Privacy policy

Registry keepers information:
Tickingbot Oy
Visiokatu 4, 33720 Tampere Finland
Business ID: 2757079-1

Person responsible of data protection:
Juho Kokkonen
Visiokatu 4, 33720 Tampere
security@tickingbot.fi

1 OUR PRINCIPLES FOR PROCESSING DATA

Tickingbot Oy respects your privacy and is committed to complying with EU General Data Protection Regulation (GDPR) and section 10 of the Finnish Personal Data Act (523/1999).

1.1 The following principles guide the processing of your personal data:

1.1.1 Personal data is confidential information

Your personal data is confidential. As a rule, your personal data is only processed by our employees.

1.1.2 Personal data is collected and used according to a plan

We avoid unnecessary collection, processing and storage of personal data.

1.1.3 We only process personal data for your best interests

The processing of personal data is always based on consent, contract, legal obligation, or legitimate interest. We process personal data only for the benefit of the individual and in accordance with these data protection principles.

1.1.4 Key purposes of processing personal data

We use personal data primarily for service provision, customer relationship management, invoicing, sales, recruitment, and the development of the aforementioned activities.

Customer data is processed only within the limits permitted by the EU General Data Protection Regulation (GDPR) and the Finnish Personal Data Act, in Tickingbot Oy’s own registers.

2 HOW DO WE USE YOUR PERSONAL DATA?

We only collect, store and process personal data for predetermined purposes.

2.1 The main purposes of use include the following:

2.1.1 Provision and delivery of services and customer relationship management

We process personal data for matters related to customer relationship management, such as providing and delivering services, invoicing and debt collection, handling complaints, customer support, and measuring customer satisfaction.

2.1.2 Fulfillment of legal obligations

Your data may also be collected and processed to fulfill legal obligations, such as for accounting and regulatory purposes.

2.1.3 Human Resources

We process data related to employees and job applicants primarily for human resources purposes, to fulfill employment contract obligations, comply with legal requirements related to employment, and to assess and select candidates for open positions.

3 WHAT DATA DO WE COLLECT AND FROM WHICH SOURCES?

We primarily collect personal data about you directly from you during interactions. We may also collect customer-related data from public sources or registers, such as LinkedIn or other social media channels.

We use the Visitor Analytics service to collect visitor data from our website in order to analyze and improve our site.

We mainly collect and process personal data of our customers (including potential customers), employees, and candidates for recruitment.

3.1 We collect the following types of data

3.1.1 Data obtained directly from our customers’ contact persons
  • Name of the customer’s employer company, First and last name of the contact person, Work address, Work email address, Phone number, Job title, Communications and customer relationship history
  • Classification data provided by the individuals themselves (e.g., interests)
  • Information entered via contact forms and chat
3.1.2 In connection with the use of our website, we may process personal data related to the custome
  • IP address or other identifier
  • Data collected through the use of our website
  • Data obtained from other sources, especially related to the use of social media platforms such as LinkedIn, Facebook, and Instagram
3.1.3 Regarding employees and job applicants, we primarily process data obtained directly from the individual and data generated during the employment relationship
  • Basic information about the employee or job applicant
  • The job applicant’s CV and application, as well as reference information received with with the applicant’s consent
  • Information necessary for salary payments
  • Information required for payroll
  • Information necessary to fulfill obligations and rights related to the employment relationship
  • Certain sensitive data about the employee (such as trade union membership and health information), but only to fulfill the employer’s legal obligations

With your consent, we may also collect and process other types of data.

4 ON WHAT GROUNDS DO WE PROCESS YOUR DATA?

We ensure that we always have a legal basis for processing your personal data. We may process data on several different grounds, but we always make sure that at least one legal basis defined by law is present.

We primarily process customer register data to fulfill and prepare contracts, and based on our legitimate interests, which include especially the provision and delivery of our services, customer management, handling complaints and customer feedback, and offering maintenance and further development services.

We may also process your data based on your consent. If we process your data solely on the basis of consent, you may withdraw your consent at any time.

We may also process your data to fulfill legal obligations.

5 WHO PROCESSES YOUR DATA AND IS IT DISCLOSED TO THIRD PARTIES?

Your personal data is processed by our company’s employees who need the data to perform their duties, such as customer service, sales, marketing, and recruitment. The data is handled confidentially and only to the extent necessary.

