Privacy Policy

1. Data Controller

Prohoc Oy (“Prohoc Oy” or “we”) processes personal data in the course of its operations for the management of customer relationships, to enable customer communication, to fulfill concluded agreements, and for direct marketing purposes. In addition, we collect analytics data about visitors to our website.

In addition to private customers, Prohoc Oy also has corporate customers and cooperation partners whose representatives’ personal data may be processed as part of this register. The data of representatives of corporate customers is used solely for the purpose of carrying out communication and marketing directed at the company.

It is important to Prohoc Oy that you understand how we process your personal data. Below, we provide further information about the processing of your personal data.

Please note that this Privacy Notice applies only to the processing of personal data carried out by Prohoc Oy in its capacity as a data controller.

2. Contact Details

Contact details of the Data Controller:

Business ID: 3238185-6
Address: Virtaviiva 8, 65320 Vaasa, Finland
Telephone: +358 6 315 7700
Email: prohoc@prohoc.fi
Website: www.prohoc.fi

Person responsible for the register:

Päivi Havulehto-Heinonen
Management Assistant
+358 40 8607730
paivi.havulehto-heinonen@prohoc.fi

3. Collected Data

Customers and Job Postings

  • First and last name
  • City
  • Email address
  • Contact details
  • Other information related to job postings
  • Website
  • IP address
  • Browser session identifiers
  • URL path on the website
  • Time of visit
  • Browser type and version
  • Device type
  • Name and email address of individuals who subscribe to the newsletter via the website
  • Change log of information relevant to assignments

4. Where Do We Obtain Personal Data?

As a rule, we obtain the data processed in accordance with this Privacy Notice directly from the data subjects themselves.

Data collected through the website is stored on the server in connection with the visit.

Information may also be obtained through other service providers, such as our cooperation partners.

5. Purposes of Processing Personal Data

Personal data may also be used for the following purposes in accordance with applicable law and consents: marketing, providing and delivering services, implementing and developing customer service, statistical analysis, developing services, customer service and business operations, as well as other activities essential to the provision of the service.

For the Provision of the Service or the Fulfilment of a Contractual Relationship

Personal data is used to forward contact requests and to carry out sales-related activities.

For Customer Communication and Customer Relationship Management

Personal data is used to manage, maintain, develop, and administer the customer relationship between Prohoc Oy and the Customer, as well as for communication purposes.

If you contact us, we will use the information you provide to respond to your inquiries, resolve any potential issues, and process your message.

For Direct Marketing Purposes

If you have given your consent to receive direct marketing, we may send you newsletters and other communications.

The data subject always has the right to prohibit us from using their personal data for direct marketing, market research, or profiling by contacting us using the contact details provided above or by using the unsubscribe option included in direct marketing messages or newsletters.

6. Retention Period

We retain personal data only for as long as required by law or as long as necessary to fulfill the purposes specified above.

7. Transfer of Personal Data Outside the European Economic Area

We may process personal data in systems that transfer data outside the European Union and the European Economic Area. If the European Commission has not determined that the level of data protection in the destination country is adequate, we will ensure an adequate level of protection for your personal data through our contractual practices (such as the European Commission’s standard contractual clauses for the transfer of personal data to third countries) or by implementing other appropriate safeguards.

8. Categories of Recipients of Personal Data

We may disclose information to authorities supervising business operations, such as the Regional State Administrative Agency, the Tax Administration, the Data Protection Ombudsman, or other parties as required by law, to the extent described in this Privacy Notice.

For Legal Reasons

We may disclose personal data to parties outside Prohoc Oy’s organization if access to the personal data is reasonably considered necessary (i) to comply with applicable law, regulation, or a court decision; (ii) to detect, prevent, or otherwise address fraud, money laundering, terrorist financing, or information security or technical issues; or (iii) to protect the property or ensure the safety of Prohoc Oy or our customers, or to safeguard purposes required in the public interest in accordance with the law.

To Authorized Service Providers

We may disclose personal data to authorized service providers who perform services on our behalf. Our agreements with these service providers include commitments requiring them to limit the use of personal data and to comply with privacy and data security standards at least equivalent to those set out in this Privacy Notice.

With Your Explicit Consent

We may disclose personal data to third parties outside Prohoc Oy’s organization for reasons other than those mentioned above where we have the explicit consent of the data subject. The data subject has the right to withdraw such consent at any time.

9. Rights of the Data Subject

Right of Access to Data

Data subjects have the right to access the personal data processed by Prohoc Oy. You may contact us to find out what personal data we process and for what purposes the data is used.

Right to Request Rectification of Data

You have the right to have any incorrect, inaccurate, incomplete, outdated, or unnecessary personal data that we hold corrected or supplemented. By contacting us, you can update, for example, your contact details or other personal data.

Right to Request Erasure of Data

You may request that we delete your personal data. We will carry out the requested measures unless we have a legitimate reason not to delete the data.

Right to Object and Right to Restrict Processing

You have the right to object to the processing of your data or to profiling if your data is processed for direct marketing purposes. You also have the right to request the restriction of the processing of your personal data, for example, where the data concerning you is inaccurate. In addition, in certain specific situations, you have the right to object to the processing of your personal data on grounds relating to your particular personal situation.

Right to Data Portability

The data subject has the right to receive their personal data from us in a structured and commonly used format and to independently transfer the data to a third party.

Exercising Your Rights

If you wish to exercise any of the above rights, please send the following information to Prohoc Oy by post or email: your name, address, telephone number, and a copy of a valid identification document. To verify your identity, we may request additional information. We may refuse requests that are unreasonably repetitive, excessive, or manifestly unfounded.

11. Data Security

We have implemented administrative, organizational, technical, and physical safeguards to protect the personal data we collect and process. Our security measures are designed to maintain an appropriate level of confidentiality, integrity, and availability of the data.

Personal data may only be processed by individuals for whom such processing is justified based on their job responsibilities. Access to personal data is protected by appropriate user-specific IDs, passwords, and access rights.

12. Filing a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that Prohoc Oy’s processing of personal data is in violation of applicable data protection legislation.