Privacy Policy

Updated 27 October 2026

1. Data Controller 

 In this Privacy Policy, the following companies are collectively referred to as Signal Partners Group or we:

  • Signal Partners Oy, Business ID 0108147-1, Tiilitie 10, 01720 Vantaa, Finland
  • Kauko Oy, Business ID 0100650-0, Tiilitie 10, 01720 Vantaa, Finland

 The controller of the personal data is the Signal Partners Group company to whose customer, contractual, cooperation, event or recruitment relationship the processing of personal data relates. Further information about the controller and any allocation of responsibilities is available from the controller’s privacy contact address: info@signalpartners.fi  

 2. Purposes and Legal Bases for Processing 

 We process personal data only for predetermined and lawful purposes. The main purposes of processing and their usual legal bases are described below. The applicable legal basis depends on the specific processing activity. 

 Purpose  What the data is processed for  Legal basis
 Legitimate interest
Customer and partner relationship management  Communication, entering into and managing contracts, fulfilling orders, deliveries and services, and providing customer service.
Performance of a contract, steps taken prior to entering into a contract, or legitimate interest.
Efficient management of customer and partner relationships.
Projects, deployments, support and maintenance Implementation of customer projects and deployments, as well as maintenance and support services.
Performance of a contract or legitimate interest.
Delivery and documentation of services.
Sales, B2B marketing and customer communications
Communicating about services, identifying and contacting potential customers, and monitoring marketing communications. Legitimate interest or consent, where consent is required.
Marketing products and services to business contacts and developing our business.
Events, training sessions and webinars
Managing registrations, participant communications, organising events and collecting feedback.
Contract, legitimate interest or consent.
Organising and developing events and other activities. 
Enquiries and other forms of communication
Responding to enquiries, requests for quotations and other communications.
Steps taken prior to entering into a contract or legitimate interest.
Appropriate and efficient communication.
Invoicing, financial administration and contract management Invoicing, payment processing, accounting, receivables management and contract administration.
Contract, legal obligation or legitimate interest.
Appropriate management of business operations and legal claims.
Development of products, services and business operations
Analysing and reporting on the performance, quality and usability of services and business operations. Legitimate interest or consent.
Development of services and business operations.
Recruitment
Receiving and evaluating applications, conducting interviews, making recruitment decisions and communicating with applicants.
Steps taken prior to entering into a contract, consent, legal obligation or legitimate interest.
Conducting recruitment processes and preparing for potential legal claims.

 

3. Categories of Data Subjects 

  • contact persons of customers, potential customers, partners, suppliers and other business partners
  • participants in events, training sessions, webinars and other activities
  • users of websites and other digital services
  • job applicants and persons participating in recruitment processes
  • other persons who contact Signal Partners Group or whose data is otherwise related to our operations

 4. Personal Data We Process

 We primarily process personal data related to individuals’ professional roles, interactions with us and use of our services. The categories of personal data we may process include:

  • basic information, such as name
  • professional information, such as job title, area of responsibility and employer organisation
  • contact details, such as work email address, telephone number and work address
  • information relating to customer, partner and contractual relationships
  • information relating to orders, deliveries, projects, deployments, maintenance and support services
  • information relating to enquiries, meetings and communications
  • information relating to invoicing, payments and contract management
  • event registration and participation information
  • information relating to marketing communications, such as delivery, opening, click, unsubscribe and subscription data
  • usage and technical data relating to websites and digital services, such as IP address, browser and device information, cookies and other identifiers
  • consents, objections and other privacy-related choices
  • other information provided by the data subject

4.1 Information Relating to Job Applicants 

In connection with recruitment, in addition to basic and contact information, we may process job applications, CVs, information about education, work experience and skills, salary expectations, interview information, references, suitability assessments and other information provided or generated during the recruitment process. As a general rule, referees are contacted with the applicant’s permission.

4.2. Special Dietary Requirements and Other Data That May Belong to Special Categories of Personal Data 

In connection with events, we may process information about special dietary requirements voluntarily provided by participants for the purpose of arranging catering. The processing is based on explicit consent. Access to such information is restricted to persons who need it, and the information is deleted without undue delay after the event unless there is a legal basis for retaining it for a longer period.

5. Sources of Personal Data 

 We primarily obtain personal data directly from data subjects in connection with customer relationships, enquiries, meetings, online forms, orders, event registrations, job applications and other interactions with us.

We may also obtain information from the organisation represented by the data subject, partners, manufacturers, distributors, service providers and other business partners where there is an appropriate legal basis for disclosing the information.

Personal data may also be obtained or supplemented from public registers, company websites, professional networks, business and contact information services and other publicly available sources. Personal data is also generated from communications and documentation created during customer, cooperation and project relationships, as well as through the use of websites and digital services. 

 

6. Requirement to Provide Personal Data

Providing personal data may be necessary in order to enter into or perform a contract, deliver a product or service, respond to an enquiry, register for an event or participate in a recruitment process. If required information is not provided, we may be unable to enter into or perform a contract, deliver a service, process an enquiry or registration, or consider a job application. Information marked as voluntary does not need to be provided.

