Privacy policy

Privacy Policy for the Customer Registry on Solid Stream Oy’s Website Under the General Data Protection Regulation, the data controller is required to provide clear information to data subjects. This policy fulfills that obligation.

Controller

Solid Stream Oy Contact Information: Höyläämötie 18 A 21, 00380, Helsinki Contact details for matters concerning the register: Solid Stream Oy Panu Somerma Höyläämötie 18 A 21, 00380, Helsinki 044 271 6862 info@solidstream.fi

Registered at

The register includes customers and potential customers who have submitted a contact form on the solidstream.fi website.

Grounds for and purposes of keeping the register

Personal data is processed on the basis of the customer relationship or separate consent. Personal data is processed only for predefined purposes, which include managing the customer relationship and providing information about our services.

The register contains the following information:

Name
e-mail address
phone number

Webinar Participant Information

Solid Stream organizes webinars, and you can register for them on our website. When you register, we collect your name, email address, company, job title, and the channel through which you registered (UTM source). During and after the webinar, we also collect participation data: clicks on reaction buttons with timestamps, viewing time, chat messages, and email opens/clicks. Purposes of processing and legal basis:

Organization of the Webinar You Registered For (Contract)
Analyzing participation and ”lead scoring”—this is what the GDPR refers to as profiling. The purpose of scoring is to help the webinar host identify who to approach first. We do not make purely automated decisions that would have legal implications—a sales representative always makes the final decision regarding contact. (consent, checkmark A)
Optional email updates (consent, check box B)

Recipients of the data:

Webinar host (e.g., BOWA Legal) — receives a ranked list of participants
Data Processors: Solid Stream Oy (platform), Supabase (database, EU), Brevo (email, EU), Vimeo Inc. (video streaming, U.S. — data transfer protected by the EU Standard Contractual Clauses / in accordance with the Data Privacy Framework)

Retention period: 24 months from the date of the webinar, after which the data will be deleted or anonymized. Your rights: All of the rights listed below also apply to this data, including the right to object to profiling.

Right of the data subject

The data subject has the following rights, the exercise of which must be requested at the address given in point 1.

Right of review

The data subject may verify the personal data we have stored by sending a verification request to the address given in point 1.

Right to rectification

The data subject may request the rectification of inaccurate or incomplete data concerning him or her.

Right to object

The data subject may object to the processing of personal data if he or she feels that the personal data have been processed unlawfully.

Direct marketing ban

The data subject has the right to object to the use of the data for direct marketing.

Right of withdrawal

The data subject has the right to request the deletion of data if the processing of the data is not necessary. We will process the deletion request, after which we will either delete the data or provide a justified reason why the data cannot be deleted. Please note that the data controller may have a statutory or other right not to delete the requested data. The data controller is obligated to retain accounting records for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). For this reason, accounting-related records cannot be deleted before the expiration of this period.

Withdrawal of consent

If the processing of personal data concerning the data subject is based solely on consent and not, for example, on customer or membership, the data subject may withdraw consent.

The data subject can appeal the decision to the Data Protection Ombudsman

The data subject has the right to request that we restrict the processing of the disputed data until the matter is resolved.

Right of appeal

Data subjects have the right to file a complaint with the Data Protection Commissioner if they believe that we are violating applicable data protection laws in our processing of personal data. Contact information for the Data Protection Commissioner: www.tietosuoja.fi/fi/index/yhteystiedot.html

Regular sources of information

As a rule, personal data is obtained from the customer himself when he sends the contact form.

Regular data disclosures

As a rule, the information in the customer register will not be disclosed for marketing purposes outside Solid Stream Oy.

Duration of processing

As a general rule, personal data will be processed for as long as the customer relationship is in force or the request for contact has been processed.

Processors of personal data

Personal data are processed only by the controller and its employees.

Transferring data outside the EU

The personal data contained in the register will not be transferred outside the EU or the European Economic Area.