PRIVACY POLICY

Last updated: 20th November, 2025.

1. Controller

The controller responsible for processing your personal data in connection with our newsletter is:

Invenire Market Intelligence Oy
Business ID: 1852073-3
Address: Kokkilantie 835, 25230 Angelniemi, Finland
Email: doorbell@invenire.fi
Phone: +358 40 8228 848

If you have any questions about this privacy policy or our data protection practices, you can contact us using the details above.

2. Applicable law

The processing of your personal data is governed by:

The EU General Data Protection Regulation (GDPR), and

The Finnish Data Protection Act (Tietosuojalaki 1050/2018), which supplements the GDPR.

3. What data we collect

When you subscribe to our newsletter, we collect and process the following data:

Email address (required)

First and last name (required)

We collect this information directly from you via the newsletter sign-up and other forms on our website.

We do not knowingly collect personal data of children under 13 years of age for the newsletter. If you believe a child has subscribed, please contact us so we can remove their data.

4. Purposes and legal basis for processing

We process your personal data for the following purpose:

Sending our email newsletter, which may include updates, news, product or service information, offers, and other content related to our business.

The legal basis for this processing is:

Your consent under Article 6(1)(a) GDPR. By entering your details in the newsletter sign-up form or any other form on our website, you consent to us using your data to send you our newsletter. You can withdraw your consent at any time (see section 9). We do not use your newsletter subscription data for any other purposes, such as selling it to third parties or unrelated marketing.

5. Recipients of your data

We may share your personal data with the following categories of recipients, only to the extent necessary for the purposes described above:

Email service provider / newsletter platform used to manage newsletter subscriptions and send emails.
IT and hosting service providers who maintain our website, servers, and related technical infrastructure.

These service providers act as our data processors under Article 28 GDPR and the Finnish Data Protection Act. They are only allowed to process your personal data on our documented instructions and must implement appropriate technical and organisational measures to protect your data.

We do not sell, rent, or otherwise commercially disclose your personal data to third parties.

6. International data transfers

Some of our service providers may be located in or process data in countries outside the European Economic Area (EEA). In these cases, we ensure that appropriate safeguards are in place, such as:

An adequacy decision by the European Commission, or

Standard Contractual Clauses (SCCs) approved by the European Commission, combined with additional measures where necessary.

You may request more information about these safeguards by contacting us.

7. Retention period

We store your personal data for as long as you remain subscribed to our newsletter. If you unsubscribe, your email address will be removed from our active newsletter mailing list without undue delay and at the latest within 30 days.

We may retain technical log data (such as proof of consent and unsubscribe) for a longer period where necessary to fulfil legal obligations under EU and Finnish law or to protect our legitimate interests (for example, in the event of a dispute).

8. Your rights under the GDPR and Finnish law

As a data subject, you have the following rights regarding your personal data:

Right of access: You can request information about whether we process your personal data and receive a copy of that data (Art. 15 GDPR).
Right to rectification: You can request correction of inaccurate or incomplete personal data (Art. 16 GDPR).
Right to erasure (“right to be forgotten”): You can request deletion of your personal data where legal conditions are met (Art. 17 GDPR).
Right to restriction of processing: You can request that we restrict processing of your data in certain situations (Art. 18 GDPR).
Right to data portability: You can request that we provide your personal data in a structured, commonly used and machine-readable format and have it transmitted to another controller where technically feasible (Art. 20 GDPR).
Right to withdraw consent: You may withdraw your consent at any time, with effect for the future, for example by clicking the “unsubscribe” link in any newsletter email or by contacting us. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal (Art. 7(3) GDPR).
Right to object: Where we process your data based on legitimate interests or for direct marketing (not applicable here for legitimate interests, but relevant for marketing), you may object to such processing (Art. 21 GDPR).

To exercise any of these rights, please contact us using the contact details in section 1.

9. Right to lodge a complaint with a supervisory authority in Finland

If you consider that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with the competent supervisory authority. In Finland, this is:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Address: Ratapihantie 9, 6th floor, 00520 Helsinki, Finland
Website: www.tietosuoja.fi

Email: tietosuoja@om.fi

Telephone switchboard: +358 29 566 6700

You may also lodge a complaint with the supervisory authority in your EU/EEA country of habitual residence or place of work.

10. Is providing data mandatory?

Providing your email address is necessary to receive our newsletter or to download certain document from our website. You are not legally obliged to provide it, but without it we cannot send you the newsletter or provide you the downloads.

11. Security

We take appropriate technical and organisational measures, as required by the GDPR and Finnish data protection legislation, to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures include, for example:

Use of secure connections (HTTPS/TLS) on our website
Appropriate access controls and authentication in our systems
Regular updates and monitoring of our IT infrastructure
Contracts and instructions ensuring that our service providers also maintain a high level of data protection