Privacy Policy

Register name

Customer, marketing, user, and job seeker registers, and softwares’ personal register.

Registrar

Zefram / Stealth Black Oy (Company)
FI3138389-2
Fleminginkatu 36
00500 HELSINKI

Contact person for register matters

Tuomas Rasila, first.lastname@zefram.com

What personal information we collect and why

The collection of personal information helps us to serve you better. Personal data is collected for a specific, explicit and legitimate purpose.

We process your information in the implementation of our services, in our marketing and customer communications, and in customer service. In addition, we use the information to target our marketing and communications to suit you. We want to create even better services in the future and the information gathered will help us better understand our customers.

You may prohibit the use of information about you on our mailing lists. You can leave our mailing lists whenever you want according to the instructions in the shipment or by notifying us by e-mail.

Customer register

Purpose of processing of personal data, legal basis and categories of personal data

Personal data is collected for a specific, explicit and legitimate purpose. Information is collected for customer relationship management and service delivery. The legal basis for the processing of personal data is the fulfillment of contractual obligations.

The customer register contains the personal data of the registrar’s customers and contact persons, which are e.g. name, contact information, language and other information necessary to manage the customer relationship.

Marketing register

Purpose of processing of personal data, legal basis and categories of personal data

Personal data is collected for a specific, explicit and legitimate purpose. Data is collected for marketing. The legal basis for the processing of personal data is the registrar’s legitimate interest to practice marketing.

The marketing register contains the personal data of personal customers and company contact persons, which are e.g. name, contact information and other marketing information. The personal information of the Marketing Register can be obtained from the forms on our website, by telephone, e-mail, or other similar means, as well as from possible public sources, such as the contact information of companies on websites.

User register

Purpose of processing of personal data, legal basis and categories of personal data

Personal data is collected for a specific, explicit and legitimate purpose. The information in the user registration is used on a contractual basis to provide Company’s software services to customers, identify customers, and grant access rights.

The user registry contains users’ names, usernames, e-mail addresses, and other information stored by administrators.

The personal register of our software

Purpose of processing of personal data, legal basis and categories of personal data

Personal data is collected for a specific, explicit, and legitimate purpose. The information in the personal records of the software is used to provide contracted software services to customers. The personal data of the employees of the customer companies are disclosed and stored in Company’s software.

The register contains users’ names and other information stored by users.

Jobseeker Register

Purpose of the processing of personal data, legal basis, and categories of personal data

The processing of personal data is based on a legitimate interest based on a substantive connection between Company and the data subject when the data subject applies for a job. The company processes the personal data of job seekers for the following purposes: implementation and management of recruitment measures, processing of applications, assessment of the suitability of the jobseeker, and communication-related to job search and recruitment.

In principle, Company collects personal data directly from job seekers on the basis of their own applications. To the extent permitted by law, Company may also obtain registered information from other sources. If information is collected from sources other than the jobseeker himself, Company always requests registered consent. Such other sources may include, for example, outsourcing of personal and suitability assessments as appropriate.

The register may contain, inter alia, the following personal data:

• full name and contact information
• identification information (including the year of birth, social security number and gender);
• educational information (including the name of educational institution, degree title and duration of studies);
• work experience information (including employer information, job title and duration of employment);
• language skills;
• information related to possible personal and aptitude assessments; as well as the
  job to be applied for;
• other information provided by the job seeker himself/herself in his / her application and CV.

Contact forms

The contact and registration forms on our website collect the information requested from the sender on a form-by-form basis that is necessary to enable the provision of that service and are always retained for the period required to provide that service. The information may also be used for marketing purposes within the scope of the matters mentioned in this privacy policy statement, which the user has accepted when using the site or filling in the form.

Disclosure of information

We do not, in principle, disclose your information to third parties. For some of our training, we use external training providers. In such a case, we may provide your necessary information based on the registration form, such as your name, job description, and email address, to the service provider.

In some cases, your information may also be disclosed in confidence to our partners who process personal information under a written assignment agreement. Our partners process personal information as agreed, in accordance with our written instructions, and only for the purposes stated in this Privacy policy statement. We may use such subcontractors, for example, to carry out marketing.

Use of Google Data

Google OAuth Authentication: Our service uses Google OAuth to authenticate users. When you log in using your Google account, we receive your email address and basic profile information from Google. This information is used solely to establish and manage your account with our service and to provide a personalized experience.

Mailbox and Calendar Integration: If you choose to connect your mailbox or calendar to our platform, we use OAuth tokens (access and refresh tokens) to communicate with Google’s servers. This allows us to perform actions that you have explicitly given us permission to do, such as managing emails, scheduling, or accessing your calendar events. We only access and use the data necessary to provide these functionalities and ensure that this data is handled securely and responsibly. To safeguard the privacy of your information, we have implemented robust security measures, and use encryption to protect it. Google Workspace APIs are not used to develop, improve, or train generalized AI/or ML models.

Google Analytics: We utilize Google Analytics to understand how users interact with our service. This includes tracking user actions, page views, and other metrics that help us improve user experience. Google Analytics collects anonymous data such as your IP address, browser type, and how you use our service. We do not use this information for any purpose other than to analyze and enhance our service.

Google Tag Manager: Our service uses Google Tag Manager to manage and deploy marketing tags and pixels. This tool helps us track conversions, analyze website traffic, and optimize marketing efforts.

Data retention

We respect the confidentiality of your personal information. The data retention period and retention criteria vary by personal data group and purpose. However, we will only retain personal information for as long as it is necessary to fulfill the purposes for which the personal information is processed as defined in this Privacy policy statement.

Your right to your own information

You can request the deletion of your personal information. The right to delete your own information does not apply to personal information that we are required to retain for administrative, legal or security reasons. Please note that deleting your personal information from us may affect the information we provide to you based on our customer relationship, as well as any ongoing matters.

You have the right at any time to object to the processing of your personal data for marketing purposes. Every direct e-mail sent by the company has a legal link from which you can block direct e-mails in the future if you wish.

Data transfer

Your data will not, in principle, be transferred outside the European Union or the European Economic Area. However, should your data need to be transferred outside the EU for the purposes set out in this Privacy policy statement, we will ensure that the country is an EU Commission-designated country of adequate data protection, is Privacy Shield certified (US-based transferees), or uses model terms published by the EU Commission. We always ensure that any data transfer is carried out on the basis of the law and with adequate protection mechanisms.

Modification of the Privacy Policy Statement

We are constantly striving to improve our services. Therefore, we reserve the right to change this privacy policy statement by posting it on this page.