Privacy policy

Collection of information

Sarake Oy collects information about the user that is relevant to the purpose of processing personal information, as described in the privacy policy.

The information is collected using the methods described in the privacy policy to databases that are protected by firewalls, passwords and other technical means.

Disclosure of information and its protection

The information in the registers is internal to Sarake Oy and is not disclosed to third parties.

Access to the systems containing the registers and the customer information stored in them is limited to those employees who have the right to process the said customer information for the purposes of their work. Each user has a user ID and a password to the systems. The information is collected to databases that are protected by firewalls, passwords and other technical means. The databases and their backups are located in locked premises, and the information can only be accessed by those employees who have the right to access it for the purposes of their work. All information stored in the systems is encrypted using cryptographic and independent methods that prevent its translation into plain language, combination, interpretation and analysis without proper authorisation.

The consumer has the right to check the information about themselves in the register by contacting the controller. At the request of the data subject, the personal information of the data subject shall be erased.

Privacy statement

Sarake Oy is committed to protecting the privacy of the users of its services in accordance with the EU’s General Data Protection Regulation (EU 2016/679), the Data Protection Act (1050/2018), the Act on Electronic Communications Services (917/2014) and other applicable legislation.

By using our services, the user accepts the terms of this privacy statement.

1. What kind of personal information is collected about me?

We collect information about the user that is necessary for the purpose of processing personal information, as described in the privacy policy.

2. From which sources is my personal information collected?

Personal information is primarily collected from the user themselves in the manner described in the privacy policy. The technologies described below also allow us to collect information about how the user uses our services.

3. For what purpose is my personal information collected?

We store the user’s personal information in our user, customer or marketing registers and process personal information only for the purposes specified in the privacy policy. We process personal information primarily for the management of the customer relationship, the implementation of our services, business development, marketing, segmentation and other similar purposes described in the privacy policy of each service.

4. Who processes my personal information, and where is my information disclosed?

Sarake Oy may process personal information in accordance with the laws and regulations in force at the time. We may partially outsource the processing of personal information to a third party, in which case we guarantee through contractual arrangements that the personal information will be processed in accordance with the Personal Data Act as well as otherwise appropriately. As a rule, we do not disclose or transfer information outside the EU or the EEA.

5. How is my personal information protected?

We use the necessary technical and organisational measures to protect personal information against unauthorised access, disclosure, destruction or other unauthorised processing.

6. Are cookies used on the sites, and what are they?

We may collect information about the user’s terminal device through cookies and other similar technologies, such as the local browser data repository. A cookie is a small text file that the browser stores on the user’s terminal device. Cookies often contain an anonymous, unique identifier that allows us to identify and count the browsers that visit our site. In addition, cookies allow us to collect information about how and when our services are used: for example, from which page the user has moved to the service, when and which of our web pages the user has browsed, what browser the user is using, what is the user’s display resolution and operating system and what the IP address and possible serial number of the user’s terminal device are. Cookies do not move online on their own; they are only stored on the user’s terminal device along with the site called by the user. Only the server that sent the cookie can later read and use the cookie. Cookies or other technologies do not damage the user’s terminal device or files, and cookies cannot be used to run programs or spread viruses. The user cannot be identified from cookies or other technologies alone, and our site cannot know the user’s email address, for example, unless the user themselves has provided it. Taking into account the privacy legislation and the service’s privacy policy, information obtained through cookies and other similar technologies may be connected to information received from the user in other contexts.

7. For what purpose are cookies used?

The purpose of the use of cookies and other similar technologies is to make it easier for the user to interact with our service (for example, by storing user settings such as the language selection) and analyse and further develop our services to better serve users. We may also use cookies and other similar technologies to statistically track the number of visitors to our services. In order to improve the usability of our sites, we may conduct short-term studies, in which we can also record the user’s mouse movements and clicks on a specific page.

8. Is it possible for some other party to collect information about my visits to the sarake.fi website or the services provided by Sarake?

Third parties refer to parties outside Sarake Oy, such as providers of measurement and tracking services. The sarake.fi website contains such measurement and tracking services. The services provided by Sarake do not include information collection functionalities of these so-called third parties.

9. What privacy terms apply when using mobile or tablet apps?

In addition to this privacy statement, our mobile or tablet applications made available to the user through, for example, the Apple App Store, Google Play or Microsoft Store are also subject to the terms of the respective service provider. We encourage our users to review each provider’s terms for each respective service.

10. Do the app I download or the terminal I use send information to Sarake?

Our mobile or tablet applications downloaded by the user collect usage data about the users in order to prevent, for example, system abuse. We collect information about the user’s terminal device as described in section 6 of this privacy statement.

