Kaskas Media’s Privacy Policy for Marketing, Customer Relationship Management, and Sales: How We Protect Your Data
1. Data Controller
Kaskas Media Oy
Mechelininkatu 3d
00100 Helsinki
Finland
2. Contact Person for the Registry
Laura Tahkokallio
Kaskas Media Oy
laura.tahkokallio@kaskas.fi
3. Name of the Registry
Customer and Marketing Registry of Kaskas Media Oy
4. Purposes and Legal Basis for Processing Personal Data
We process personal data based on your consent, a contract, or our legitimate interest (e.g., managing a customer relationship). Data is used for communication, maintaining customer relationships, and marketing purposes.
5. What Personal Data Do We Collect?
We only store necessary information, such as your name, contact details (email and phone number), organization, and customer relationship-related details (e.g., offers, provided services, and billing information).
6. Where Does My Data Come From and How Is It Used?
The data stored in the registry is collected directly from you via online forms, email, phone, contracts, event registrations, purchased email lists, customer meetings, or other situations where you provide your information.
We also use cookies on our website. Cookies are small text files stored on your device by your browser when you visit a website. They help the website remember your inputs and preferences, such as login information and language settings, to improve your user experience. We also use cookies to analyze visitor statistics and enhance our website’s usability, as well as for remarketing purposes.
Additionally, we use Google Ads Remarketing, targeting advertisements to visitors of our website. This aims to promote Kaskas services. Information about site visits is collected by saving a cookie from an external service provider on your device. You consent to this through a cookie bot on the website, and you can withdraw your consent at any time using the same tool. You can also opt out of targeted advertising at Google Ads Settings.
Personal data may also be processed using automated decision-making and profiling, such as in Google Analytics or Google Ads.
7. Who Are the Recipients of Personal Data?
We do not disclose your information to third parties without your permission, unless required by law. In some cases, we may transfer data to servers outside the EU or EEA, but we always ensure that your data is protected. For example, Google Analytics may involve data transfers outside the EU. More information about Google’s data processing and protection can be found here.
Customer and marketing registry data is also processed for purposes like email marketing via Rocket Science Group’s MailChimp platform and customer relationship management via Pipedrive Inc.’s Pipedrive platform.
8. How Long Is Data Retained?
We regularly assess the necessity and accuracy of personal data and delete unnecessary customer data when needed.
9. How Is My Data Protected?
We protect your data appropriately and ensure that only trained personnel have access to it. All systems are secured with strong passwords and usernames. Employees handling customer registry data are bound by confidentiality. We share or disclose information only when legally required, such as upon a customer’s request or a legal demand from authorities.
10. Is It Mandatory to Provide My Data?
You can freely choose whether to provide your data for inclusion in our customer and marketing registry. However, without your data, for example, you will not be able to subscribe to our newsletter, which provides updates about our services.
11. What Are My Rights?
As a data subject, you have the right to influence how your personal data is processed. Below are your key rights:
11.1. Right to Access Data
You have the right to confirm whether we are processing your personal data. You can also request a copy of your personal data and additional details about its processing.
11.2. Right to Rectify Data
If you find that your data is incorrect or incomplete, you have the right to request its correction.
11.3. Right to Erasure (Right to Be Forgotten)
You may request the deletion of your personal data if it is no longer needed for the purpose it was collected or if the processing is based on your consent, and you withdraw that consent.
11.4. Right to Restrict Processing
You have the right to request restrictions on processing in certain situations, such as when you dispute the accuracy of the data or object to its processing.
11.5. Right to Object to Processing
You have the right to object to the processing of your personal data for direct marketing purposes or other purposes where processing is based on our legitimate interest.
11.6. Right to Withdraw Consent
If the processing of your personal data is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing before the withdrawal of consent.
11.7. Right to File a Complaint with a Supervisory Authority
If you believe your personal data is being processed unlawfully, you have the right to file a complaint with a supervisory authority. In Finland, this is the Data Protection Ombudsman, whose contact details are available at tietosuoja.fi.