Privacy

Suomeksi

Privacy notice

Updated 27 September 2026

This notice explains how Finreim Oy processes personal data when you contact us, book a meeting, act as a contact person for one of our clients or partners, or use this website.

1. Controller

Finreim Oy (Business ID 3085714-4)
Suolakivenkatu 18 B 41, 00810 Helsinki, Finland
Contact: Petri Suutarinen, CEO
petri.suutarinen@finreim.fi · +358 400 330 322

2. Whose data we process

• contact persons of our clients and prospective clients
• interviewees and stakeholder representatives in our assignments
• contact persons of partners and subcontractors
• people who contact us or book a meeting
• visitors to this website

3. What data we process

• contact details: name, organisation, job title, email address and phone number
• messages and meeting details, such as the time of a booking and what you tell us in it
• assignment data, such as contracts, invoicing details and personal data contained in work materials, for example interview notes
• technical data related to website use, such as IP address, browser details and cookie data

We do not collect personal identity numbers or sensitive data such as health information.

4. Purposes and legal bases

• Responding to enquiries and arranging meetings. Legal basis: our legitimate interest in running our business, or steps taken before entering into a contract.
• Carrying out assignments. Legal basis: our contract with the client organisation. We process the data of its contact persons and interviewees on the basis of our legitimate interest.
• Invoicing and accounting. Legal basis: legal obligation.
• Client relationships and marketing to organisations, such as publications and event invitations. Legal basis: our legitimate interest. You can opt out of marketing at any time.
• Website maintenance, security and visitor statistics. Legal basis: our legitimate interest. For statistics cookies, the legal basis is your consent, which you can withdraw.

We do not make decisions based solely on automated processing, and we do not profile.

5. Where the data comes from

We receive data from you or your organisation. We may also use public sources such as organisations' websites, LinkedIn and the Finnish Trade Register.

6. Who we share data with

We do not sell or rent personal data. We use trusted service providers that process data on our behalf:

• website: Weebly (Square)
• email, calendar and files: Microsoft 365
• meeting bookings: Doodle
• accounting and invoicing: our accounting service provider
• analyses, calculations and reports in assignments: the AI services ChatGPT (OpenAI) and Claude (Anthropic), Invest for Excel (Datapartner) and FileMaker Pro (Claris)

If we communicate with you on LinkedIn, LinkedIn processes the data under its own terms. We disclose data to authorities only when required by law.

7. Transfers outside the EU and EEA

Some service providers may process data outside the EU and EEA, for example in the United States or Switzerland. Such transfers rely on an adequacy decision of the European Commission, such as the EU–U.S. Data Privacy Framework, or on standard contractual clauses approved by the Commission.

8. How long we keep data

• enquiries and bookings that do not lead to a client relationship: up to two years from the last contact
• client and assignment data: for the duration of the assignment and up to five years after it ends
• accounting records: for the period required by the Finnish Accounting Act
• marketing contact details: until you opt out or the data becomes outdated. We review the data regularly.

9. Cookies and the website

This website runs on the Weebly platform. Weebly uses cookies that are necessary for the site to work, such as session and language cookies and a cookie that remembers your cookie choice. They do not require consent.

For visitor statistics we use only Weebly's own statistics, which show how many people read our pages and blog posts. Weebly's statistics cookies (for example _snow_id and _snow_ses) are set only if you accept them in the site's cookie notice. Weebly also loads its own Google statistics code on the pages, and its cookies are likewise set only with your consent. We do not use Google Analytics ourselves, and we do not use advertising cookies.

The site's fonts are loaded from Google, which means your browser's IP address is passed to Google. The booking link takes you to Doodle and the LinkedIn link to LinkedIn, where their own privacy policies apply.

You can change your cookie choice at any time: Change cookie choice. You can also block or delete cookies in your browser settings.

10. Data security

Only people who need the data for their work can access it. We use encrypted connections and services with strong authentication.

11. Your rights

You have the right to:

• know what data we process about you and receive a copy of it
• have inaccurate data corrected
• request erasure of your data or restriction of processing
• object to processing based on legitimate interest and opt out of marketing
• receive the data you have provided in a machine-readable format when processing is based on a contract or consent
• withdraw your consent

Send your request by email to petri.suutarinen@finreim.fi. We will reply within one month.

12. Right to lodge a complaint

You can lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection law. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (tietosuoja.fi).

13. Changes

We update this notice when our operations or the law change. The current version is always available on this page.