7. Recipients and Disclosure of Personal Data

We may use service providers that process personal data on our behalf, including providers of customer relationship management, sales and marketing services, web and analytics services, communications, event arrangements, IT and cloud services, financial administration, invoicing, recruitment and other business support services. Service providers may process personal data only in accordance with our instructions and contractual arrangements.

We may disclose personal data to manufacturers, distributors, transport companies, finance providers, authorities or other partners acting as independent controllers where the disclosure is necessary to deliver a product or service, carry out a customer project, comply with a legal obligation, or establish, exercise or defend legal claims.

We do not sell personal data to third parties.

 

8. Processing Within Signal Partners Group 

Signal Partners Group companies may use shared systems for sales, marketing, customer relationship management, communications and reporting. Personal data is processed between Group companies only to the extent necessary for the purposes described in this Privacy Policy and where there is an appropriate legal basis for the processing. Access to personal data is restricted according to work-related need.

9. Transfers Outside the EU and EEA 

Our service providers may process personal data outside the European Union or the European Economic Area. In such cases, we ensure that there is a lawful basis for the transfer under applicable data protection legislation and that appropriate safeguards are in place. Transfers may be based on an adequacy decision by the European Commission or, for example, on Standard Contractual Clauses approved by the European Commission and, where necessary, supplementary safeguards. Further information about the applicable transfer mechanisms and safeguards may be requested using the contact details provided in section 15.

10. Retention of Personal Data

We retain personal data only for as long as necessary to fulfill the purposes of processing or as required by applicable legislation, contractual obligations or legal claims. The main retention periods or the criteria used to determine them are as follows: 

  • customer, partner, contractual, delivery and invoicing data is retained for the duration of the customer or contractual relationship and thereafter for as long as required by applicable legislation, accounting obligations and potential legal claims
  • data relating to potential customers and B2B marketing is retained for as long as it remains current and necessary for the purpose for which it is processed or until the data subject objects to the processing; minimum information concerning an objection to marketing may be retained in order to comply with the objection
  • event and partcipation data is retained for as long as necessary to organise and appropriately follow up on the event; information concerning special dietary requirements is deleted without undue delay after the event
  • support, maintenance and project data is retained for as long as necessary for service delivery, documentation, quality assurance and contractual responsibilities
  • job applicant data is retained for the duration of the recruitment process and thereafter only for as long as necessary to address potential legal claims, or for a longer period with the applicant’s separate consent
  • technical and analytics data relating to online services is retained for the periods specified in the applicable cookie settings or cookie policy

When there is no longer a legal basis or need to retain personal data, the data is deleted, anonymised or otherwise rendered permanently non-identifiable in an appropriate manner.  

11. Protection of Personal Data

We protect personal data through technical and organisational measures appropriate to the level of risk. Access rights are granted based on work-related need. Security measures may include access control, authentication, logging, encryption, backups, system maintenance, staff guidance and training, and contractual oversight of service providers. Security measures are regularly reviewed and developed.

12. Cookies and Online Services

Signal Partners Group websites use cookies and similar technologies to enable the operation, usability, analytics and marketing of our services. Strictly necessary cookies may be set without consent. Consent is requested for non-essential cookies where required by applicable law.

Up-to-date information about cookies, their purposes, service providers and retention periods is available in the cookie settings and cookie policy of the relevant website. Cookie preferences can be changed at any time through the website’s cookie settings. 

 

13. Profiling and Automated Decision-Making

We may target B2B marketing based, for example, on the organisation represented by an individual, their professional role, expressed interests, and their interaction with marketing communications or online services. Such profiling does not produce legal effects concerning the data subject or similarly significantly affect them.

We do not make decisions concerning data subjects that are based solely on automated processing of personal data and that produce legal effects concerning them or similarly significantly affect them. 

 

14. Rights of Data Subjects

 Under applicable data protection legislation, data subjects have the right to:

  • obtain confirmation as to whether we process personal data concerning them and access such data
  • request the correction of inaccurate or incomplete personal data
  • request the deletion of personal data where applicable
  • request restriction of processing where applicable
  • object to processing based on legitimate interests on grounds relating to their particular situation
  • object to the processing of personal data for direct marketing purposes at any time
  • receive personal data they have provided to us in a structured, commonly used and machine-readable format and transmit that data to another controller where the processing is based on consent or a contract and is carried out by automated means
  • withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal
  • lodge a complaint with a supervisory authority, in Finland the Office of the Data Protection Ombudsman

These rights are not absolute in all circumstances, and their application may be subject to conditions and exceptions provided for under applicable data protection legislation.

15. Privacy Enquiries and Requests

Questions concerning data protection and requests relating to the exercise of data subject rights may be sent to info@signalpartners.fi. We recommend specifying which right you wish to exercise and which processing activity your request relates to. We may request additional information where necessary to verify your identity. We respond to requests within the time limits required by applicable data protection legislation.

16. Changes to This Privacy Policy

We may update this Privacy Policy if our operations, services, processing practices or applicable legislation change. The current version and its most recent update date are available on the Signal Partners Group website.