Last update: March 10, 2022
With this Privacy Notice we provide you information on why and how we process your personal data in the course of our business operations. We process your personal data for the following purposes:
NerdCloud Ltd (FI-32648178) acts as a controller for all personal data referred to in this Privacy Notice. We are located at PL 178, 00101 Helsinki, Finland.
We also act as a processor for the personal data that our customers disclose to us when they use our Ottia service. Our customers are controllers for all such personal data, and they shall inform their data subjects separately about the ways with which their personal data is processed.
When we process personal data on behalf of our customers, we comply with the provisions of the Data Processing Agreement (DPA) concluded between us. You can find more information about the DPA from Section 7 of our Service Agreement.
We process your personal data for the below mentioned purposes. Beneath each purpose for processing, you will also find information on what personal data we process and what are the legal basis for our processing activities.
We process personal data of our customers for the purposes of customer relationships. For these purposes we process contact details and other data disclosed to us. The legal basis for processing is the performance of our contractual obligations.
We process the personal data of all our customers to develop our services and better fulfill customer needs. For these purposes we process contact details and data related to the use of Ottia service. The legal basis for processing is our legitimate interests, according to which we develop our services and better fulfill customer needs. NB! You have a right to object data processing for these purposes (see section concerning your rights).
We process the personal data of our customers and leads for the purposes of marketing our services. For these purposes we process contact details and other data disclosed to us. The legal basis for processing is our legitimate interests, according to which we execute, establish and develop our customer relationships and business operations. NB! You have a right to object data processing for these purposes (see section concerning your rights).
We process the personal data of our business partners for the purposes of business partner relationships. For these purposes we process contact details and other data disclosed to us. The legal basis for processing is the performance of our contractual obligations.
We process the personal data of job applicants for recruiting purposes. For these purposes we process contact details and other data disclosed to us, such as CVs, relevant job history and expertise. The legal basis for processing is our legitimate interests, according to which we govern our recruiting practices. NB! You have a right to object data processing for these purposes (see section concerning your rights).
We process the personal data of people who contact us for communications purposes. For these purposes we process contact details and other data disclosed to us. The legal basis for processing is our legitimate interests, according to which we govern our communications. NB! You have a right to object data processing for these purposes (see section concerning your rights).
We collect personal data from data subjects themselves.
We may transfer your personal data to third parties, as it is a normal course of doing business in a digitalized world. When personal data is transferred to third parties, we ensure that we conclude adequate personal data processing agreements and safeguards in relation to the data transfers.
Your personal data may be transferred to data storage service providers and communications services providers.
We may transfer personal data outside the EU and the EEA. When doing so, we ensure adequate safeguards for the data transfer, such as standard contractual clauses and Privacy Shield arrangements.
The retention period of your personal data depends on the purposes for which we process your personal data. We inspect the necessity of the personal data stored regularly and keep records of the inspections.
You may have the right to use the below listed data protection rights. The contacts concerning the rights shall be submitted to the controller's contact person. Your rights can be put into action only when you have been satisfactorily identified.
You may also have a right to lodge a complaint with Data Protection Ombudsman (Tietosuojavaltuutettu), if you think that the processing of your personal data infringes data protection laws.
You can make all requests and inquiries related to your data and this Privacy Notice to our contact person Samuli Argillander, CEO, samuli@ottia.com.
We have a unilateral right to modify this Privacy Notice. The modifications take effect immediately when we post the up to date version of our Privacy Notice to our website.