for registry matters. The form can be obtained from Professio’s office or via email from Professio’s customer service. Identity is verified before providing the information. The request is responded to within a reasonable time, and if possible, within a month of presenting the request and verifying identity.

11 Other Rights Related to Personal Data Processing

The registrant has:

The right to delete data from the system. According to Article 17 of EU 2016/679, the registrant has the right to have the controller delete personal data concerning the registrant without undue delay.
The right to transfer data from one system to another. According to Article 20 of EU 2016/679, the registrant has the right to transfer their personal data from one system to another, provided that the processing is based on consent or a contract, and that it is carried out automatically. The registrant also has the right to have their data transferred directly from one controller to another, if technically feasible.
The right to file a complaint with the supervisory authority. According to Article 77 of EU 2016/679, the registrant has the right to file a complaint with the supervisory authority, the Office of the Data Protection Ombudsman, if they believe that the processing of personal data infringes the regulation.
The right to refuse the use of cookies from their browser settings. Some functions of Professio’s websites may not work without cookies.

These registrant rights are not applicable in statutory systems. Therefore, depending on the registry, Professio may not be able to transfer or delete data from systems as required by law. Requests are evaluated on a case-by-case basis.

Professio Match

For the provision of the service, the following information collected with the user’s consent during registration is transferred to Professio Match:

Name
Job title
Organization
Interests

Rights and obligations listed in sections 7–11 of the Professio Match privacy statement apply.