11. How long will my information be stored?

The information is stored for as long as it is necessary for the provision of the service and the management of the customer relationship or for as long as we have a legal right or obligation to process and store the information.

12. What influencing options do I have?

Reviewing the information
The user has the right to inspect the personal information in our registers. At the user’s request, we will correct, delete or supplement the personal information that is inaccurate, unnecessary, incomplete or outdated for the purpose of processing. The user may update and/or review their personal information by contacting our customer service mentioned in the service’s privacy policy.

Blocking cookies and other technologies
The user has the option to prevent the use of cookies by changing their browser settings. Preventing the use of cookies and deleting cookies may affect the functioning of our services.

13. Can this privacy policy be changed?

We are constantly developing our services and reserve the right to amend this privacy policy by notifying you about it via our services. The amendments may also be based on changes in legislation. We recommend that you read the contents of the privacy policy on a regular basis.

14. Who can I contact?

Please first contact support@sarake.fi. The user may also send inquiries related to this privacy policy and any complaints related to the targeting of advertising to:

Sarake Oy
Tietosuoja
Hiomotie 6 B
00380 Helsinki, Finland

Registers

Privacy policy in accordance with the EU General Data Protection Regulation (GDPR, EU 2016/679).

Name of the register
Sarake Oy customer and marketing register

Controller
Sarake Oy
Business ID 2736285-3
Hiomotie 6 B
00380 Helsinki, Finland

Register manager
Tanja Räikkönen
support@sarake.fi

Purpose and legal basis of the register
The information in the register is used for customer relationship management, customer communications and service development. In addition, the information is used for business development, marketing, analysis, statistics and other similar uses.
The legal basis for the processing of personal information is the controller’s legitimate interest or the consent of the person entered in the register.

Information contained in the register
The person’s first and last name, company name, postal address, telephone number, email address, IP address of the customer’s computer, registration information (such as a user ID, nickname, password or any other unique identifier), information about the customer relationship (such as invoicing and payment information, product and order information, customer feedback, contacts requests and information about the use of the services, such as browsing and search information), any permits and consents, as well as any other information collected with the customer’s consent.

Information sources of the register
Personal information is mainly collected from the user themselves, for example, when the user registers as a user of the service or communicates with us. The information may also be obtained from third parties or collected using the technologies described in the privacy policy.

Privacy policy in accordance with the EU General Data Protection Regulation (GDPR, EU 2016/679).

Name of the register
Sarake job applicant register

Controller
Sarake Oy
Business ID 2736285-3
Hiomotie 6 B
00380 Helsinki, Finland

Register manager
Tanja Räikkönen
support@sarake.fi

Purpose and legal basis of the register
The purpose of the register is the implementation of recruitment, the processing of job applications, the assessment of the suitability of the job applicant, communications related to job search and recruitment as well as other similar purposes related to recruitment.
The legal basis for the processing of personal information is the controller’s legitimate interest or given consent.

Information contained in the register
The person’s first and last name, postal address, telephone number, email address, date of birth, personal identity code, educational information, work experience information, language skills, information related to personal and suitability assessments, information about the applied position and other information provided by the job applicant in the application, its attachments or otherwise.

Privacy policy in accordance with the EU General Data Protection Regulation (GDPR, EU 2016/679).

Name of the register
MySarake user register

Controller
Sarake Oy
Business ID 2736285-3
Hiomotie 6 B
00380 Helsinki, Finland

Register manager
Tuukka Taskinen
support@sarake.fi

Purpose and legal basis of the register
The purpose of the register is the maintenance of the user accounts of the OmaSarake service, the implementation of the service, the verification and monitoring of customer transactions, the development of customer service and business operations, marketing, analysis, statistics and other similar purposes.
The legal basis for the processing of personal information is the controller’s legitimate interest, fulfilment of purposes and obligations specified in the agreements or given consent.

Information contained in the register
The person’s first and last name, company name, postal address, telephone number, email address, IP address of the customer’s computer, registration information (such as a user ID, nickname, password or any other unique identifier), information about the customer relationship (such as invoicing and payment information, product and order information, customer feedback, contacts requests and information about the use of the services, such as browsing and search information), any permits and consents, as well as any other information collected with the customer’s consent.

Information sources of the register
Personal information is mainly collected from the user themselves or the organisation’s representative when the user registers as a user of the service or is registered as a user of the service. Information may also be collected from third parties by using the technologies described in the privacy policy.

Privacy policy in accordance with the EU General Data Protection Regulation (GDPR, EU 2016/679).

