- PURPOSE AND CONTENT
This privacy policy informs you (“you”) about the nature, scope and purposes of the collection and use of your personal data by 3TS Capital Partners Oy (“3TS”, “we”, “its” or “us”) in connection with your visit to and use of our website.
Our processing of personal data is conducted in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”) that aims to protect the privacy of individuals in connection with the processing of personal data.
We are the data controller of your data which means that we are responsible for how your data is collected and used. We respect your privacy and will protect any of your personal data that we process. All personal data are processed in accordance with applicable data protection laws.
The purpose of this privacy policy is to provide information regarding how we collect, process and share personal data about you in the context of your utilization of our website, during and after your relationship with us, in accordance with the articles 13 and 14 of the GDPR. This privacy policy also provides information about your rights in relation to the processing of your personal data (articles 15 to 21 of the GDPR).
2. TYPES OF PERSONAL DATA WE COLLECT
We process the following types of personal data about the individuals using our website:
- Date and time you view a page on our website, as well as data about your interaction with the website (number of visits and length of stay, as well as the language you choose);
- Data on your terminal device (e.g., screen resolution, internet service provider and operating system);
- IP address and IP location;
- Referrer URL;
- Name and version of your web browser;
- Session ID;
- Log files (with the help of necessary cookies).
We process the following types of personal data about individuals receiving our newsletter:
- Identification data – such as name, surname;
- Contact details – such as e-mail address.
The provision of this personal data by you is voluntary and is a prerequisite for the processing of your data.
3. HOW WE COLLECT PERSONAL DATA
We collect personal data directly from you when you visit our website or fill in the contact form.
4. HOW WE USE THE PERSONAL DATA AND THE BASIS ON WHICH WE USE IT
Purpose of processing
We process personal data about the individuals using our website for the following purposes:
- providing the services requested (e.g., newsletters, business events);
- dealing with communications received from the concerned individual via email, and responding to his/her queries, complaints;
- to be able to detect, prevent and investigate attacks on our website and online services;
- administering our website and for internal operational purposes to make user experience more efficient (including troubleshooting) and to analyze how the systems are used.
We process personal data about individuals receiving our newsletter for the following purposes:
- sending you our newsletters, invitations to our events, seasonal greetings, publications and other information material on market developments.
Legal grounds
As far as the data of your visit to our website, the dispatch of our newsletter and online services is concerned, we base the justification of the processing on our legitimate interest according to Art 6 para 1 (f) GDPR, which is to offer our website securely and to protect it from attacks as well as to provide our newsletter to interested parties.
Retention period
We generally store your website visit data for a period of one year. Personal data regarding newsletter recipients is stored until the respective individual informs us that they do not want to receive our newsletters anymore.
5. WHO WE SHARE YOUR PERSONAL DATA WITH
We may have to share the personal data of you with third parties, including third-party service providers, other entities in the group or other third parties. Whenever we share your personal data to a third-party, we implement appropriate measures to ensure the personal data is used in a manner consistent with this privacy policy and that the security and confidentiality of the personal data is maintained.
Transfers to third-party service providers
We will share your personal data with third-party service providers where required by law, where it is necessary to administer the relationship with you or where we have another legitimate interest in doing so.
Personal data will be shared with the following third-party service providers:
- Mailchimp – The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA https://mailchimp.com/legal/privacy/ which provide services to us in order to facilitate the dispatch of newsletters;
- Outlook (Office)365 – Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA https://privacy.microsoft.com/en-us which provide document processing services to us;
- Persons who are bound by professional confidentiality obligations (e.g., lawyers, auditors).
When sharing your personal data, we will ensure that the third-party service providers provide sufficient guarantees regarding the confidentiality and security of your data. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
When appointing a third-party data processor, we will enter into a written agreement with that processor which specifies (i) the subject matter and duration of the processing; (ii) the nature and purpose of the processing; (iii) the type of personal data and categories of data subjects and (iv) the obligations and rights of us as data controller. The agreement must also impose certain obligations prescribed by the GDPR.
Transfers to other group companies
Personal data will only be shared across our group to the extent required and where lawful to do so. Staff members of the group companies may access and otherwise process your personal data in connection with their job responsibilities. We take appropriate steps to ensure that such personnel are bound to duties of confidentiality with respect to your personal data.
