Privacy Notice
1. Introduction
This Privacy Notice outlines our policies and practices regarding the collection and use of your personal data, as well as your data protection rights.
We continuously develop our business, which may also entail changes related to the processing of personal data. We will keep this Privacy Notice up to date and recommend reviewing the contents of the privacy statement regularly.
2. Data controller and contact details
Sellai Oy (2930187-8)
Teemu Tervo, info@sellai.fi
Wonderland Konepajankuja 1, 00510 HELSINKI
3. How we collect and use your personal data
The personal data which we process about you comes from different sources
-
You: when your company or uses our services, when you use our web portals, browse our website, or otherwise interact with us or our sales experts.
-
Third parties: such as websites, address registers, credit reference agencies, debt collection agencies, marketing partners, and other data providers.
When we act as data processors for our clients, our clients are responsible to provide appropriate privacy notice that clearly and accurately discloses its privacy practices, including with respect to its use of services such as Sellai Workspace and our sales enhancing services.
A. Clients
In this table, we outline the personal data we process, the purposes for which we process it, and the legal basis for the processing when you act as a representative of our client company.
| Examples of personal data categories | Purposes | Lawful basis |
|---|---|---|
| Name and contact details, position / title, customer relationship, service usage, communications, billing and payments, survey responses. | Service delivery, contract & customer relationship management, customer feedback and surveys and support. | Legitimate interest, related to our freedom to conducting business and arranging operations, the established relationship between our client companies and us, or your position or tasks in the client entity. |
| Name and contact details, user activity, user contents, usernames, login, access, security, authentication, logs, unique identifiers, like device ID, timestamps, IP-address. | Sellai Workspace maintenance, management and development, data management, information security. | Legitimate interest, related to ensuring information security, our freedom to conducting business and arranging operations, the established relationship between our client entities and us, or your position or tasks in the partner company. In case you subscribe to our service as an individual the processing is based on an agreement between us. |
| Name and contact details, position / title, customer relationship, service usage, communications, billing and payments, survey responses. | Sales, marketing, and communications. | Legitimate interest, related to our freedom to conducting business and arranging operations, the established relationship between our client entities and us, or your position or tasks in the client company. |
| Name, contact details, signature, background information, accounting data | Accounting and taxes | Legal obligations, for example, accounting and tax laws. |
| Login, access, security incident, authentication, logs, customer & legal records. | Demonstrating compliance with legal obligations and defending rights ensuring the security of our services. | Legitimate interest related to demonstrating compliance with legal obligations and ensuring legal protection, ensuring information security, and fraud prevention. |
B. Sales Experts
In this table, we outline the personal data we process, the purposes for which we process it, and the legal basis for the processing when you act as our Sales Expert, meaning our sales representative entities.
| Examples of personal data categories | Purposes | Lawful basis |
|---|---|---|
| Name and contact details, performance, calendar, sales tasks, communications. | Sales and lead management, sales performance evaluation. | Legitimate interest, related to our freedom to conducting business and arranging operations, the established partnership between the sales expert entity and us. |
| Name and contact details, performance. | Training and development. | Legitimate interest, related to our freedom to conducting business and arranging operations, the established partnership between the sales expert entity and us. |
| Name and contact details, performance, compensation, billing, and payments. | Performance incentives and compensation. | Legitimate interest, related to our freedom to conducting business and arranging operations, the established partnership between the sales expert entity and us. |
| Name and contact details, user activity, user contents, usernames, login, access, security, authentication, logs, unique identifiers, like device ID, timestamps, IP-address. | Sellai Workspace maintenance, management and development, data management, information security. | Legitimate interest, related to our freedom to conducting business and arranging operations, ensuring information security, our freedom to conducting business and arranging operations, the established partnership between the sales expert entity and us, or your position or tasks in the partner company. |
| Name, contact details, signature, background information, accounting data. | Accounting and taxes | Legal obligations, for example, accounting and tax laws. |
| Login, access, security, authentication, logs, partnership & legal records. | Demonstrating compliance with legal obligations and defending rights, ensuring the security of our services. | Legitimate interest related to demonstrating compliance with legal obligations and ensuring legal protection, ensuring information security, and fraud prevention. |
C. Website visitors
In this section, we outline the personal data we process, the purposes for which we process it, and the legal basis for the processing when you visit our websites. Cookies allow the website to recognize user’s device and store some information about the user’s preferences or past actions.
When you use our services or visit our websites, we collect device-related data using cookies and other similar technologies. We also use cookies and other similar technologies provided by third parties.
