1. Data Controller

Finnsweet Group

Veckjärventie 1

06150 Porvoo

Phone: 019-5232294

finnsweet@finnsweet.fi

2. Responsible for the Register

Tamara Liimatainen, 040 822 5441

tamara@finnsweet.fi

3. Name of the Register

Customer Register

4. Basis for Maintaining the Register and Purpose of Use

A register is maintained for management, maintenance, and development of the customer relationship and

other business-related contacts, for providing and developing services and products,

targeting offers, analysis, as well as for market research and other statistical

purposes. Register data may be used for marketing between the Finnsweet Group and the customer

within the limits permitted by law.

5. Information Contained in the Register

The information stored in the register does not include personal data of contact persons of customer

companies or those providing feedback, as long as they are not necessary for the current

or potential customer relationship. The register may contain the following

information about individuals:

First and last name

Mobile phone number

Email address

Address details

Personal identification number, only from invoicing customers

Position or role in the company

6. Regular Sources of Information

Personal data is collected during the customer relationship and when providing feedback, as well as during

any work done for managing a potential customer relationship. The main source of information is the data

provided by the customer. Information may also be collected and supplemented from the population register, as well as from other

third-party registers and with the person's consent.

7. Disclosure of Information

Information is regularly transferred to the Finnsweet Group's information systems if a customer and

contractual relationship has been established. For fulfilling the rights and obligations of the contractual relationship or

demanded by authorities, information may also be disclosed to Finnsweet Group's

contract partners.

Information may also be disclosed to authorities within the limits of applicable law.

Information is not regularly disclosed outside the EU or the European Economic Area.

8. Retention Period of Information

Information about a person is retained for as long as necessary for managing the customer relationship, for collecting

statistical material, and for the period required by law. After this period, the information

will be anonymized.

9. Principles of Data Protection for the Register

The use of the register is protected by user-specific credentials, passwords, and access rights.

Information about individuals is retained for as long as necessary to maintain the customer relationship, for collecting

statistical material, and for the legally required period in contractual relationships.

10. Right of Access to Register Data and Implementation of Access Rights

The registered individual has the right to access their information in the register under Section 28 of the Personal Data Act and the right to request the correction of inaccurate information concerning themselves under Section 29.

Requests for inspection and correction should be addressed in writing to the contact person responsible for register matters.

List of Finnsweet Group's subprocessors who may process the customer's

personal data:

Lemonsoft Oy 2017863-1, Vaasanpuistikko 20 A, Vaasa,

provides cloud-based enterprise resource planning services

Crassman Oy, 1045259-06, Merimiehenkatu 36 D 410, Helsinki

provides cloud-based online services

Gallant Oy, 0153648-0, multiple locations,

provides financial management services

SMS Testing Oy, 0889498-5, Mestarintie 21, Porvoo,

provides IT services