Privacy policy

25.5.2025

What is it about?

This is a statement on the processing of personal data in accordance with the EU General Data Protection Regulation (679/2016). In this Privacy Statement we explain how Trivore collects, processes and stores personal data.

We store all our data in Finland, and always handle personal data with the utmost care.

Controller

Trivore Corp.

Business ID: 1640719-8

Address: Helsinginkatu 15, 20500 Turku

Contacts on data protection issues

Data Protection Officer:
Kari Mattsson

puh. +358 50 69000

email: gdpr@trivore.fi

You can contact our Data Protection Officer for any questions relating to your personal data and the exercise of your rights.

Name of the personal register

Trivore Oy’s Customer Register

On what basis and for what purposes we collect and process personal data

• The legal basis for the personal data we collect and process is one or more of the following:
• Consent of the data subject to the processing of personal data
• Contractual relationship between the data subject and Trivore
• Legitimate interest in developing business and customer relationships
• Trivore’s performance of its legal obligations as controller

The information will be processed in relation to:

• Selling, marketing and delivering services and products
• Developing products and services
• For billing
• Customer relationship management and development
• Managing and developing relationships with partners and stakeholders
• Managing and developing media relations
• Job search processes

Where we collect the data

As a rule, the personal data processed are obtained from the data subject himself/herself, either through cookies and analytics tools or through direct contacts.

Personal data processed

We only collect personal information that is relevant and necessary for the purposes described in this Privacy Policy.

We collect and process the following information about data subjects:

Customers and partners: we keep the information about our customers and partners that is necessary to provide our services. This information includes, but is not limited to, name, company, title, contact information, customer or partner requests, and communications with Trivore. This information may be used to communicate between the customer or partner and Trivore, to market Trivore’s services, and to better target the services.

Job applicants: the application form filled in by the applicant and any attachments, such as a CV, are collected from job applicants on the application portal. We keep the application form and its attachments for the duration of the recruitment process, and for a maximum of 6 months after the application process, unless the applicant gives consent on the application form to keep their data for a longer period. We may also keep other information relevant to the recruitment process, such as interview notes, for the same period. The application and CV can only be processed by us by the person(s) responsible for recruitment, the main user of the recruitment portal and the Managing Director.

Media Representatives: Trivore may collect and retain the following information about media representatives: name, media, contact information, and any news, articles, social media posts, podcasts or blog posts related to Trivore.

Contact Form

Messages and contact information received via the contact form on the website will be processed and stored in the ways listed above, depending on the nature of the contact.

Analytics and cookies used on the website

We use the Matomo analytics tool on our website. The data collected by the analytics is stored in Finland.

We collect information about the number of visitors to our website, where from in the world they have visited, which pages they have visited and how long they have stayed on our website. Our analytics tool identifies visitors by IP address.

Opt-out complete; your visits to this website will not be recorded by the Web Analytics tool. Note that if you clear your cookies, delete the opt-out cookie, or if you change computers or Web browsers, you will need to perform the opt-out procedure again.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

The tracking opt-out feature requires cookies to be enabled.

Disclosure of personal data

We will never disclose personal data to third parties, except as required by law. This means that, as an exception, data may be disclosed, for example, to public authorities as required by law.

Protection of personal data

We process personal data in a way that seeks to ensure that personal data is processed in a way that

appropriate security, including protection against unauthorised handling and accidental loss, destruction or damage.

We use appropriate technical and organisational safeguards to ensure this objective, including the use of firewalls, encryption techniques and secure equipment rooms, appropriate access control, careful management of user IDs for information systems and training of staff involved in the processing of personal data.

All employees who process personal data are bound by the Employment Contracts Act (55/2001) and the supplementary confidentiality agreements on matters relating to the processing of data subjects’ personal data.

Data retention period

We process personal data for the duration of the contractual relationship or for another specified period. At the end of this period, we will delete or anonymise the data within one year in accordance with our erasure procedures.

Trivore complies with its obligation to process some personal data in the register for longer than stated above in order to comply with legal or regulatory requirements.

Profiling

The processing of personal data includes profiling. Profiling is the automated processing of personal data, which uses the data to evaluate certain personal aspects relating to the data subject. Data subjects are profiled in order to better target direct marketing and other communications to them according to their interests.

Rights of the data subject

If a data subject wishes to exercise his or her rights, he or she should submit requests by e-mail to gdpr@trivore.fi.

Right of access to personal data: the data subject has the right to obtain confirmation as to whether personal data concerning him or her are being processed and, if so, to obtain a copy of his or her personal data.

Right to rectification: the data subject has the right to request that inaccurate or incorrect personal data concerning him or her be rectified. The data subject also has the right to have incomplete personal data completed by providing the necessary additional information.

Right to erasure: The data subject has the right to request the erasure of personal data concerning him or her if:

1. the personal data are no longer needed for the purposes for which they were collected;
2. the data subject withdraws the consent on which the processing of personal data was based and there is no other lawful basis for the processing; or
3. personal data have been unlawfully processed.

Right to restriction of processing: the data subject has the right to restrict the processing of personal data concerning him or her if.

1. the data subject contests the accuracy of his or her personal data;
2. the processing is unlawful and the data subject objects to the erasure of his or her personal data and requests instead that its use be restricted; or
3. the controller no longer needs the personal data for the purposes for which they were originally processed, but the data subject needs them for the establishment, exercise or defence of legal claims.

Right not to be subject to automated decisions: the data subject has the right not to be subject to a decision based solely on automated processing, such as profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. The above shall not apply if the decision is necessary for the conclusion or performance of a contract between the data subject and the controller or is based on the data subject’s explicit consent.

Right to withdraw consent: the data subject has the right to withdraw his or her consent to processing at any time, without prejudice to the lawfulness of the processing carried out on the basis of that consent.

Right to data portability: the data subject has the right to receive personal data concerning him or her and provided by him or her in a structured, commonly used and machine-readable format and the right to transmit such data to another controller.

The right to lodge a complaint with a supervisory authority: The national supervisory authority for personal data matters is the Office of the Data Protection Ombudsman, attached to the Ministry of Justice. You have the right to refer your case to the supervisory authority if you consider that personal data concerning you are being processed in breach of the relevant legislation.

Changing the privacy policy

At Trivore, we are constantly improving our operations. As a result, we may need to change and update our privacy practices as necessary. Updates may also be based on matters beyond our control, such as changes in data protection legislation.

If we make significant changes to our privacy policy or if the changes include new purposes for processing personal data, we will inform data subjects in advance. If necessary, we will ask for new consent in connection with the changes.