Privacy Policy and Data Protection Statement

This is the Privacy Policy and Data Protection Statement of Dazzle Oy in accordance with the Finnish Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Created on 10 April 2018. Last updated on 4 March 2026.

1. Data Controller
   Dazzle Oy, Vanha Talvitie 11 A, FI-00580 Helsinki
2. Contact Person Responsible for the Register
   Kaisa Tenhola, kaisa.tenhola@dazzle.fi, +358 45 677 9884
3. Name of the Register
   Dazzle Oy Marketing Register
4. Purpose of Processing Personal Data
   Personal data is processed for electronic direct marketing and advertising directed at businesses.
5. Contents of the Register
   The register may contain the following information: Name, Job title/position, Company/organization, Contact details (telephone number, email address, postal address), Website addresses.
6. Sources of Information
   Information stored in the register is obtained from customers through, among other things: messages submitted via website forms, email correspondence, telephone conversations, social media services, agreements and contracts, customer meetings, other situations in which customers voluntarily provide their information.
7. Regular Disclosure of Data and Transfers Outside the EU or EEA
   Personal data is not regularly disclosed to third parties.
8. Principles of Data Protection
   Due care is exercised in the processing of personal data, and information processed through information systems is protected appropriately. When register data is stored on internet servers, both physical and digital security measures are implemented and maintained appropriately. The data controller ensures that stored data, server access rights, and other information critical to the security of personal data are handled confidentially and only by employees whose duties require access to such information.
9. Right of Access and Right to Request Rectification
   Every individual whose data is stored in the register has the right to access their personal data and to request the correction of inaccurate information or the completion of incomplete information. Requests for access or rectification must be submitted in writing to the data controller. If necessary, the data controller may require the requester to verify their identity. The data controller will respond within the time limits prescribed by the EU General Data Protection Regulation (generally within one month).
10. Other Rights Related to the Processing of Personal Data
    Individuals whose data is stored in the register have the right to request the deletion of their personal data from the register (“the right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation, including the right to restrict the processing of personal data in certain circumstances. Requests must be submitted in writing to the data controller. If necessary, the data controller may require the requester to verify their identity. The data controller will respond within the time limits prescribed by the EU General Data Protection Regulation (generally within one month).