Privacy policy

This privacy statement explains how we process personal data in our operations. It also explains your rights in relation to the processing of your personal data.

1. Who is the controller?

Lease Deal IT Oy (business ID 2872214-4)

Contact person for privacy matters:
Eveliina Antonios
eveliina.antonios@leasedealit.fi

2. Whose personal data may we process?

This privacy statement applies to you if you belong to one of the following groups of data subjects. Section 3 explains how we process your personal data specifically for each group, and sections 4–6 cover practices common to all groups.

a) Prospective customers
b) A representative, board member, owner or employee of our corporate customer (“Customer”)
c) Job applicants

3. How we process your personal data by group

a) Prospective customers

What data may we process about you?
- Name, email address and phone number
- Your position in the company and company details
- Names, email addresses and phone numbers of the company’s representatives
- Details of messages you send us by form or other message

How do we collect your data?
Data may first be collected from you when you contact us by email, by phone or via a form on our website.
We may also collect your position in the company, your name, email address and phone number from public sources (for example your company’s website or tendering portals).

Why do we process your data and what is the legal basis?
The purpose of processing is to respond to your contacts or to contact you as a representative of your company in order to offer our services.
For this, the legal basis is our legitimate interest.
You have the right to object to processing concerning you on grounds relating to your particular situation when we process your personal data on the basis of legitimate interest. You can contact us at eveliina.antonios@leasedealit.fi, and the data will be deleted.
In addition, the legal basis for processing may be our statutory obligation.

To whom is your data disclosed?
As a rule, your personal data is not disclosed to third parties.
However, we use external service providers to help process personal data (email and communications systems, data storage, organisation and sharing services, cloud services, form services, customer relationship management systems) that process your personal data for the purposes set out in this privacy statement. Personal data may also be transferred to servers outside the EU/EEA in connection with these service providers. If personal data is transferred outside the EU/EEA, we ensure that processing is adequately protected and carried out in accordance with this statement. Protection may include, for example, an adequacy decision by the European Commission or appropriate contractual clauses, such as the Standard Contractual Clauses approved by the European Commission, and other appropriate safeguards.

How long do we retain the data?
We retain your personal data for 24 months from when your contact has been answered and/or the reason for the contact has been completed.

b) Customers (representatives, board members, owners or employees of our corporate customers)

What data may we process about you?
- The name of the client and/or the representative’s name, date of birth, contact details, personal identity code and other data needed to identify the customer
- Your position in the company and company details
- Names, email addresses and phone numbers of the company’s representatives
- Data related to the contractual relationship, such as descriptions of products or services, billing and payment data, customer feedback and contacts
- Permissions and consents

How do we collect your data?
As a rule, data is collected from you or from another representative of your company.

Why do we process your data and what is the legal basis?
We process your personal data to provide our services, in which case the legal basis is the performance and implementation of the contract between us. We may also process your personal data to develop and maintain our own business and customer relationships (for example a newsletter or marketing communications), in which case the legal basis is our legitimate interest.
You have the right to object to processing concerning you on grounds relating to your particular situation when we process your personal data on the basis of legitimate interest. You can contact us at eveliina.antonios@leasedealit.fi if you wish to object to the processing of your data. You must specify the particular situation on which your objection is based. In addition, the legal basis for processing may be our statutory obligation.

To whom is your data disclosed?
In connection with providing the service, your personal data is disclosed only to such third parties (for example subcontractors we use) for whom disclosure is necessary to deliver the service. We also use external service providers to help process personal data (email and communications systems, data storage, organisation and sharing services, cloud services, form services, customer relationship management systems) that process your personal data for the purposes set out in this privacy statement. Personal data may also be transferred to servers outside the EU/EEA in connection with these service providers. If personal data is transferred outside the EU/EEA, we ensure that processing is adequately protected and carried out in accordance with this statement. Protection may include, for example, an adequacy decision by the European Commission or appropriate contractual clauses, such as the Standard Contractual Clauses approved by the European Commission, and other appropriate safeguards.

