Data protection and cookie policy
At Globuddys, we take your privacy seriously. We comply with data protection legislation and good data protection practices. This Privacy Policy describes the key principles and practices we follow to ensure that your privacy is respected when you use our services.
This Privacy Policy explains how we process the personal information we collect when you join our waiting list (for example, by email or as an interested provider).
A statement on the processing of personal data in accordance with the EU General Data Protection Regulation (679/2016).
Controller
Globuddys Oy
Business ID: 3454466-3
Contact for data protection matters
info@globuddys.com
In all matters relating to the processing of personal data and in situations where the data subject wishes to exercise his or her rights, he or she should contact the controller in writing by sending an e-mail to the Customer Service Department at info@globuddys.com.
Name of the personal data file
Globuddys OY (hereinafter referred to as Globuddys) user and customer register.
Basis and purpose of the processing of personal data
The legal basis for the processing of personal data is:
The contract between the data subject and the controller
The legitimate interest of the controller based on the customer relationship between the data subject and Globuddys.
The purposes of processing personal data include the maintenance, communication and management of customer relationships and partnerships, as well as marketing.
Regular data sources
The personal data processed are usually obtained from the following sources:
from the data subject himself/herself, including through the form on the website and the waiting list, e-mail, telephone, contracts, customer meetings, information transmitted to the website, the use of our services and other situations in which the data subject provides his/her data.
Personal data may be collected and updated from the registers of Globuddys and its affiliated companies, the commercial register, the civil register, credit registers and other similar public or private registers and data sources providing information services, as well as from Globuddys’ partners.
Personal Data Processed
Globuddys collects personal data from data subjects only to the extent that it is relevant and necessary for the purposes of use described in this Privacy Policy.
The following information about data subjects is processed
E-mail address
For interested service providers, in addition: company name, name, telephone number, e-mail address, title
Other information
We may also process other information that you voluntarily provide, such as:
Information you provide when submitting reviews, comments or responding to surveys, marketing consents and opt-outs, and information you provide by telephone or email or in chat correspondence with us, including call recordings of your calls with our customer service team.
In addition to the user data collected from the data subject and the customer organisation, we process certain personal data that third party service providers provide about you. For example, for business customers, we may process information about the company’s contact person to enable communication and marketing with the company and to manage the customer relationship. Such information is primarily obtained from public sources, such as local business registers, companies providing such information services, or directly from the companies themselves.
Transfers of personal data to third countries
Personal data will not, in principle, be transferred outside the EU and the European Economic Area. However, if this is done for a specific reason, the transfer will be carried out in such a way as to ensure an adequate level of data protection.
Protection of personal data
Globuddys processes personal data in a manner designed to ensure appropriate security of personal data, including protection against unauthorised processing and accidental loss, destruction or damage.
Globuddys uses appropriate technical and organisational safeguards to ensure this objective, including the use of firewalls, encryption techniques and secure equipment rooms, appropriate access control, careful management of user IDs for information systems and training of staff involved in the processing of personal data.
All staff handling personal data are contractually bound by a duty of confidentiality in relation to the processing of personal data of data subjects.
Data retention period
Globuddys will not retain your personal data for longer than is permitted by law and necessary to provide the service or essential elements of the service. The retention period depends on the nature of the data and the purposes of the processing. The maximum period may therefore vary depending on the purpose of use.
We regularly review the retention period of personal data to ensure that it is kept only for the necessary period.
Profiling
Personal data will not be used for profiling or other automated decision-making.
Rights of the data subject
Right of access to personal data
The data subject has the right to obtain confirmation as to whether personal data concerning him or her are being processed and, if so, to obtain a copy of his or her personal data.
Right to rectification
The data subject has the right to request that inaccurate or incorrect personal data concerning him or her be rectified. The data subject also has the right to have incomplete personal data completed by providing the necessary additional information.
Right to erasure
The data subject has the right to request the erasure of personal data concerning him or her if:
a. the personal data are no longer necessary for the purposes for which they were collected;
b. the personal data have been unlawfully processed.
Right to restriction of processing
The data subject has the right to restrict the processing of personal data concerning him or her where:
a. the data subject contests the accuracy of his or her personal data;
b. the processing is unlawful and the data subject opposes the erasure of his or her personal data and requests instead the restriction of their use; or
c. the controller no longer needs the personal data for the purposes for which they were originally processed, but the data subject needs them for the establishment, exercise or defence of legal claims.
Right to object
The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her.
Globuddys shall no longer process the data subject’s personal data unless Globuddys can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, including profiling where it relates to such direct marketing.
Right not to be subject to automated decisions
The data subject has the right not to be subject to a decision based solely on automated processing, such as profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
The above shall not apply if the decision is necessary for the conclusion or performance of a contract between the data subject and the controller or is based on the data subject’s explicit consent.
Right to data portability
The data subject has the right to receive personal data concerning him or her and provided by him or her in a structured, commonly used and machine-readable format and the right to transmit such data to another controller.
Right to lodge a complaint with a supervisory authority
The national supervisory authority for personal data is the Office of the Data Protection, attached to the Ministry of Justice. You have the right to refer your case to the supervisory authority if you consider that the processing of personal data concerning you infringes the relevant legislation.
Changes to the privacy policy
Globuddys is constantly developing its activities and may change its privacy policy as a result.
If the changes involve new purposes for the processing of personal data or otherwise change significantly, Globuddys will inform you in advance and, if necessary, request your consent.
Cookie Policy
We use cookies on our website to improve your user experience and to collect information about your use of the site.
What are cookies?
Cookies are small text files that are stored on your device when you visit a website. They help us to recognise your browser and improve our service.
What do we use cookies for?
For the technical operation of the website
For the operation of the waiting list form (e.g. temporary storage of form data)
For website analytics (e.g. Google Analytics)
Third party cookies
Our site may use cookies from third parties such as analytics and marketing partners (e.g. Google, Meta).
Cookies management
You can control the use of cookies in your browser settings and delete stored cookies at any time. You can also block the use of cookies altogether.
By using our website, you agree to the use of cookies as described above. You can change your consent at any time via the cookie notice.
Globuddys Oy 