We strategically manage advertising across various digital platforms, including search engines, based on user interactions on our websites. For instance, we deliver tailored advertisements to users who have visited our site when they browse other online destinations. In addition to advertising, we utilize these services for selling purposes. The platforms we employ for these functions encompass reputable platforms such as Facebook, LinkedIn, TikTok and Google Analytics.
| Personal data categories | Purposes | Lawful Basis |
|---|---|---|
| Name and contact information, organization, title, or position in organization, interests, suitable meeting times | Lead management, communications (contact forms & calendar) | Legitimate interest, related to ensuring information security, our freedom to conducting business and arranging operations, the established relationship between our client companies and us, or your position or tasks in the partner company. |
| Cookie consents | Cookie management | Legitimate interest related to demonstrating compliance with legal obligations and ensuring legal protection. |
| Cookies and similar technologies, unique identifiers, like device ID, timestamps, IP-address. | Sellai websites maintenance, management and development, data management, information security. | We have a legitimate interest to set strictly necessary cookies that are necessary for our website to work correctly and securely. To use other than strictly necessary cookies we ask your consent. |
| Behavioral information (incl. information collected using cookies and other such technologies) | Advertisement management (redirecting), website analytics and performance optimization. | We need your consent to set cookies and similar technologies on your device. |
4. What types of cookies are used on our websites?
5. When and how we share information with others
In our operations, we collaborate with various partners to whom your personal data may be disclosed, depending on the situation and the purpose of the data processing. When disclosing personal data, we take into account the requirements of applicable legislation. We establish appropriate data processing agreements with all our partners, wherein they commit to handling personal data securely and confidentially.
Depending on the situation, our partners may act either as independent data controllers, in which case the partner independently determines the purposes and means of processing, or as data processors, in which case personal data is processed solely for the purposes defined by us in accordance with this privacy statement and applicable legislation.
We disclose personal data to the following groups of recipients:
Clients. When we process personal data on behalf of our clients for the purposes related to our services, we operate as a data processor. Our clients are responsible to define the purpose and methods of processing.
IT, data hosting and other service providers. In our operations, we leverage various service providers. These services include, among others, data providers, payment services, technical maintenance, and development services as well as various IT and data center services.
Sales experts. Our Sales experts companies operate on our behalf and process personal data in accordance with the description provided in this Privacy Notice.
Mergers and acquisitions. In the event of strategic business decisions such as a sale, merger, or organizational restructuring, it may become necessary for us to disclose personal data to prospective or actual buyers and their respective advisers.
Authorities, legal proceedings, and law. We share personal data with relevant authorities as required by law. Additionally, we may disclose your personal data in response to legal proceedings, government requests, court orders, or as otherwise mandated or allowed by law.
6. Transferring personal data outside EAA
Some of our service providers operate internationally, which means that data is occasionally transferred outside of the European Economic Area. In cases where data is transferred to countries not deemed by the European Commission to have an adequate level of data protection, we put in place appropriate safeguards, such as Standard Contractual Clauses or other measures, to protect your data.
7. Data subject rights
We respect your privacy and your rights over your personal data. Under the General Data Protection Regulation (GDPR), you have the following rights:
Right to access: You have the right to know what personal data we hold about you and how we use it. You can request a copy of your data.
Right to rectification: If your personal data is inaccurate or incomplete, you have the right to have it corrected or updated.
Right to erasure: You can request the deletion of your personal data when it's no longer necessary for the purposes we collected it for.
Right to restriction of processing: In certain cases, you can request that we limit the processing of your data.
Right to data portability: In certain cases, you can ask for your data to be provided to you in a structured, commonly used, and machine-readable format.
Right to object: You have the right to object to the processing of your data for direct marketing purposes. When we process your data based on legitimate interests, you can object the processing, unless we have compelling legitimate grounds for the processing.
Right to withdraw consent: If we rely on your consent for data processing, you can withdraw it at any time.
Right to lodge a complaint: If you believe your data protection rights are not being respected, you have the right to lodge a complaint with a supervisory authority.
8. Data storage and retention
The processing times for different data categories are determined upon the purposes that we process your data and the underlying legal bases and statutory provisions. We process your personal data during the customer or other contractual relationship with the company you represent and us. We are committed to ensuring the accuracy and relevance of the personal data we hold about you for example when you switch positions or companies. To achieve this, we make efforts to keep your contact details and other data up to date. After the termination of the contractual relationship, we typically retain your data for a period of 2 calendar years. However, in some cases, we may retain data for a maximum of 10 years, such as when it is required as part of our accounting records.
9. Questions, concerns or complaints
If you have questions, concerns, complaints, or would like to exercise your rights, please contact
Teemu Tervo, info@sellai.fi
Wonderland Konepajankuja 1, 00510 HELSINKI