PRIVACY POLICY
Updated 2.2.2026
1. Data Controller
Osaamistehdas Oy
Business ID: 2571242-6
Iso Roobertinkatu 20–22, 00120 Helsinki, Finland
Phone: +358 400 809 009
Email: tietosuoja@osaamistehdas.fi
2. General Information
To serve you in the best possible way, we process certain personal data about you in our operations. We value your privacy and are committed to protecting your personal data in accordance with applicable legislation.
This privacy policy explains:
- What personal data we collect
- For what purposes and on what legal grounds the data is processed
- How the data is protected
- Your rights
The processing of personal data is based on applicable law and the legal grounds described in this privacy policy. We may update this privacy policy as our operations or applicable law change.
3. What Personal Data We Collect and Sources
We mainly collect personal data directly from you, for example:
- When contacting us
- When registering for services
- When placing orders
- During the use of our services
We also collect visitor data from our website using analytics tools (e.g., Google Analytics) to improve the website and target marketing.
Categories of personal data we collect:
1. Identification and Contact Information
- Name
- Date of birth
- Language used in the service
- Address
- Email address
- Phone number
2. Payment and Order Information
- Billing information
- Payment details
- Purchase history
- Ordered products and pricing information
- Delivery address
- Chosen delivery method
3. Service-related Information
- Registration details for tests or training
- Date, language, and location of the service
- Test results
- Practice results
4. Login Information
- Email address used for Google or Facebook login
- Verification information
5. Website Usage and Analytics Data
- Browsing and usage information
- Device identifiers
- Data used for product recommendations and targeted content
- Product reviews
4. Purposes and Legal Grounds for Processing
We process personal data for the following purposes:
Providing Services and Handling Orders (Contractual necessity)
- Processing and delivering orders
- Managing registrations
- Customer service
- Billing
Legal Obligations
- Accounting
- Regulatory compliance
Service Development and Customer Relationship Management (Legitimate interest)
- Maintaining customer relationships
- Business development
- Service analysis
- Preventing misuse
- Direct marketing based on customer relationship
Consent-based Processing
- Electronic direct marketing (where required by law)
- Use of cookies for analytics and marketing
- Providing personalized content
5. Data Disclosure and Processors
Your personal data is processed by our employees as part of their duties. We may use external service providers, such as:
- IT and system service providers
- Payment service providers
- Analytics and marketing service providers
- We ensure through agreements that personal data is processed lawfully and confidentially.
Data may also be disclosed:
- As required by law or authorities
- In the event of corporate transactions (e.g., mergers or acquisitions)
6. Transfers Outside the EU
Personal data is generally not transferred outside the EU/EEA. If a service provider’s servers are located outside the EU/EEA, we ensure that the transfer is carried out using legal safeguards (e.g., EU standard contractual clauses).
7. Data Retention
We do not retain personal data longer than necessary for the purposes for which it was collected or as required by law. Retention periods may vary depending on the purpose of processing and legal requirements.
8. Data Security
Personal data is stored in secure systems:
- Access to data is restricted with access rights
- User-specific accounts and passwords are used
- Data is processed confidentially
9. Cookies
We use cookies and similar technologies on our website to improve user experience, ensure site functionality, and for analytics and marketing purposes. Cookies are small text files stored on your device.
We use, for example:
- Essential cookies (website functionality)
- Analytics cookies (e.g., Google Analytics)
- Marketing cookies
Users can manage cookies:
- Through the cookie consent tool displayed on the website
- From browser settings
Please note that blocking essential cookies may affect website functionality.
10. Rights of Data Subjects
You have the following rights regarding the processing of your personal data:
Withdrawal of Consent
If we process your personal data based on your consent, you can withdraw your consent at any time by notifying us. Withdrawal of consent does not affect the lawfulness of processing conducted before the withdrawal.
Right of Access
You have the right to obtain confirmation of whether we process your personal data. If we process your data, you have the right to receive a copy of your data and additional information on the purposes, legal grounds, and retention periods.
Right to Rectification
You have the right to request correction or completion of inaccurate, incorrect, or incomplete personal data.
Right to Object to Direct Marketing
You can object at any time to the processing of your personal data for direct marketing purposes. After this, we will no longer process your data for this purpose.
Right to Object to Other Processing
If we process your personal data based on legitimate interests or public interest, you have the right to object to such processing for reasons related to your personal situation. In that case, we will stop processing unless there is a compelling legitimate reason or the processing is necessary to establish, exercise, or defend legal claims.
Note that in some cases, objection may affect our ability to provide services.
Right to Restriction of Processing
In certain legally defined situations, you have the right to request that we restrict the processing of your personal data, for example, when the accuracy of the data is contested.
Right to Data Portability
If processing is based on consent or contract and is carried out automatically, you have the right to receive your personal data in a commonly used, machine-readable format and to transfer the data to another data controller.
Exercising Your Rights
You can exercise these rights by contacting us by email at: tietosuoja@osaamistehdas.fi We may request additional information to verify your identity.
If you believe that the processing of your personal data is unlawful, you have the right to lodge a complaint with the supervisory authority:
Office of the Data Protection Ombudsman