PRI­VA­CY POLICIES

Data pro­tec­tion is a cor­po­rate respon­si­bil­i­ty. Safe and care­ful pro­cess­ing of per­son­al data is of utmost impor­tance to us.

See our reg­is­ters below

Mar­ket­ing register
Cus­tomer register
Part­ner register
Recruit­ment register
Share and share­hold­er register

ISLET GROUP Mar­ket­ing Reg­is­ter Pri­va­cy Policy

1. Data Controller

Islet Group Oy and its Affil­i­ates (list­ed below) joint­ly deter­mine the pur­pos­es and means of pro­cess­ing. The com­pa­nies are joint con­trollers. Islet Group Oy owns major­i­ty of the Affil­i­ates and is the con­tact point for Data Sub­ject. The lead super­vi­so­ry author­i­ty is Finnish super­vi­so­ry author­i­ty. Con­tact infor­ma­tion of the Data Con­troller is below.

Islet Group Oy
Com­pa­ny ID: 1445054 – 7
Met­sän­nei­donku­ja 12
02130 Espoo

and Islet Group Oy’s Affil­i­ates:
Islet Inno­va­tions Oy (Com­pa­ny ID: 3177120 – 3)
Islet Intel­li­gence Oy (Com­pa­ny ID: 3207476 – 8)
Islet Group Kft (Hun­gary: VAT: 12552652 – 2‑43)

[lat­er joint­ly togeth­er “Islet”]

2. Con­tact per­son for mat­ters relat­ing to the reg­is­ter
Jan­i­na Luo­to
Email: dataprotection(at)isletgroup.fi

3. Name of the reg­is­ter
Islet’s Mar­ket­ing Register

4. Use and basis for pro­cess­ing per­son­al data
Per­son­al Data of exist­ing, pre­vi­ous and poten­tial cus­tomers are used for mar­ket­ing pur­pos­es. These pur­pos­es are for exam­ple noti­fi­ca­tions of future cam­paigns and send­ing the newslet­ter. We also use Per­son­al Data for direct mar­ket­ing. In addi­tion, we main­tain and col­lect infor­ma­tion on Islet web­site that shares infor­ma­tion of cur­rent activ­i­ties of our company.

The ground for pro­cess­ing per­son­al data for mar­ket­ing is the legit­i­mate inter­est of Islet.

5. Data con­tent of the reg­is­ter
The fol­low­ing infor­ma­tion can be stored or reg­is­tered:
- First name, last name and title
- Con­tact infor­ma­tion: phone num­ber and email
- Name and con­tact details of the rep­re­sent­ed com­pa­ny
- Pro­hi­bi­tion to direct mar­ket­ing
- Infor­ma­tion about the use of web­site, for exam­ple IP address
- Par­tic­i­pa­tion in train­ing events

6. Reten­tion of per­son­al data
Islet retains per­son­al data in Mar­ket­ing Reg­is­ter no more than 5 years from the end of the mar­ket­ing rela­tion­ship. This peri­od of 5 years is cal­cu­lat­ed from the last com­mu­ni­ca­tion to the Data Subject.

Unnec­es­sary and out­dat­ed infor­ma­tion are delet­ed in cer­tain intervals.

7. Infor­ma­tion sources of the reg­is­ter
Infor­ma­tion about the rep­re­sen­ta­tives of cus­tomer com­pa­nies are col­lect­ed from the cus­tomer com­pa­ny or straight from the data sub­ject. In addi­tion, we col­lect infor­ma­tion through our web­site. Per­son­al data relat­ing to poten­tial cus­tomers are obtained from the fol­low­ing sources:
- From the reg­is­tered, for exam­ple con­tact or busi­ness card;
- LinkedIn;
- Fonec­ta;
- Com­pa­nies own web­sites (Google);
- Par­tic­i­pant list of events.

