Privacy policy

May 2018

It goes without saying that because privacy and data protection are the key businesses of Privaon, it is important to us when we handle personal data.

This policy explains how we process personal information in all courses of our activities. The standard for our personal data processing operations are the relevant national and international regulations and we adhere to the rules and principles set forth in the European General Data Protection Regulation (GDPR).

You have the right to the protection of your personal data and we process personal information only on lawful bases and in a transparent way.

Collection and Use of Personal Data

Our core business is not the collection of your personal data. Therefore, we process only a minimum amount of personal data necessary to operate our business and to provide our services.

We process personal data when this is necessary for the preparation and performance of a contract with a customer. This includes for example contact information, billing information and other commercial business information which you have provided to us in the context of requests or the provision of services.

We process some customer personal data on the basis of our legitimate interest to market and advertise our products. This includes contact information, information about purchases as well as customer’s expression of interest. When our interest is a basis for the processing, we have taken your rights and interests into account. If you wish to hear more about the conducted balancing test, please contact us. As a customer of Privaon Oy you have the option to object to such processing at any time through contacting us.

We may also ask for your consent to process your data, for example when you subscribe to our newsletter. When the processing is based on your consent, you have a right to withdraw your consent at any point. Withdrawing consent does not affect the lawfulness of the processing prior to the withdrawal. You can withdraw your consent for processing by contacting us. If the consent relates to receiving our newsletter, you can use the link in the email.

We may enrich collected data by using data from third parties, such as publicly available databases and commercial business information services when they share the data with us.

Marketing and Advertising

As a we are a company dependent on business operations, we do advertising. We may contact you for marketing or advertising. We may also serve ads on third party web sites.

We process marketing data on the bases of our legitimate interest. We keep records of customer contact details to provide more information about our products, respond to inquiries, and for marketing & sales of our services.

We can target you with ads based on your visits on our website. More information about the advertising cookies can be found from the section ‘Third Party Website Analytics and Advertising Cookies’

We use third party online advertising networks, social media companies and other third-party services to send marketing communication and display ads on other websites and services you may use. You can ask us to remove your contact data from potential marketing channels at any time by contacting us. You can unsubscribe from email marketing by using the link in the email.

Disclosure and Data Sharing

We are using third-party services for processing and storing data that may contain personal information.

We use third-party service providers to provide the necessary software, networking, advertising and other services that we use to process your personal data and operate our business.

Third-parties purely act as a processor and do not have the permission to process such information in any ways beyond the agreed services and Privaon remains the sole controller of such data. If you wish to receive more detailed information about the recipients of your personal data, please contact us.

We may have to disclose certain information to public authorities or law enforcement when this is required by law. We only do so on the bases of an adequate legal warrant or a subpoena issues by a Finnish Court.

In case of mergers or acquisitions, the acquiring entity may obtain access to relevant customer data bases.

Data Security

Privaon has appropriate technical and organizational security policies and procedures in place to protect personal data from loss, misuse or other comparable unauthorized access.


You have the right to access your personal data or to have any inaccurate information about you corrected. You have the right to request the deletion of your personal information at any time, if it is not our legitimate interest or our legal obligation to retain certain personal information. You have the right to lodge a complaint with a supervisory authority.

  • Right to access You have right to know, what personal data we hold about you and have a copy of the data. You have also right to receive confirmation that we do not process your personal data.
  • Right to rectification You have right to have your personal data corrected, updated and completed.
  • Right to erasure (‘right to be forgotten’) You have right to have your personal data deleted, if we do not have legitimate interest or legal obligation to retain the data.
  • Right to restriction of processing You have right to obtain restriction of processing if you object to processing, contest the lawfulness of the processing or accurancy of the data or if you need the data to defence your legal claims
  • Right to data portability If the processing of your data has been based on your consent or contract, you have right to receive your data in machine readable format and have it transferred to another controller.


If you wish to make a request, or if you have any other question relating to your rights or this privacy policy, please contact us at

Controller and Contact Information

Privaon Oy is the Controller of your personal data. We may from time to time change this Privacy Policy at any time with or without notice. We recommend that you re-visit this Privacy Policy from time to time to learn of any such changes.

If you have any questions or comments, please contact us at:

Privaon Oy

Upseerinkatu 1-3, toimisto 162

02600 Espoo

+358 50 328 1446


The information in this Cookie Policy is provided to you in an open and transparent way, so that you can see how cookies are used to enrich your visitor experience and make an informed choice to allow their usage. However, if you wish to delete cookies, this can be done via settings in your web browser. Below you can read more about our use of cookies.

Third Party Website Analytics and Advertising Cookies

In order to gain more information about the activities on our website, we use 3rd-party analytics and advertising.

The Privaon website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses Cookies to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

Our site uses IP anonymization. Google therefore will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On behalf of the website provider Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider.

You can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available here or use other advertising and tracking prevention tools.

We also use Google Analytics to analyse data from AdWords and DoubleClick Cookies. You can deactivate this data processing in Google’s privacy settings here:

If you have any questions or comments, please contact us at:

  • Privaon Oy
  • Upseerinkatu 1-3, toimisto 162
  • 02600 Espoo
  • +358 50 328 1446

Data Transfers Outside EU or EEA

Your Personal data is processed in the European Economic Area.

All Personal data processed by us or by our service providers is processed in the European Economic Area (EEA).

In some rare cases (like some troubleshooting cases) some data can be transferred to service providers located in United States. This data does not typically include personal data. But in cases personal data is transferred, the recipients are obliged to protect your personal information by signing a contract based on model contractual clauses approved by the European Commission.

Storage Periods

We retain personal information in line with the purpose of processing, as long as we are required to by law or until we receive a deletion request provided that we are not required or have an overriding legitimate interest to keep it.

We have determined storage periods for the different categories of personal data based on the purpose of the processing and the applicable legislation, such as accounting law. If you wish to have more detailed information about our retention times, please contact us.