Privacy Policy
The purpose of this privacy policy is to inform you about the types of information ALM Partners Oy collects, how we use the collected information, and how we disclose this information to third parties.
This privacy policy applies to personal data collected in connection with services provided by ALM Partners Oy, as well as personal data collected during other interactions with us. This privacy policy also covers the collection of personal data in connection with other services provided by ALM Partners Oy, such as customer service, customer events, offers, and promotional campaigns.
Other terms related to data protection will be communicated in connection with individual services provided by ALM Partners Oy. Such service-specific terms will override this privacy policy in case of any conflicts.
Updated 03/2025
1. Data Controller
The data controller under the Data Protection Act is ALM Partners Oy (hereinafter “we”). We are responsible for ensuring that personal data is processed and protected in accordance with the EU General Data Protection Regulation (679/2016), the Data Protection Act (1050/2018), the Act on Electronic Communications Services (516/2004), the Information Society Code (917/2014), and other applicable EU and national legislation.
1.1. Data Controller’s Contact Information
ALM Partners Oy
Business ID: 2372616-2
Address: Mechelininkatu 1 A, 00180 Helsinki
Phone number: +358 (0) 102796800
Email: tietosuojavastaava@almpartners.fi
1.2. Contact Information for Data Protection Matters
ALM Partners Oy
Address: Mechelininkatu 1 A, 00180 Helsinki
Email: tietosuojavastaava@almpartners.fi
Collection and Processing of Personal Data
We collect your personal data for purposes such as providing, implementing, and maintaining electronic services, customer service and business development, recruitment, statistical purposes, and communication between ALM Partners and the website user.
You are not required to provide us with your personal data, but it may impair or limit the services we offer.
We collect and process, for example, the following personal data:
– Basic information such as name, job title, and contact details
– Applicant information such as education, work experience, skills, resume, and photo
– Customer relationship information such as service and order details, payment information, billing information, marketing permissions
– Customer contacts and related correspondence
– Personal data generated during the use of our services or websites, such as data collected from the website using cookies or similar technologies
– Other case-specific information.
Additionally, we collect personal data in the following situations:
– In connection with the delivery of our services, our customers may also provide us with information about other individuals related to the delivery of services
– Personal data may also be collected from the entity on whose behalf the data subject acts
– Personal data may also be collected from registers maintained by third parties, such as the trade register, in situations permitted by law.
Other situations:
– When providing our services to customers, our customers generally act as data controllers concerning the personal data they or third parties store in our systems, products, or applications. ALM Partners typically acts as a data processor as agreed in the personal data processing agreement related to the service provided.
3. Purpose, Legal Basis, and Retention of Personal Data
Personal data is collected and processed for the following purposes:
3.1. Recruitment
The register is intended for processing applications and applicant information related to ALM Partners’ job advertisements and open positions. The applicant may have applied for a specific position or sent an open application. By submitting your application to us, you consent to the processing of your personal data.
Personal data is retained for six (6) months after the receipt of your application unless you specifically request us to delete your data earlier.
3.2. Service Provision and Customer Relationship Management
The register is intended for providing and delivering services to our customers. This requires maintaining information about the customer company or contact person. The processing of personal data in this case is based on our agreement with the customer.
Personal data is retained for the duration of the customer relationship and only after the customer relationship ends if required by law.
3.3. Marketing
We may contact you to inform you about new features of our services or to sell other services. We may also process your personal data for customer surveys. The processing of personal data for marketing purposes is based either on your consent or a valid agreement. You have the right to request that your personal data not be used for direct marketing.
Personal data is retained until you specifically request that your data be deleted.
3.4. Compliance with Laws
Personal data is processed to fulfill legal obligations, such as obligations under the Accounting Act or to comply with lawful requests from authorities.
4. Transfer of Data and Recipients or Recipient Groups
Third parties may be used for data processing within the limits permitted by law. Other data processing requires your consent or is based on an explicit provision of law.