Transfers to other third parties
We may share your personal data with other third parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal data with a regulator, public authorities or to otherwise comply with the law.
Transferring personal data outside the EU
We may transfer your personal data outside the EU, when the third-party service providers, the other entities in the group or the other third parties are located outside the EU. If we do so, you can expect a similar degree of protection in respect of your personal data; either that the relevant country has been deemed by the European Commission to have adequate personal data protection procedures in place, or in situations where the country is not deemed adequate by the European Commission, that we have taken reasonable measures to ensure that your personal data is treated by those third parties in a way that is consistent with and which respects the GDPR and local laws on data protection.
6. RIGHTS AND REMEDIES
According to the GDPR, you benefit from certain rights which include (but are not limited to):
- Right of access (Article 15): you have the right to obtain confirmation as to whether personal data concerning you are being processed, and, where that is the case, access to the personal data by obtaining a copy of the personal data that is being processed.
- Right to rectification (Article 16): you have the right to obtain without undue delay the rectification of inaccurate personal data. Also, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- Right to erasure / ‘right to be forgotten’ (Article 17): you have the right to obtain the erasure of personal data concerning you without undue delay.
- Right to request the restriction of processing (Article 20): you have the right to request the restriction of processing or your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
- Right to data portability (Article 20): you have the right to receive your personal data you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
- Right to object (Article 21): you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.
- Right to withdraw your consent to processing of your personal data at any time (Article 7): if you have given your consent to processing of your personal data for an explicit purpose you may always withdraw your consent. If you want to withdraw your consent, you may contact us through the contact information below.
- Right to lodge a complaint with the supervisory authority (Article 77): if you think that your personal data is processed wrongly, you are entitled to lodge a complaint with the Finnish regulator for the processing of personal data (Office of the Data Protection Ombudsman).
Requests related to such rights or any other rights you may have under GDPR should be sent via email to info@3tscapital.com or traditional mail to 3TS Capital Partners Oy, Salomonkatu 17A 6d, 00100 Helsinki, Finland.
7.COOKIES
Navigating on the site https://3tscapital.com/ may result in the installation of cookies on the user’s computer. These are small files that a website saves on the user’s computer or mobile device when they visit the site. It enables the website to remember the user actions and preferences (such as login, language, font size and other display preferences) over a period of time, so the users do not have to keep re-entering them whenever they come back to the site or browse from one page to another.
We use session cookies to keep information about the user’s navigation on our website for different purposes, namely, to facilitate subsequent navigation on the website and to allow various visitor figures to be compiled. Some cookies are essential to deliver a better experience on our website and to help us understand how people use its website.
Cookies present on the site are controlled by the website and are accessed only by the website owner or by people acting on its behalf. Additionally, cookies will not be used for any purpose other than stated herein.
Users can control and/or delete cookies as they wish. They can delete all cookies that are already on their computer and they can set most browsers to prevent them from being placed. If users do this, however, they may have to manually adjust some preferences every time they visit a site and some services and functionalities may not work.
8. SECURITY MEASURES
We employ appropriate technical and organizational security measures to protect your personal data against loss, alteration, or unlawful destruction and to guard against access by unauthorized persons.
All our employees/partners/external contractors who have access to your data in the course of their activities are bound by strict professional confidentiality obligations. They access only the data they need to perform their duties and are regularly made aware of, or trained in, the security rules applying to your data.
We will notify the Finnish regulator for the processing of personal data (Office of the Data Protection Ombudsman) in case of breach of personal data no later than 72 hours after detecting the breach.
Pursuant to the provisions of the GDPR, you will be notified of a personal data breach, without undue delay, only when the personal data breach is likely to result in a high risk to their rights and freedoms.
9. CONTACT INFORMATION
We are located at Salomonkatu 17A 6d, 00100 Helsinki, Finland, and are the data controller for the processing of your personal data. In our capacity as data controller, we are responsible for ensuring that the personal data is being processed in a correct manner and in accordance with applicable legislation.
If you would like further information about your data protection rights and how we process your personal data please contact fell free to send an email at info@3tscapital.com.
10. REVISIONS TO THE POLICY
We may decide, at our own discretion, to change this privacy policy from time to time by updating this page.
We encourage you to review this page periodically to remain informed about your rights and how we are processing your personal data.
This privacy policy was last updated on 20 June 2024.