Privacy Policy

This is a privacy policy in accordance with the EU General Data Protection Regulation (GDPR). Prepared and updated to meet current data protection legislation.

1. Data Controller

• Company: Proseduuri Oy
  Business ID: 2710574-2
  Address: Hämeenkatu 7, 33100 Tampere, Finland

2. Contact Person for Inquiries Regarding the Register

• Name: Sampo Karjalainen
  Position: CEO
  Phone: +358 10 567 4370
  Email:

3. Name of the Register

Proseduuri Oy’s Customer, Marketing, and Website Tracking Register.

4. Legal Basis and Purpose of Processing Personal Data

The primary legal basis for processing personal data is the legitimate interest of Proseduuri Oy, which is based on a B2B business relationship, contacts from potential clients, or the use of our website. Data is also processed for the performance of contracts and to comply with legal obligations.

Purposes of processing:

• Management, maintenance, and communication related to customer relationships.

• B2B sales, targeted marketing, and providing correct, tailored solutions to corporate clients.

• Tracking website traffic, company data, and user behavior to develop services and support sales.

• Business planning, development, and statistical analysis.

5. Data Content of the Register

The following categories of data concerning corporate contact persons are processed in the register:

• First name and last name

• Company name and Business ID

• Job title and area of responsibility within the company

• Company industry, street address, postal code, and city

• Phone number and email address

• Website behavioral data, visit details, and interactions (e.g., chat conversations and submitted forms)

6. Regular Sources of Data

Data is primarily collected directly from the data subjects themselves (e.g., via website forms, chat interactions, solution configurators, and direct contact) or from the company they represent. In addition, information about website visits and companies is automatically collected through tracking technologies. Data may also be collected and updated from public sources or official corporate registries within the limits of applicable law.

7. Website User Tracking, Cookies, and Widgets

We use the Leadfeeder service on our website to identify visiting companies and to analyze website usage. Leadfeeder identifies the organizations visiting our site based on IP addresses and other public identifiers. Regarding data protection, Proseduuri Oy acts as the Data Controller, and Leadfeeder acts as the Data Processor.

Furthermore, we utilize our own proprietary proseduuri.cloud widgets on our website to provide customer-specific chat functionalities, solution configuration tools, and various contact or order forms. The data collected through these proprietary widgets is transferred directly into systems controlled by the Data Controller.

If you do not wish your website visits to be tracked, you can manage your preferences through the website’s cookie and tracking consent settings, or disable cookies in your browser settings.

8. Recipients of Data and Regular Disclosures

Data is processed internally within Proseduuri Oy in our sales CRM (Customer Relationship Management) system for sales and marketing purposes. Data is not disclosed to third parties except to fulfill statutory legal obligations or to trusted subcontractors (such as CRM and tracking technology service providers) acting as Data Processors on behalf of the Data Controller.

9. Transfer of Data Outside the EU or EEA

Data is stored and processed strictly and exclusively within the European Union (EU) or the European Economic Area (EEA). No data is transferred to third countries.

10. Data Retention Period

Personal data is retained in the sales CRM system indefinitely for as long as it is necessary to manage the customer relationship, maintain an active sales process, or fulfill our legitimate interest. Data will be deleted when the legal basis for processing no longer exists or if the data subject requests the erasure of their data.

11. Rights of the Data Subject

Pursuant to the GDPR, data subjects have the right to:

• Access their personal data and request a copy of it.

• Request the rectification of inaccurate or incomplete data.

• Request the erasure of their data (“the right to be forgotten”) from the CRM system and other registers.

• Object to the processing of their personal data or request the restriction of processing.

• Opt-out of and prohibit the use of their data for direct marketing purposes.

• Lodge a complaint with a data protection authority (such as the Office of the Data Protection Ombudsman) if they believe that the processing of their personal data infringes applicable data protection laws.

12. Principles of Data Security and Protection

Data is stored in digital IT systems and CRM software protected by standard technical security measures used in normal business operations (such as firewalls, passwords, and data transmission encryption). Access to the data contained in the register is strictly restricted to personnel of the Data Controller whose specific job responsibilities require the processing of such data. Each authorized user authenticates into the system using a personal username and password.