Register and data protection

This Privacy Policy is valid from 25.05.2018.



Core Factory Oy
VAT-number 2263785-4
Valimotie 13 A, 00380 Helsinki

Purpose of processing personal data

This register is set up to manage a potential customer and service relationship (article 6, lawfulness of processing, b and f)

Data content of the register

The content of the register consists of potential customer’s company’s and contact person’s name and the contact information such as email address, and/or phone number and the company’s address. If the connection leads to a customer relationship, information on the services ordered, delivered and billed by the customer is added to the register.

Regular sources of information

The source for information is usually generated through Core Factory Ltd own activities. This includes the customers themselves (eg business cards, emails or telephone contacts), or as a result of the search of potential customers (eg, public registers such as Google, Finder and Fonecta).

Storage and use of data in online services and local software

Core Factory’s online services and software use email address, name, and organization to identify the user. The data will not be used or disclosed for any other purpose. In some cases, users have the ability to see a list of other users, email addresses, and organizations in the same user organization. In addition, Core Factory service administrators have access to this information. By using the Services, you agree to the Terms.

Ordinary deliveries of information

Core Factory Ltd may, if necessary, disclose your information to our Accounting Office for any accounting and billing related tasks.

Data transfer outside the EU or EEA

Core Factory Ltd does not transfer data outside the EU or EEA.

Principles of registry protection

Core Factory Ltd handles all material mainly electronically. Temporarily required manual material is kept in locked state. Electronic data is protected from outsiders by using a firewall-based security program, as well as strong passwords. Only one shareholder of the company may process the data.

Registered rights

You have the right to request Core Factory Ltd to access your personal data and to request the rectification or removal of such information or limitation of the processing or to oppose the processing and the right to transfer data from one system to another. In addition, you have the right to revoke consent at any time without prejudice to the lawfulness of the processing before withdrawal if the processing is based on Article 6 (1) (a) or Article 9 (2) (a). You also have the right to file a complaint with the supervisory authority. For instructions, please see (Article 13, 2b, c, d). You also have the right to be forgotten, so if you so wish, Core Factory Ltd will delete your information (Article 17). To use the above mentioned rights, please send email to We will take action immediately, or at the latest within one month as the regulation request.

Retention of personal data

The information may be kept for archiving purposes in the name of public interest (Article 89). This way the registered who wishes to be forgotten won’t accidentally be re-connected if the registrant’s contact appears in some other context.