How long do we retain the data?
We retain your personal data permanently.

c) Job applicants

What data may we collect about you?
- Name, address, phone number, email address
- Your position in a company and the company’s contact details
- Work history, study transcripts, education background and other interests or information you provide in a CV, employment certificates or a job interview
- Age and date of birth
- Language skills
- Other personal data you provide

You decide which personal data you disclose to us in connection with a recruitment process or when submitting an open application. If you do not provide personal data we have requested, that may affect whether we can assess your suitability for the role adequately.

How do we collect your data?
We collect your personal data directly from you through a job application and a job interview.
We may also collect your data from referees you have named and possibly from consultants we use in the recruitment process.

Why do we process your data and what is the legal basis?
We process your data in a recruitment process or when you send us an open job application so that we can assess your suitability for the role applied for.
Our processing is based on our legitimate interest in processing data in a recruitment process or when assessing your open application.
You have the right to object to processing concerning you on grounds relating to your particular situation when we process your personal data on the basis of legitimate interest. You can contact us at eveliina.antonios@leasedealit.fi if you wish to object to the processing of your data. You must specify the particular situation on which your objection is based.
In addition, our processing may be based on performance of a contract if you are selected for the role. In that case processing is based on taking steps prior to entering into a contract at the request of the data subject.

To whom is your data disclosed?
As a rule, your data is not disclosed to third parties. If we recruit directly for a project of our customer company, we may, with your consent, disclose your data to that customer company.
We use external service providers that may, as part of their service, process personal data on our behalf (email and communications systems, data storage, organisation and sharing services, cloud services, recruitment platforms) only for the purposes stated in this privacy statement. In these situations we have ensured by contract that the service providers process your data only in accordance with applicable data protection law and this privacy statement. Personal data may also be transferred to servers outside the EU/EEA in connection with these service providers. If personal data is transferred outside the EU/EEA, we ensure that processing is adequately protected and carried out in accordance with this statement. Protection may include, for example, an adequacy decision by the European Commission or appropriate contractual clauses, such as the Standard Contractual Clauses approved by the European Commission, and other appropriate safeguards.

How long do we retain the data?
We retain your personal data for a maximum of 2 years after the end of the recruitment process or after an open application is submitted, if you are not selected for the role.
If you are selected for the role, we will inform you about the processing and retention periods for employee personal data.

4. How have we protected your personal data?

We use technical and organisational methods and safeguards that are adequate for our operations to help ensure the security of personal data.
Personal data in electronic form is protected by generally accepted and reasonable technical means such as firewalls and passwords. Materials that contain personal data and are not in electronic form are kept in locked premises to which unauthorised persons do not have access.
Rights to update and view personal data are limited both by person and by time through the controller’s internal, centrally managed access rights. We have entered into appropriate agreements with the service providers we use and have ensured the protection of the confidentiality and security of personal data.

5. Our cookie practice

We use various cookies on our website, through which your personal data may also be collected.
When you visit our site for the first time, we ask for your consent to store cookies other than necessary cookies. You can find more information about cookies in the cookie settings on our website, where you can also later disable cookies.

6. What are your rights in relation to the processing of personal data?

You have the right to check what data concerning you has been stored. This request may be refused on grounds provided by law. Exercising the right is free of charge.
To the extent you have provided data to us yourself, you may have the right to receive such data in a machine-readable format and the right to transmit that data to another controller.
To the extent you have given consent to the processing of personal data, you have the right to withdraw your consent at any time by contacting the privacy contact person.
You have the right to object to processing concerning you on grounds relating to your particular situation when we process your personal data on the basis of legitimate interest. You can contact us at eveliina.antonios@leasedealit.fi if you wish to object to the processing of your data. You must specify the particular situation on which your objection is based.
If you have questions about the processing of your personal data, please contact us at eveliina.antonios@leasedealit.fi. If you consider that we have not complied with applicable data protection law in our operations, you have the right to lodge a complaint with the competent supervisory authority.
The competent supervisory authority for matters relating to the processing of a customer’s personal data is the Office of the Data Protection Ombudsman, Lintulahdenkuja 4, 00530 Helsinki, tel. 029 566 6700, tietosuoja@om.fi.

Controller details

Lease Deal IT Oy
Business ID 2872214-4
info@leasedealit.fi
+358 50 408 8470
Niittyläntie 5, Helsinki
Kehräsaari 5, Tampere