Data may be transferred outside the European Union and the European Economic Area if necessary for the technical implementation of the service or otherwise necessary based on the grounds provided by data protection laws.
Personal data may be transferred outside the European Union and the European Economic Area if the European Commission has issued a decision on the adequacy of personal data protection in the countries to which the data is transferred (known as an “Adequacy Decision,” Article 45 of the GDPR). Personal data may also be transferred outside the EU and EEA using standard contractual clauses (SCC) approved by the Commission.
4.1. Other Processors as Recipients
When ALM Partners processes personal data, it is sometimes shared with other parties. These other parties are then data processors, meaning companies with which ALM Partners has a binding legal agreement. These processors may only process data for specific purposes allowed by ALM Partners and may only use other third parties permitted by ALM Partners in such processing. ALM Partners may use external service providers, for example, to obtain technical solutions and services for processing stored data, and to use a specific technical interface to access stored data. Personal data may be shared with such service providers and third parties to the extent necessary to maintain, develop, and provide ALM Partners’ services. ALM Partners may also use services provided by third parties, such as software services, system services, and payment service providers. ALM Partners has the right to share your personal data with the aforementioned parties to the extent necessary to provide these services.
4.2. Detailed Descriptions of Recipient Groups
ALM Partners has the right to transfer personal data to a subsidiary or a third party in the reorganization, merger, sale, joint venture, transfer, or other disposition of ALM Partners’ business or parts thereof, assets, or shares, provided that the party to whom we transfer personal data is not permitted to process your personal data in any way other than described in this privacy policy without separate notice and, if required by applicable laws, without the customer’s permission. ALM Partners may share user information (including personal data) in connection with a potential business or asset transaction if ALM Partners or its business or part thereof is sold to the data recipient.
In special exceptional situations, personal data may be disclosed to third parties in situations where applicable law or regulation or other authority order requires it, or to monitor and ensure compliance with the terms of use of the services and to ensure the security of the services.
ALM Partners may share non-personal data (such as anonymous data about users; URLs of sites that directed to the services and URLs used to exit the services; usage data of service commodities; clicks, etc.) with interested third parties to help them understand the usage patterns of certain content, services, promotions, and/or service usability.
5. Your Rights
You have the following rights regarding your personal data:
1. Right to Rectification and/or Update: You have the right to request us to correct any incorrect or inaccurate information about you.
2. Right to Erasure: You have the right to request us to delete your personal data. However, we cannot delete personal data that is necessary to comply with binding legal obligations or that must be retained under applicable law.
3. Right to Object or Restrict Processing: You have the right to object to the use of your personal data for direct marketing purposes, sending promotional materials, profiling, or conducting market research.
You can also contact ALM Partners to request the restriction of data processing or to object to any other form of processing.
4. Right to Data Portability: You have the right to request and receive the personal data we have collected about you in a commonly used and machine-readable format. If the request is deemed unreasonable, we may charge reasonable costs for the transfer.
5. Right to Withdraw Consent: You have the right to withdraw your consent.
6. Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to automated decision-making.
If you wish to exercise your rights, you can send a request to lisenssit@almpartners.fi.
6. Right to Lodge a Complaint with a Supervisory Authority
If you are not satisfied with our data protection services or the processing of your personal data, you can address your questions to the relevant authority (the Finnish Data Protection Ombudsman or Traficom in matters related to cookies).
7. Data Security
Personal data can only be processed by individuals whose job duties justify it. The use of personal data is protected with appropriate personal identifiers, passwords, and access rights. ALM Partners has implemented appropriate technical and administrative safeguards to avoid and minimize risks related to the disclosure and processing of personal data. Such safeguards include, where applicable, the use of firewalls, secure server rooms, encryption, appropriate access control systems and processes, careful selection of processors, adequate training of ALM Partners employees involved in processing, and other measures necessary to protect personal data from unauthorized use or disclosure.
8. Updating the Privacy Policy
To develop our services and as legislation changes, we may also update this privacy policy. We recommend regularly reviewing the policy. We will notify you of significant changes by email or on our website.