Data is not disclosed to third parties without a legal basis, unless it is necessary for service delivery, to fulfill legal obligations, or with the data subject’s consent.

We may also disclose your data if we are involved in a corporate or business transaction.

6 IS YOUR DATA TRANSFERRED OUTSIDE THE EU?

In certain situations, your data may be transferred outside the European Union. Some of the cloud services we use are located outside the EU.

If data is transferred outside the EU, we ensure that the destination country has an adequate level of data protection as determined by the European Commission, the recipient is Privacy Shield certified (for recipients located in the United States), or the transfer is carried out using the European Commission’s standard contractual clauses. We always ensure that any potential data transfer is carried out on a lawful basis and with adequate safeguards.

Our company uses the HubSpot CRM system for customer data management, marketing, and maintaining customer relationships. The servers used by HubSpot to store personal data are located within the European Union.

7 HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected or to meet legal obligations. Retention periods may vary depending on the purpose for which the data was collected.

For example:

  • Data related to customer relationships is retained for as long as the relationship is active and for a reasonable period thereafter.
  • Data collected for marketing purposes is retained until the data subject withdraws their consent or requests deletion.
  • Data received during recruitment processes is retained for a maximum of 24 months.
  • Data required by law, such as personal data related to accounting, is retained for the period required by legislation.

When the retention of personal data is no longer necessary, the data is securely deleted or anonymized.

8 HOW DO WE PROTECT YOUR DATA?

Your data is primarily stored in electronic format on the servers of our service providers, which are protected in accordance with industry-standard practices.

The personal data we collect and process is confidential and is not disclosed to anyone other than those who need it for their work, or to our contractual partners such as subcontractors, on a confidential and limited basis.

Access to your personal data is restricted and protected by user-specific credentials, passwords, and access rights. Our premises are locked and secured.

9 IS PROVIDING YOUR DATA MANDATORY?

If you do not provide personal data or allow its processing, we may not be able to serve you or fully fulfill the purpose of our operations.

If you do not wish us to process your data in accordance with the principles outlined in this privacy notice, we kindly ask that you do not submit any personal data to us.

10 WHAT RIGHTS DO YOU HAVE?

10.1 Withdrawing consent

If we process your data based on your consent, you may withdraw your consent at any time by notifying us, for example by sending an email to: security@tickingbot.fi

10.2 Right of Access

You have the right to receive confirmation from us as to whether we are processing your personal data, and to know what personal data we are processing about you. You also have the right to receive additional information about the basis of the processing.

10.3 Right to Rectification

You have the right to request that we correct any inaccurate, outdated or otherwise incomplete personal data concerning you.​

10.4 Right to object to processing

If we process your personal data based on public interest or our legitimate interest, you have the right to object to the processing of your personal data, unless there is a compelling reason that overrides your rights, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Please note that this may limit or entirely prevent our ability to serve you.

10.5 Right to restrict processing

In certain situations, you have the right to request that we restrict the processing of your personal data.

10.6 Right to Data Portability

If we have processed your data based on your consent or for the performance of a contract, you have the right to receive the data you have provided to us in a commonly used electronic format so that it can be transferred to another service provider.

11 HOW CAN YOU EXERCISE YOUR RIGHTS?

You can exercise the rights described above by contacting us, for example by sending an email to: security@tickingbot.fi

Please include your name, address, and phone number in your message. We may later request a copy of your passport, driver’s license, or other identification document to verify your identity.

12 UPDATES TO THE PRIVACY POLICY

We may update this privacy policy if our operations or data protection principles change. Updates may also become necessary due to changes in legislation. The changes will take effect once we have published the updated privacy policy.

For this reason, we kindly ask you to review the contents of this privacy policy at regular intervals.

13 WHO SHOULD I CONTACT IN MATTERS RELATED TO DATA PROTECTION?

Contact information:

Tickingbot Oy
Visiokatu 4
FI-33720 TAMPERE
Business ID: 2757079-1

Juho Kokkonen
security@tickingbot.fi

This privacy policy was last updated on November 4, 2025.

Tickingbot Oy, Visiokatu 4, 33720 Tampereinfo@tickingbot.fiLinkedIn

Tietosuojakäytäntö