1. Data Controller
‍
This is the register and privacy policy of Purple Unicorn Oy in accordance with the EU General Data Protection Regulation (GDPR). Created on January 15, 2025. Last updated on January 15, 2025.
‍
Purple Unicorn Oy
Capellan puistotie 2, 00540 Helsinki
3497174-5

2. Contact person for the register
Nicola Tiainen, nicola.tiainen@purpleunicornco.fi, +358 44 983 6010

3. Name of the register
Customer and marketing register
‍

‍4. Legal basis and purpose of processing personal data
The legal basis for processing personal data under the EU General Data Protection Regulation is:
– The individual's consent

The purpose of processing personal data is to communicate with customers, maintain customer relationships, and conduct marketing. Data is not used for automated decision-making or profiling.

5. Data content of the registerThe data stored in the register includes:

Name, company/organization, contact details (phone number, email address, address), website addresses, IP address of the network connection, information on ordered services and changes to them, billing information, and other information related to the customer relationship and ordered services.

We store personal data only for as long as is necessary to fulfill the purposes for which the data was collected, or as required by law.

IP addresses of website visitors and cookies essential for the service's functionality are processed based on legitimate interest, for example, to ensure data security and to collect statistics on site visitors in cases where these can be considered personal data. Consent for third-party cookies is requested separately when necessary.

6. Regular data sources
The data stored in the register is obtained from the customer, for example, through messages sent via web forms, email, telephone, social media services, contracts, customer meetings, and other situations where the customer provides their information. Information about contact persons for companies and other organizations may also be collected from public sources such as websites, directory services, and other companies.

‍7. Regular disclosures of data and transfer of data outside the EU or EEA
Data is not regularly disclosed to other parties. Data may be published to the extent agreed upon with the customer. Data may also be transferred by the controller outside the EU or EEA. Data will not be transferred to the United States without the explicit consent of the data subjects.
• Trusted partners and service providers: To provide our services, we may share information with our partners, such as technology service providers.
• Legal obligations: We may disclose your information if required by law or regulatory requirements.
• Business acquisitions or reorganizations: Your information may be transferred if Purple Unicorn is part of a business acquisition or other business reorganization.

8. Principles of register protection
The processing of the register is carried out with care, and data processed through information systems is appropriately protected. When register data is stored on internet servers, the physical and digital security of the hardware is properly maintained. The controller ensures that stored data, as well as server access rights and other information critical to the security of personal data, are handled confidentially and only by employees whose job description requires it.

‍9. Right of access and right to demand rectification
Every person in the register has the right to check their stored data and demand the correction of any incorrect information or the completion of incomplete information. If a person wishes to check the data stored about them or demand its rectification, the request must be sent in writing to the controller. The controller may, if necessary, ask the requester to prove their identity. The controller will respond to the customer within the time frame stipulated by the EU General Data Protection Regulation (generally within one month).

‍10. Other rights related to the processing of personal data
A person in the register has the right to request the deletion of their personal data from the register ("right to be forgotten"). Data subjects also have other rights under the EU General Data Protection Regulation, such as the right to restrict the processing of personal data in certain situations. Requests must be sent in writing to the controller. The controller may, if necessary, ask the requester to prove their identity. The controller will respond to the customer within the time frame stipulated by the EU General Data Protection Regulation (generally within one month).

Cookies

Our website uses cookies. By clicking the "I accept cookies" button, you agree to the use of cookies. Cookies make using our website easy, fast, and user-friendly. Cookies also enable us to develop our business. A cookie is a small text file that an internet browser saves on the user's device. Cookies are placed on the user's device only by the site the user is visiting. Only the server that sent the cookie can later read and use it. Cookies or other technologies do not damage the user's device or files, and cookies cannot be used to run programs or spread malware. A user cannot be identified solely by cookies.
Cookies are divided into subcategories: mandatory cookies, functional cookies, product development and business reporting, advertising reporting, and advertising targeting. Mandatory cookies cannot be blocked. They relate to data security and enabling the site's functionality. Mandatory cookies do not contain identifiable personal data.

You can read more about cookies and Finland's cookie recommendations on the Traficom website:
https://www.traficom.fi/sites/default/files/media/file/Ev%C3%A4steohjeistus_palveluntarjoajille.pdf

We reserve the right to update our cookie policies, for example, due to service development or mandatory legislation.‍