Updated 4.3.2026

Privacy Policy

  • In this privacy policy, we explain what personal data Idesco Oy (“hereinafter the company, or we”) processes and holds. We ensure that your personal data is processed in accordance with the EU General Data Protection Regulation and other applicable data protection legislation. We also describe your rights in relation to us and how you can ensure those rights are upheld.

    This privacy policy is intended for:

    • Job applicants.
    • Our customers, i.e. contact persons of corporate customers and private entrepreneurs.
    • Users of our website and newsletter subscribers.
    • Suppliers.

  • Idesco is the controller for the processing of the personal data collected when you visit Idesco’s website, fill in a form on Idesco’s website, or contact us via other channels (e.g. phone, e-mail) or meet us in person.

    If you have applied for a job with us through a recruitment agency, the recruitment agency may also be responsible for the personal data it processes about you.

    Controller:

    Idesco Oy
    VAT number: FI20244977
    Elektroniikkatie 4, 90590 Oulu, Finland
    Tel: +358 20 743 4175

    If you have questions about how we process your data, please contact Anu-Leena Arola; anu-leena.arola@idesco.fi.

  • Job applicants:
    • Name, phone number, email address, address
    • CV, references, education details, interview notes
    Corporate customers:
    • Name, address, phone number, email address
    • Purchase history, meeting notes
    • Technical data (IP address, browser, operating system, during chat)
    Website users and newsletter subscribers:
    • Email address, name, company/organization, phone number, IP address, country
    • Browsing history, information that is gathered by you reading or clicking our newsletters, interests
    • Technical data (IP address, browser, operating system, during chat)
    • Information provided by the user through forms or other means of contact
    Suppliers:
    • Name, address, phone number, email address.
    • Purchase history, meeting notes.
    • Technical data (IP address, browser, operating system, during chat).
    • Conducting the recruitment process (legitimate interest, consent).
    • Customer relationship management, order processing, customer service (contract, legitimate interest).
    • Marketing communications and newsletters (consent, legitimate interest).
    • Website development and analytics (consent).
    • Fulfilling legal obligations.
    • To fulfil the agreement and administer our contractual obligations towards the Supplier.
    • Job applicants: Data is stored for the duration of the recruitment process and possibly longer with consent or for statutory reasons.
    • Business customers: Data is retained for the length of the customer relationship, and longer if required by law or legal claims.
    • Website users and newsletter subscribers: We retain your personal data as long as it is needed to send newsletters, or as long as necessary for the purpose for which your personal data was collected.
    • Supplier contact data are stored for the duration of the supplier relationship. If your employment with the Supplier ends or you cease to be the Supplier’s contact, we remove your data from our contact register, subject to legal retention needs.
    • Notwithstanding the above, we may also retain your personal data for a longer period if it is necessary to fulfill legal obligations, maintain, or defend legal claims.

  • Supplier and customer contact personal data will be processed only in the EU.

    On our website we may use vendors located outside EU/EEA who have committed to GDPR regulation. We recommend you to read vendor specific privacy policies:

    • Information may be shared with external service providers (such as logistics companies, carriers, recruitment agencies, marketing platforms), authorities, or in connection with a business acquisition.
    • Legal advisors, other suppliers, or customers as needed to fulfil the supplier relationship.
    • For the website and newsletter, some services (such as Active Campaign, Google, Tawk.to, Cloudflare, LinkedIn, Facebook) may be located outside the EU/EEA area, but they are GDPR-compliant.
    • For third-party cookies, users are instructed to read the privacy policies of the respective service providers.

  • Cookies used on our website come from either our site’s platform, WordPress, or other service vendors; Active Campaign (newsletters), Tawk (online chat), Cloudflare (site loading performance), Google (site traffic monitoring, analysing and online advertising) and the social media channels (LinkedIn, Facebook). We use cookies on our website for the following purposes:

    • Allow you to browse our website and use its features. This group of cookies are compulsory, e.g. cookies improving browser performance by shortening page load times, cookies following site traffic or cookies enabling chat on our site.
    • Record what content you browse on our website. These cookies help us improve our site’s content and newsletters.
    • Cookies related to personalized marketing. These cookies enable re-marketing on other websites, and / or they are social media cookies (Facebook and LinkedIn). They help us define what kind of advertising you see from us in social media or other websites.

    Please note our website lets you select your consent level for each individual cookie group, or any or all of them together. Please note required cookies are needed for using our website.

    Read more about cookies: https://idesco.fi/cookies/

  • You have certain statutory rights that you can exercise in relation to the Company. A summary of these rights follows below. For complete information about your rights, please see the General Data Protection Regulation, Chapters 3–5.

     

    Right to access/extract from register.

    You have the right to get answers about whether the Company processes personal data about you. If this is the case, you have the right to information about, among other things, what personal data is being processed, the purpose, which external recipients receive your personal data and how long we save your personal data for.

     

    Right to data portability.

    You have the right to request a copy of the personal data, which you have provided to the Company, in a structured, commonly used and machine-readable format. You also have the right to request that the Company transfer these personal data to another controller. The right to data portability applies to personal data, which is processed in an automated matter, and which is based on your consent or on an agreement you are party to.

     

    Rectification of inaccurate data.

    You have the right to request that Idesco rectify inaccurate or incomplete information about you.

     

    Erasure of certain data.

    You have the right to request that Idesco erase your personal data under certain circumstances, e.g. if the personal data are no longer necessary for the purpose that we collected the personal data for.

     

    Right to object to Idesco’s processing of personal data.

    You have the right to object to the Company’s processing of your personal data. The right to object applies, inter alia, if the processing is based on a balancing of interests, unless Idesco can demonstrate (i) imperative legitimate grounds for the processing which override your interests, rights and freedoms or (ii) if the processing occurs for the establishment, exercise or defence of legal claims.

     

    Right to object to direct marketing.

    You have the right to object at any time to Idesco processing your personal data for direct marketing. If you object to such processing, Idesco without unnecessary delay shall cease all direct marketing to you.

     

    Right to restriction of processing your personal data.

    You have the right to request a restriction of Idesco’s processing of your personal data in certain cases. For example, if you have contested the accuracy of your personal data, you can request a restriction of the processing during a period of time to enable Idesco to verify the accuracy of the personal data.

     

    Complaints.

    If you have a complaint about the Idesco’s processing of your personal data, you have the right to lodge such a complaint with the Data Protection Authority.

    If you want to make a request for an extract from the register, data portability, rectification, erasure, objection or restriction, please contact us at info@idesco.fi.

  • All requests and questions related to data protection can be addressed to info@idesco.fi.

  • Idesco reserves the right to make changes to this privacy policy. The latest version of this policy is on this website.