8. Col­lect­ing infor­ma­tion from our web­site
We use google ana­lyt­ics that col­lects infor­ma­tion from our web­site. Google Ana­lyt­ics gath­ers the fol­low­ing infor­ma­tion:
- The lan­guage used
- Loca­tion (coun­try and city), Google Ana­lyt­ics does not reveal the IP address
- Device used and the web brows­er that is used
- Vis­i­tor behav­iour: is the first vis­it, which pages are vis­it­ed, how long is the vis­it and what is the nav­i­ga­tion path

More infor­ma­tion about Google Ana­lyt­ics: https://​sup​port​.google​.com/​a​n​a​l​y​t​i​cs/.

9. Pro­vi­sion of infor­ma­tion
Islet dis­clos­es infor­ma­tion to the com­pa­nies that main­tain the cus­tomer rela­tion­ship man­age­ment sys­tem and newslet­ter trans­mis­sion sys­tem in use. At the moment, we use the cus­tomer rela­tion­ship man­age­ment sys­tem of SAP and newslet­ter trans­mis­sion sys­tem of MailChimp. Per­son­al Data is also pro­vid­ed to Microsoft, who is the IT Ser­vice provider of Islet.

10. Trans­fer of data out­side the EU or EEA
We trans­fer your per­son­al data to coun­tries out­side EU/EEA, such as Unit­ed States. We will ensure to make the trans­fers in accor­dance with the leg­is­la­tion on the pro­cess­ing of per­son­al data. In all sit­u­a­tions we will ensure that we only trans­fer your per­son­al data with one of the fol­low­ing legal basis:
- data is trans­ferred to a coun­try, where Euro­pean Com­mis­sion has decid­ed that there is an ade­quate lev­el of pro­tec­tion;
- the con­troller or proces­sor has pro­vid­ed appro­pri­ate safe­guards, and on con­di­tion that enforce­able data sub­ject rights and effec­tive legal reme­dies for data sub­jects are avail­able; or
- you have giv­en your explic­it con­sent, or there is a legit­i­mate basis for the trans­fer of your data out­side the EU/EEA, such as the Pri­va­cy Pol­i­cy Shield, which has been agreed with Unit­ed States and Euro­pean Commission.

MailChimp is part of the Pri­va­cy Pol­i­cy Shield arrange­ment agreed with Unit­ed States and Euro­pean Commission.

11. Pro­tec­tion of the reg­is­ter
Islet process­es all per­son­al data in a secure way and con­stant­ly aims to devel­op its process­es and sys­tems. The reg­is­ter is held in Microsoft cloud ser­vice and Microsoft has pro­tect­ed the ser­vice with appro­pri­ate tech­ni­cal and orga­ni­za­tion­al mea­sures (Microsoft Trust Cen­ter). Only autho­rised per­sons, whose job con­tains mar­ket­ing activ­i­ties, have access to the register.

12. Rights of the data sub­ject
At any time, the Data Sub­ject has a right to object to the pro­cess­ing of his/​her Per­son­al Data for direct mar­ket­ing pur­pos­es. E‑mails sent by Islet con­tain either a link from which you can object to direct mar­ket­ing in the future or alter­na­tive­ly you can answer the mes­sage with a request to end direct mar­ket­ing in the future.

At any time, the data sub­ject has the right:
- to obtain infor­ma­tion on the pro­cess­ing of per­son­al data;
- of access to the infor­ma­tion and check infor­ma­tion regard­ing them­selves;
- to demand cor­rec­tion or com­ple­tion of inac­cu­rate infor­ma­tion;
- to demand the era­sure of per­son­al data;
- to obtain from the con­troller restric­tion of pro­cess­ing;
- to object, on grounds relat­ing to his or her par­tic­u­lar sit­u­a­tion, at any time to pro­cess­ing of per­son­al data con­cern­ing him or her, in case where per­son­al data is processed based on the legit­i­mate inter­est of Islet;
- to receive the per­son­al data con­cern­ing him or her in a struc­tured, com­mon­ly used and machine-read­able for­mat and have the right to trans­mit those data to anoth­er con­troller;
- to object pro­cess­ing of per­son­al data;
- with­draw their con­sent and object to the pro­cess­ing, which is based on that consent.

We may ask the data sub­ject to clar­i­fy their request. In addi­tion, we may ver­i­fy your iden­ti­ty before pro­cess­ing the request. We may refuse to exe­cute your request on the basis of data pro­tec­tion legislation.

