Privacy policy

On this page we will briefly tell you why and how we collect personal data. In our privacy notice, we explain what information we collect, how we use it, why we need it and how it may be of interest to you.

You can always ask us for more information about our privacy practices by sending an email to info(a)talgraf.fi.

Our register

Talgraf Oy’s customer, marketing, user and job seeker registers and software personal register.

Controller

Talgraf Oy
Business ID 2690824-4
Kirkkokatu 16
90100 Oulu

Contact person for matters concerning the register

Toni Kemppinen, tel. 08 563 7500, info (a) talgraf.fi

What personal data we collect and why

Collecting personal information helps us to serve you better. Personal data is collected for a specific, explicit and legitimate purpose.

We process your information to provide our services, for marketing and customer communications, and for customer service. We also use the data to target our marketing and communications to you. We want to create better services in the future and the information we collect helps us to better understand our customers.

You can opt-out of the use of information about you on our mailing lists. You can unsubscribe from our mailing lists at any time by following the instructions in the mailing or by emailing us at info(a)talgraf.fi

Customer register

Purpose, legal basis and categories of personal data processed

Personal data is collected for a specific, explicit and legitimate purpose. Data is collected for the purposes of managing customer relationships and providing services. The legal basis for processing personal data is the performance of contractual obligations.

The customer register contains personal data of the controller’s customers and contact persons, such as name, contact details, language and other information necessary for the management of the customer relationship.

Marketing register

Purpose, legal basis and categories of personal data processed

Personal data are collected for a specific, explicit and legitimate purpose. Data is collected for marketing purposes. The legal basis for processing personal data is the legitimate interest of the controller in carrying out marketing activities.

The marketing register contains personal data of personal customers and business contacts, including name, contact details and other information necessary for marketing purposes. The personal data in the marketing register is obtained from forms on our website, by telephone, email or similar means, and from any public sources such as business contact details on our website.

User register

Purpose, legal basis and categories of personal data processed

Personal data is collected for a specific, explicit and legitimate purpose. The information in the user register is used on a contractual basis to provide Talgraf software services to customers, to identify customers and to grant access rights.

The User Register contains the name, username, email address and other information stored by the end users.

Personal register of our software

Purpose, legal basis and categories of personal data processed

Personal data are collected for a specific, explicit and legitimate purpose. Data from the software personal registers are used to provide software services to customers on a contractual basis. Personal data of employees of client companies are disclosed and stored in Talgraf software systems.

The register contains the name, salary and working time data of the users and other data stored by the users.

Register of jobseekers

Purpose, legal basis and categories of personal data processed

The basis for processing personal data is a legitimate interest based on a material connection between Talgraf and the data subject when the data subject applies for a job at Talgraf. Talgraf Ltd processes the personal data of job applicants for the following purposes: the implementation and management of recruitment activities, the processing of applications, the assessment of the suitability of the job applicant and communication in connection with the job search and recruitment.

Talgraf Ltd collects personal data in principle directly from the data subject on the basis of applications submitted by the data subject. Talgraf Oy may, within the limits permitted by law, also obtain information about the data subject from other sources. If data is collected from sources other than the job applicant himself/herself, Talgraf Oy will, in principle, always request the consent of the data subject. Such other sources may include, for example, personal and suitability assessments carried out by third parties, where necessary.

The register may contain, inter alia, the following personal data:

• full name and contact details
• identifying information (including year of birth, personal identification number and gender);
• educational details (including the name of the educational institution, the title of the degree and the duration of the studies);
• work experience (including employer details, job title and duration of employment);
• language skills;
• information relating to any personal and aptitude assessments; and
  the job to be applied for;
• any other information provided by the job applicant himself/herself in his/her application and CV.

Contact forms

The contact and registration forms on our website collect, on a form-by-form basis, the information requested from the sender, which is necessary to enable the provision of the service in question and is always kept for the time required to provide the service in question. The data may also be used for marketing purposes within the framework of the customer conditions mentioned in this Privacy Policy and accepted by the user when using the site or filling in the form.

Cookies and their use

A cookie is a small text file that a website asks your browser to store on your device to remember information about you, such as your language preference or login details. These cookies are set by us and are called first-party cookies. In addition, for advertising and marketing purposes, we use third-party cookies from a different domain than the domain of the website you are visiting. We use cookies and other tracking technology for the following purposes:

Essentials

These cookies are necessary for the functioning of the site and cannot be disabled. They are usually only set when you use functions that generate service requests, such as setting privacy preferences, logging in or filling in forms. You can set your browser to block or alert you to these cookies, but some parts of the site may not work afterwards.

Analytics

These cookies allow us to count the number of visits and traffic sources so that we can measure and improve the performance of our website. They help us understand which pages are popular and less popular and how visitors move around the site. All cookie data is collected anonymously. If you do not accept these cookies, we will not know when you have visited our site.

Advertising

These cookies have been placed on our site by our advertising partners. These companies may use cookies to build a profile of your interests and to display ads of interest to you on other sites. Cookies recognise your browser and device. If you do not accept these cookies, you will not see targeted advertising on different websites.

Availability

These cookies allow us to provide better and more personalised features, such as videos and live chat. These cookies are set by us or by third-party service providers whose services we have added to our website. If you do not accept these cookies, some or all of these features may not function properly.

Performance

These cookies allow us to count the number of visits and traffic sources so that we can measure and improve the performance of our website. They help us understand which pages are popular and less popular and how visitors move around the site. All cookie data is collected anonymously. If you do not accept these cookies, we will not know when you have visited our site.

Unclassified

We have not yet analysed and classified these cookies separately. These cookies have been set by us or by third party service providers whose services we have added to our website.

Disclosure of information

As a general rule, we do not disclose your information to third parties. For some of our training courses we use external training providers. In such cases, we may disclose your necessary information, such as your name, job description and email address, to the service provider on the basis of the enrolment form.

In some cases, your data may also be disclosed on a confidential basis to our partners who process personal data under a written contract of engagement. Our partners will process personal data as agreed, in accordance with our written instructions and only in furtherance of the purposes set out in this Privacy Policy. For example, we may use such subcontractors for marketing purposes.

Data retention

We respect the confidentiality of your personal data. Retention periods and criteria vary according to the categories of personal data and the purposes for which they are used. However, we will only retain personal data for as long as necessary to fulfil the purposes for which the personal data are processed as set out in this Privacy Policy.

Your right to your own data

You can request the deletion of your personal data. The right to erasure of your own data does not apply to personal data that we are required to retain for maintenance, legal or security reasons. Please note that the deletion of your personal data held by us may affect the information provided to you on the basis of our customer relationship and any ongoing matters.

You have the right to object at any time to the processing of your personal data for marketing purposes. Each direct email sent by Talgraf contains a legal link where you can opt-out of future direct mailings to your email.

Transferring data

In principle, your data will not be transferred outside the European Union or the European Economic Area. However, if it would be necessary to transfer your data outside the EU for the purposes set out in this Privacy Policy, we will ensure that the country is an Adequate Data Protection country as defined by the EU Commission, the transferee is Privacy Shield certified (for US-based transferees) or the transfer takes place using the model clauses published by the EU Commission. We will always ensure that any data transfer is carried out in accordance with the law and with adequate safeguards.

Amendments to the Privacy Statement

We constantly strive to improve our services. We therefore reserve the right to amend this Privacy Statement by notifying you on this page.