Skip to content
EN

Privacy Policy

1. Protecting your privacy

We comply with all applicable laws governing the processing of personal data. This privacy and cookie policy explains what personal data we may collect in our personal data register and how we use that information.

 

2. Who processes your personal data?

Data controller
Tahcon Oy (Y-tunnus: 2863214-9)
Valimotie 17-19
00380 Helsinki

Contact person
Ira Raitalinna
info@tahcon.fi

Name of the register
Tahcon Customer and Marketing Register

Data subjects
Data subjects include representatives of the Data controller's customers and prospective customers, job applicants, and users of the Data controller's services and website.

 

3. What personal data do we collect and why?


We process personal data for the following purposes:

  • managing inquiries and customer relationships

  • providing and developing our services

  • marketing and communications

  • improving the user experience on our website

  • processing purchases and orders placed through our online store

 

Typically, we collect the following information:

  • name, job title, employer, and contact details (email address, phone number, postal address)
  • marketing consents and opt-out preferences, areas of interest, and classification data
  • behavioral data (such as website usage, form interactions, and chat conversations)
  • IP address, cookie and browser data, and profiles created through cookies
  • email open and click data
  • communication history
  • order and billing information

We use secure third-party payment service providers for purchases made through our online store. We do not store payment card numbers or other sensitive payment information in our systems.




We may receive the following information about data subjects from third parties:

  • behavioral data from social media platforms such as Facebook, LinkedIn, and Instagram

 

If we process personal data relating to employees or job applicants, the data may include:

  • contact details

  • job applications, CVs, and references submitted by the individual

  • payroll information

  • information required to fulfill rights and obligations relating to employment

  • special categories of personal data required by law, such as trade union membership or health data, but only where necessary to comply with legal obligations

 

With your consent, we may also collect and process other information.

 

Regular sources of personal data

The information stored in the register is primarily collected directly from data subjects through the Tahcon website. Personal data may also be added to the register manually following interactions that take place in person, by telephone, by email, or through other communication channels.
We use web analytics services to collect information about visitors to our website in order to analyze and improve our website, as well as to provide relevant marketing and customer communications. Behavioral data is collected through the Tahcon website, emails, and social media channels using cookies and similar technologies.
Information contained in the register may also be updated manually and supplemented with information obtained from publicly available sources.

 

4. Where and how is personal data processed?

Our HubSpot CRM uses EU Data Hosting, and customer data is stored in the European Union. In addition, we use other platforms and systems, such as Google Ads, LinkedIn, Meta (Facebook and Instagram), Typeform, and payment service providers, through which certain personal data may be transferred outside the European Union.
Such transfers are primarily based on the EU–US Data Privacy Framework or, alternatively, on Standard Contractual Clauses (SCCs). Standard Contractual Clauses are standard contractual terms approved by the European Commission that ensure an adequate level of protection for personal data transferred outside the European Union. We only use trusted service providers that are committed to protecting personal data.

 


5.  Cookies and advertising

Tahcon's website uses cookies. Cookies are small text files that are stored on your device by your web browser. Among other things, they help the website administrator understand how visitors use the website. Cookies and similar technologies do not damage your device or the files stored on it in any way.


By clicking "Accept" in the website's cookie banner, you consent to the use of cookies. You may also refuse the use of cookies by clicking "Reject", or manage certain cookie preferences by selecting "Cookie Settings". Please note that disabling cookies may affect the functionality of certain features of the website. You may withdraw your consent at any time by changing your cookie preferences through the cookie settings.

  • We use cookies to analyze and improve the functionality of our website and to provide targeted advertising.
  • We also use third-party tools, including HubSpot Analytics, Google Ads, LinkedIn Insight Tag, and Meta Pixel. These tools allow us, for example, to display advertisements on Google or LinkedIn platforms if you have accepted marketing cookies.
  • The advertising cookies mentioned above are activated only with your consent. If you reject them, we will not use your data for advertising purposes. If you accept them, we may display advertisements based on your interests on other platforms.
  • We do not independently disclose personal data to advertising platforms such as LinkedIn, Google, or Meta. However, by accepting marketing cookies, certain browser-related data (such as your IP address or cookie identifier) may technically be transmitted to these platforms to enable interest-based advertising. In such cases, we apply safeguards approved by the European Commission, including Standard Contractual Clauses, to ensure an adequate level of protection for transferred personal data.

 

6. Legal basis for processing personal data

  • Customer relationship management and the performance of contractual obligations.

  • Legitimate interest (for example, improving our website and services, customer communications, and business-related reporting).

    • For example, we may analyze which pages are most frequently visited or how often forms are used in order to improve our content and services.

    • This information is not used for targeted advertising without your consent.

    • Processing based on legitimate interest is carried out where you have an existing relationship with us or have expressed an interest in our services. We rely on legitimate interest only where we have determined that it does not override your rights and freedoms. Upon request, we can provide additional information about this assessment.

  • Consent (for example, newsletters and marketing cookies.)

  • Legal obligation (for example, accounting requirements and consumer protection legislation.)

 

 

7. How long do we retain personal data?

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or for as long as required by applicable law.


In general:

  • Customer data is retained for up to six (6) years after the end of the customer relationship, unless a longer retention period is required by law (for example, under accounting legislation).
  • Personal data contained in the marketing register is retained for up to 24 months after the last contact.
  • Personal data relating to job applicants is retained for up to 12 months after the latest application or contact, unless otherwise agreed.


Outdated and unnecessary personal data is deleted on a regular basis.

 

8.  Subprocessors and disclosure of personal data

Your personal data is primarily processed by Tahcon employees to the extent necessary for the performance of their duties.  We also use selected subcontractors and service providers who may process personal data contained in our customer and marketing register for purposes such as system development, technical support, or customer communications. Personal data may also be shared with subcontractors where necessary for the performance of a service or assignment. Personal data is always disclosed only to the extent necessary and on a confidential basis under contractual obligations. Personal data may also be disclosed where necessary to provide a service, for example in connection with jointly organized events. In such cases, only the minimum amount of personal data required is disclosed, and only to parties that process personal data responsibly.

 

 

9. Information security

Access to the register is protected by user accounts and personal passwords. Only employees whose duties require them to process personal data are authorized to access systems containing customer data.  All Tahcon office premises are secured, and access is controlled through access control systems.

The system login page is protected by an SSL certificate and two-factor authentication. User passwords are stored in accordance with industry security standards.



10. Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • the right to be informed about the processing of your personal data
  • the right of access
  • the right to rectification
  • the right to erasure ("right to be forgotten")
  • the right to restrict processing
  • the right to data portability
  • the right to object to processing
  • the right not to be subject to automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects or similarly significant effects on data subjects.

 

 

11. How can you exercise your rights?

If you wish to exercise any of your rights relating to your personal data, please submit a data subject request or contact us by email at info@tahcon.fi. Requests must be submitted in writing.  We must be able to verify the identity of the requester and the legal basis for the request before processing it.

 

12. Changes to this privacy policy

We may update this privacy policy from time to time as our operations, privacy practices, or applicable legislation change. The most up-to-date version of this privacy policy is always available on our website.