Privacy Policy

PRIVACY POLICY

Updated: 2024-10-03

This privacy policy describes how Into.Coach - Ville Lindfors (hereafter "the company" or "data controller") processes personal data and outlines the rights of data subjects. The company complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the processing of personal data.

1. Data Controller

Into.Coach - Ville Lindfors
Business ID: FI32363965
Address: Muuttolinnunreitti 3 B 2, 02660 Espoo, Finland
Email: ville@into.coach

2. Purpose and Legal Basis for Data Processing

The company processes personal data for the following purposes:

• Customer relationship management: Personal data is processed to manage contracts, provide services, and maintain customer communication.

• Invoicing: Personal data is processed for invoicing purposes.

• Customer-specific documents: Handling of documents and files related to customers and provided services.

The legal basis for processing is the performance of a contract, legitimate interest, and legal obligations (such as accounting laws).

3. Categories of Personal Data Processed

The company processes the following personal data:

• Name

• Phone number

• Email address

• Business ID or date of birth (for individual customers)

• Contract information

• Customer-specific documents

4. Data Retention Period

Personal data will be retained as long as necessary for managing the customer relationship and fulfilling legal obligations. Data is generally retained for six (6) years after the termination of the contract.

5. Data Processors and Data Transfers

The company uses the following third-party service providers to process personal data:

• Google Cloud: Stores contract details, basic user information (name, phone, email, business ID or date of birth), and customer-specific documents. Google complies with GDPR and may transfer data outside the EU, but provides adequate data protection safeguards.

• OP Kevytyrittäjä: Manages invoicing information (name, email, business ID for company customers) in compliance with GDPR.

6. Rights of the Data Subject

Data subjects have the following rights regarding their personal data:

• Right to access: The right to request access to their personal data.

• Right to rectification: The right to request the correction of inaccurate personal data.

• Right to erasure: The right to request the deletion of personal data under certain circumstances.

• Right to restriction of processing: The right to request the restriction of data processing in certain situations.

• Right to object: The right to object to the processing of personal data based on legitimate interest.

• Right to data portability: The right to request the transfer of their personal data to another system.

Requests regarding these rights can be sent to: ville@into.coach

7. Data Security

The company ensures the secure processing of personal data through technical and organizational measures. Google Cloud and OP Kevytyrittäjä are GDPR-compliant service providers.

8. Changes to the Privacy Policy

The company reserves the right to update this privacy policy as needed, due to changes in operations or legislation. The updated policy will be available on the company’s website or upon request by email.