Name of the register
Sarake Ark user register

Controller
Sarake Oy
Business ID 2736285-3
Hiomotie 6 B
00380 Helsinki, Finland

Register manager
Tuukka Taskinen
support@sarake.fi

Purpose and legal basis of the register
The purpose of the register is the maintenance of the user accounts of the Sarake Ark service, the implementation of the service, the verification and monitoring of customer transactions, the development of customer service and business operations, marketing, analysis, statistics and other similar purposes.
The legal basis for the processing of personal information is the controller’s legitimate interest, fulfilment of purposes and obligations specified in the agreements or given consent.

Information contained in the register
The person’s first and last name, company name, postal address, telephone number, email address, IP address of the customer’s computer, registration information (such as a user ID, nickname, password or any other unique identifier), information about the customer relationship (such as invoicing and payment information, product and order information, customer feedback, contacts requests and information about the use of the services, such as browsing and search information), any permits and consents, as well as any other information collected with the customer’s consent.

Information sources of the register
Personal information is mainly collected from the user themselves or the organisation’s representative when the user registers as a user of the service or is registered as a user of the service. Information may also be collected from third parties by using the technologies described in the privacy policy.

Privacy policy in accordance with the EU General Data Protection Regulation (GDPR, EU 2016/679).

Name of the register
Sarake Doc user register

Controller
Sarake Oy
Business ID 2736285-3
Hiomotie 6 B
00380 Helsinki, Finland

Register manager
Tuukka Taskinen
support@sarake.fi

Purpose and legal basis of the register
The purpose of the register is the maintenance of the user accounts of the Sarake Doc service, the implementation of the service, the verification and monitoring of customer transactions, the development of customer service and business operations, marketing, analysis, statistics and other similar purposes.
The legal basis for the processing of personal information is the controller’s legitimate interest, fulfilment of purposes and obligations specified in the agreements or given consent.

Information contained in the register
The person’s first and last name, company name, postal address, telephone number, email address, IP address of the customer’s computer, registration information (such as a user ID, nickname, password or any other unique identifier), information about the customer relationship (such as invoicing and payment information, product and order information, customer feedback, contacts requests and information about the use of the services, such as browsing and search information), any permits and consents, as well as any other information collected with the customer’s consent.

Information sources of the register
Personal information is mainly collected from the user themselves or the organisation’s representative when the user registers as a user of the service or is registered as a user of the service. Information may also be collected from third parties by using the technologies described in the privacy policy.

Privacy policy in accordance with the EU General Data Protection Regulation (GDPR, EU 2016/679).

Name of the register
Sarake Ideabox user register

Controller
Sarake Oy
Business ID 2736285-3
Hiomotie 6 B
00380 Helsinki, Finland

Register manager
Tuukka Taskinen
support@sarake.fi

Purpose and legal basis of the register
The purpose of the register is the maintenance of the user accounts of the Sarake Ideabox service, the implementation of the service, the verification and monitoring of customer transactions, the development of customer service and business operations, marketing, analysis, statistics and other similar purposes.
The legal basis for the processing of personal information is the controller’s legitimate interest, fulfilment of purposes and obligations specified in the agreements or given consent.

Information contained in the register
The person’s first and last name, company name, postal address, telephone number, email address, IP address of the customer’s computer, registration information (such as a user ID, nickname, password or any other unique identifier), information about the customer relationship (such as invoicing and payment information, product and order information, customer feedback, contacts requests and information about the use of the services, such as browsing and search information), any permits and consents, as well as any other information collected with the customer’s consent.

Information sources of the register
Personal information is mainly collected from the user themselves or the organisation’s representative when the user registers as a user of the service or is registered as a user of the service. Information may also be collected from third parties by using the technologies described in the privacy policy.

Privacy policy in accordance with the EU General Data Protection Regulation (GDPR, EU 2016/679).

Name of the register
Sarake Sign user register

Controller
Sarake Oy
Business ID 2736285-3
Hiomotie 6 B
00380 Helsinki, Finland

Register manager
Tuukka Taskinen
support@sarake.fi

Purpose and legal basis of the register
The purpose of the register is the maintenance of the user accounts of the Sarake Sign signature service, the implementation of the service, the verification and monitoring of customer transactions, the development of customer service and business operations, marketing, analysis, statistics and other similar purposes.
The legal basis for the processing of personal information is the controller’s legitimate interest, fulfilment of purposes and obligations specified in the agreements or given consent.

Information contained in the register
The person’s first and last name, company name, postal address, telephone number, email address, IP address of the customer’s computer, registration information (such as a user ID, nickname, password or any other unique identifier), information about the customer relationship (such as invoicing and payment information, product and order information, customer feedback, contacts requests and information about the use of the services, such as browsing and search information), any permits and consents, as well as any other information collected with the customer’s consent.

Information sources of the register
Personal information is mainly collected from the user themselves or the organisation’s representative when the user registers as a user of the service or is registered as a user of the service. Information may also be collected from third parties by using the technologies described in the privacy policy.