Skip to content

Privacy Policy

This privacy policy describes our practices regarding the processing of personal data and our website usage policies.

 

1. Data Controller and Processor

CoreGo Oy
Messuaukio 1
00520 Helsinki
Business ID: 2683401-1

Contact Person:
Hannu Elomaa
hannu.elomaa@corego.com

 

2. Whose Data Do We Process?

We process data in the context of maintaining customer relationships and marketing our services aimed at companies, including the data of:

  • Our customers
  • Potential customers
  • Representatives of our stakeholder organizations
  • Users of our products and services

 

3. What Data Do We Process?

We may process and store the following personal data:

  • Name
  • Contact information: phone number, email address, and postal address
  • Employer name
  • Job title/role
  • Customer feedback and inquiries
  • Service usage data, such as website browsing and search data, cookies
  • Interest and profiling data
  • Consents or refusals for newsletter communications and direct marketing
  • Other data necessary for the purpose of the register

 

4. Where Do We Obtain Data?

We obtain personal data from:

  • The individual themselves or their represented company
  • Interactions, contracts, and use of our services
  • Business and corporate information systems and trade registers
  • Marketing data providers
  • Providers of phone and address data
  • Credit information companies/registers

 

5. Purpose and Legal Basis for Processing Personal Data

We process and store personal data for the purposes of entering into, maintaining, managing, and developing customer relationships, customer communication, and for analytics and statistics.

We also use personal data for the sales and marketing of our products and services. Data may be used for the development of our business and services.

The legal basis for processing is the legitimate interest of the data controller or a contract, in accordance with the GDPR (EU) 2016/679.

 

6. Data Retention Period

We process personal data for as long as necessary to manage the customer contract. After this, data may be used for marketing, newsletters, and other purposes mentioned above. We delete personal data upon request or when the data is no longer needed.

You may always opt out of direct marketing via the unsubscribe link in newsletters or by notifying us.

 

7. Rights Concerning the Personal Data Register

Requests regarding the rights listed below must be made either in person at our office or via an email request to: support.fi@corego.com.

To verify identity, please include:

  • Name
  • Personal ID number
  • Postal address
  • Phone number
  • Requested information

Responses will be sent to the address verified in the population register.

Right to Access and Rectify
You have the right to access and correct or complete your personal data.

Right to Object
You may object to the processing of your data if you believe it is being handled unlawfully or without proper rights.

Right to Opt-Out of Direct Marketing
You may prohibit the use of your data for direct marketing at any time. We never sell or share your personal data for third-party direct marketing without your explicit consent.

Right to Erasure
If you believe certain data is not necessary for our tasks, you can request deletion. We will process the request and either delete the data or provide a justified reason why it cannot be deleted.

If you disagree with our decision, you may file a complaint with the Data Protection Ombudsman. You also have the right to request that processing of disputed data be restricted until the issue is resolved.

Right to Complain
You may file a complaint with the Data Protection Ombudsman if you believe we are violating data protection laws.

 

8. Disclosure of Personal Data

We generally do not disclose personal data to third parties outside our company without consent.

However, we may disclose data to: The individual, their company or service providers involved in customer relationship management, communications, marketing, and research

These third parties do not own the data and may only use it based on our instructions.

We ensure our service providers comply with data protection legislation. We regularly use:

  • Blink Helsinki Oy, 0590949-1, Lönnrotinkatu 32 E 53, 00180 Helsinki - Marketing agency
  • HubSpot Ireland Ltd, IE9849471, One Dockland Central, Guild Street, Dublin 1, Ireland - Marketing system

 

9. Transfer of Data Outside the EU


We do not transfer personal data outside the EU or EEA. We also ensure our service providers do not transfer data outside EU or EEA without written consent.
Exceptions:

  • Google Analytics (USA)
  • HubSpot (USA, Privacy Shield certified)

No data is transferred to other third countries.

 

10. Principles of Register Protection

Together with our service provider Blink Helsinki Oy, we handle personal data following good data processing practices:

  • Access to services is granted only to specifically authorized individuals
  • Service providers process data with proper technical, physical, and administrative security
  • Systems are protected by firewalls, antivirus software, and other measures
  • Service providers maintain processing logs and restrict access to trained and authorized employees only

 

11. Website Visits

We use cookies and web forms on our website to improve services, communication, and user experience. Cookies allow us to analyze and improve functionality and content.

Cookies
Cookies are small text files stored on the user's device. They don't harm the device. Browsers typically allow users to manage cookies, e.g., by disabling them completely or deleting stored ones. Disabling cookies may affect website functionality.

Google Analytics
We use Google Analytics to track website visits. It collects visit time, pages visited, time spent, IP address, and device OS. No personal data is linked to visit data.

You can opt out of Google Analytics tracking by installing a browser add-on.

HubSpot
We use HubSpot to collect visit time, visited pages, time per page, IP address, form submissions, and email/newsletter interaction data. It is also used for sending newsletters and direct marketing.

You may opt out of marketing and newsletters via provided unsubscribe links or by contacting us.