Updated: 10 February 2026

1. Personal Data Register

Customer register of SAHA Tech Oy.

2. Data Controller

SAHA Tech Oy
Ruosilantie 7 C
00390 Helsinki, Finland

Contact person and Data Protection Officer: Samuel Haanpää
Tel: +358 50 304 2748
Email: samuel@sahatraining.fi

3. Data Subjects and Purpose of Processing Personal Data

This Privacy Policy applies to the processing of personal data of users (“user”, “users”) of services and products provided by SAHA Tech Oy. It describes the key principles and purposes of SAHA Tech Oy’s processing of personal data. Users may be customers of SAHA Tech Oy or representatives of client companies.

Our products and services may contain links to third-party websites or services. These sites and services are subject to their own privacy policies. SAHA Tech Oy is not responsible for the privacy practices or data processing of third parties. We recommend reviewing third-party privacy policies and any changes to them.

We collect personal data for managing customer relationships. The legal basis for processing is the agreement between us and the statutory obligations arising from it. Providing personal data is a prerequisite for entering into a contract. Our services and products cannot be ordered without providing personal data.

We also collect personal data for marketing and informing about our services. The legal basis for this processing is consent.

By participating in events organized by us, the customer grants permission to record photo and video material and to use such material for coaching and marketing purposes.

4. Personal Data Stored in the Register

The customer register contains the information provided by the user when ordering our services or products. Such information may include personal or company details, contact person’s name, and contact information such as address, email address, and phone number.

We also store information generated during the customer relationship, such as training history and possible test results.

Minors always require guardian consent in order to enter into a customer relationship with us.

5. Rights of the Data Subject

Requests concerning the exercise of the following rights must be sent to:
saha@sahatraining.fi

Right of Access

The data subject has the right to review the personal data we have stored.

Right to Rectification

The data subject may request correction of inaccurate or incomplete personal data.

Right to Object

The data subject may object to the processing of personal data if they believe it has been processed unlawfully.

Right to Prohibit Direct Marketing

The data subject has the right to prohibit the use of their data for direct marketing purposes.

Right to Erasure

The data subject has the right to request deletion of their data if processing is no longer necessary. We will process the deletion request and either delete the data or provide a justified reason why the data cannot be deleted.

Please note that the controller may have a statutory or other legal obligation not to delete certain data. The controller is required to retain accounting material for the period defined in the Accounting Act (Chapter 2, Section 10), which is 10 years. Therefore, accounting-related data cannot be deleted before the retention period expires.

Withdrawal of Consent

If personal data processing is based solely on consent (and not, for example, on a customer relationship or membership), the data subject may withdraw consent at any time.

The data subject may lodge a complaint with the Data Protection Ombudsman if they believe their data is being processed unlawfully.

The data subject also has the right to request restriction of processing of disputed data until the matter is resolved.

Right to Lodge a Complaint

The data subject has the right to file a complaint with the Data Protection Ombudsman if they believe we are violating applicable data protection legislation.

Contact details of the Data Protection Ombudsman:
www.tietosuoja.fi/fi/index/yhteystiedot.html

6. Regular Sources of Data

Customer data is regularly obtained:

• Directly from the customer when the customer relationship is established

• Directly from the customer via online forms

7. Retention Period

Personal data is stored only as long as necessary to fulfill the purposes defined in this Privacy Policy. After this, the data will be deleted unless we are required by law or by contractual rights and obligations to retain it.

8. Processors of Personal Data

The data controller and its employees process personal data. We may partially outsource data processing to third parties, in which case we ensure through contractual arrangements that personal data is processed in accordance with applicable data protection legislation and appropriately.

Personal data may also be received by employees of the accounting firm and the IT company responsible for website maintenance.

9. Transfers Outside the EU

Personal data is not transferred outside the European Union or the European Economic Area.

10. Automated Decision-Making and Profiling

We do not use personal data for automated decision-making or profiling.

11. Cookies

We collect cookies to improve user experience and develop our services. We use the information to improve the service and for analytics and tracking necessary for website development. Cookies enable, for example, remembering session-specific settings such as language selection.

Most browsers allow you to block cookies or delete them as part of clearing browsing history. Please note that blocking cookies may affect the functionality of certain website features, such as login.

You can delete all cookies stored on your device by clearing your browser’s browsing history. This will remove cookies set by all websites you have visited. Please note that you may also lose some saved information (such as saved login details).

12. Contact Information

SAHA Tech Oy
Ruosilantie 7 C
00390 Helsinki

Email: saha@sahatraining.fi
Phone: +358 50 304 2748
Website: www.sahatraining.com