Effective Date: 6 June 2025

1. Personal Data Register

Customer register of SAHA Tech Oy.

2. Data Controller

SAHA Tech Oy
Ruosilantie 7 C,
00390 Helsinki, Finland

Contact person and Data Protection Officer: Samuel Haanpää
Phone: +358 50 3042748
Email: samuel@sahatraining.fi

3. Data Subjects and Purpose of Processing Personal Data

This Privacy Policy applies to the processing of personal data of users ("user," "users") of services and products offered by SAHA Tech Oy and describes the key principles and purposes related to the processing of personal data by SAHA Tech Oy. Users may be customers of SAHA Tech Oy or representatives of customer companies. Our products and services may contain links to third-party websites or services. These sites and services are subject to their own privacy policies. SAHA Tech Oy is not responsible for the privacy practices or data processing conducted by third parties. We recommend paying attention to the privacy policies of third parties and their updates.

We collect personal data for managing customer relationships. The legal basis for processing personal data is the contract between us and the resulting statutory obligations. Providing personal data is a prerequisite for concluding the contract. Our services and products cannot be ordered if you do not provide your personal data.

We also collect personal data for marketing and informing about our services. The legal basis for this processing is consent.

By participating in events we organize, the customer gives permission to record photo and video material and grants the right to use such material for coaching and marketing purposes.

4. Personal Data Stored in the Register

The customer register contains information provided by the user when ordering our services or products. Such information may include details about the individual or company, contact person's name, and contact details such as address, email address, and phone number. Additionally, we store information generated during the customer relationship, such as training history and possible test results. Minors always require parental consent for a customer relationship to be established with us.

5. Rights of the Data Subject

The data subject has the following rights, and requests concerning their use should be sent to: saha@sahatraining.fi

Right of access

The data subject can review the personal data we have stored.

Right to rectification

The data subject can request correction of incorrect or incomplete information concerning them.

Right to object

The data subject can object to the processing of personal data if they believe the data has been processed unlawfully.

Right to prohibit direct marketing

The data subject has the right to prohibit the use of their data for direct marketing.

Right to erasure

The data subject has the right to request deletion of data if processing is no longer necessary. We will process the deletion request and either delete the data or provide a justified reason why the data cannot be deleted. Note that the controller may have a legal or other right not to delete requested data. The controller is obligated to retain accounting materials in accordance with the Accounting Act (Chapter 2, Section 10) for 10 years. Therefore, accounting-related materials cannot be deleted before the retention period expires.

Withdrawal of consent

If the processing of personal data concerning the data subject is based solely on consent and not, for example, on a customer or membership relationship, the data subject can withdraw consent. The data subject can complain to the Data Protection Authority about the decision. The data subject has the right to request restriction of the processing of disputed data until the matter is resolved.

Right to lodge a complaint

The data subject has the right to lodge a complaint with the Data Protection Authority if they believe we violate applicable data protection legislation when processing personal data.

Data Protection Authority contact information:

www.tietosuoja.fi/fi/index/yhteystiedot.html

6. Regular Sources of Information

Customer data is regularly obtained:

• Directly from the customer when establishing the customer relationship
• Directly from the customer through an online form

7. Retention Period

Personal data is retained only as long as necessary to fulfill the purposes defined in this Privacy Policy. After that, we delete the data unless we are legally or contractually obliged to retain it.

8. Data Processors

The data controller and its employees process personal data. We may also outsource some personal data processing to third parties, ensuring by contractual arrangements that personal data is processed in compliance with applicable data protection laws and otherwise appropriately. Additionally, accounting office employees and the IT company responsible for website updates receive personal data.

9. Transfer of Data Outside the EU

Personal data is not transferred outside the EU or the European Economic Area.

10. Automated Decision-Making and Profiling

We do not use personal data for automated decision-making or profiling.

11. Cookies

We collect cookies to improve user experience and develop services. We use the data for service development and website analytics and tracking. Cookies enable, for example, remembering session-specific settings (such as language selection).

Most browsers allow you to block or delete cookies along with your browsing history. Note that blocking cookies may affect the functionality of some website features, such as logging in.

You can delete all cookies on your device by clearing your browser history. This action removes cookies set by all websites you have visited. However, note that you may also lose some saved information (e.g., stored login details).

12. Contact Information

SAHA Tech Oy
Ruosilantie 7 C,
00390 Helsinki, Finland

saha@sahatraining.fi
+358 50 304 2748
www.sahatraining.fi