Data sub­ject has a right to lodge a com­plaint with a super­vi­so­ry author­i­ty if it thinks that Islet has not com­plied with the applic­a­ble data pro­tec­tion legislation.

13. Con­tact
Ques­tions about the pro­cess­ing of per­son­al data or request for the use of rights of data sub­ject must be done in writ­ing or by email to the fol­low­ing address:

Data pro­tec­tion
Islet Group Ltd
Met­sän­nei­donku­ja 12
02130 Espoo
Email: dataprotection(at)isletgroup.fi

Islet will respond to the requests as soon as pos­si­ble. How­ev­er, the respond will be giv­en with­in one month unless there are spe­cial rea­sons to extend this time.

14. Chang­ing the Pri­va­cy Pol­i­cy
We may change this pri­va­cy state­ment from time to time, if nec­es­sary. We will inform the reg­is­tered from changes to this Pri­va­cy Policy.

Last update to this Pri­va­cy Pol­i­cy was made: 8.8.2023

ISLET GROUP Cus­tomer Reg­is­ter Pri­va­cy Policy

1. Data Controller

Islet Group Oy and its Affil­i­ates (list­ed below) joint­ly deter­mine the pur­pos­es and means of pro­cess­ing. The com­pa­nies are joint con­trollers. Islet Group Oy owns major­i­ty of the Affil­i­ates and is the con­tact point for Data Sub­ject. The lead super­vi­so­ry author­i­ty is Finnish super­vi­so­ry author­i­ty. Con­tact infor­ma­tion of Data Con­troller is below.

Islet Group Oy
Com­pa­ny ID: 1445054 – 7
Met­sän­nei­donku­ja 12
02130 Espoo

and Islet Group Oy’s Affil­i­ates:
Islet Inno­va­tions Oy (Com­pa­ny ID: 3177120 – 3)
Islet Intel­li­gence Oy (Com­pa­ny ID: 3207476 – 8)
Islet Group Kft (Hun­gary: VAT: 12552652 – 2‑43)

[lat­er joint­ly togeth­er “Islet”]

2. Con­tact per­son for mat­ters relat­ing to the reg­is­ter
Jan­i­na Luo­to
Email: dataprotection(at)isletgroup.fi

3. Name of the reg­is­ter
Islet’s Cus­tomer Register

4. Use and basis for pro­cess­ing per­son­al data
Per­son­al Data of rep­re­sen­ta­tives of exist­ing cus­tomers is used to man­age the cus­tomer rela­tion­ship and com­mu­ni­cate with the cus­tomers. Per­son­al data are also used to col­lect and process cus­tomer feedback.

The ground for pro­cess­ing Per­son­al Data of our cus­tomer is the per­for­mance of a con­tract between our cus­tomer and Islet.

5. Data con­tent of the reg­is­ter
The fol­low­ing infor­ma­tion can be stored or reg­is­tered:
- First name, last name, and title
- Con­tact infor­ma­tion: phone num­ber and email
- Name and con­tact details of the rep­re­sent­ed com­pa­ny
- Infor­ma­tion pro­duced by the Data Sub­ject for exam­ple cus­tomer feed­back, unless it is anonymized

6. Reten­tion of per­son­al data
Islet retains infor­ma­tion of rep­re­sen­ta­tives of exist­ing cus­tomers in Cus­tomer Reg­is­ter until the cus­tomer rela­tion­ship between the cus­tomer and Islet ter­mi­nates and for five years after this time. After this the infor­ma­tion is delet­ed from the reg­is­ter. The cus­tomer rela­tion­ship is con­sid­ered to have end­ed when there is no longer a valid agree­ment with the customer.

If the rep­re­sen­ta­tive stops work­ing in the cus­tomer com­pa­ny, the Per­son­al Data will be deac­ti­vat­ed in the system.

7. Infor­ma­tion sources of the reg­is­ter
Col­lec­tion of infor­ma­tion about the rep­re­sen­ta­tives of cus­tomer com­pa­nies is based on cus­tomer rela­tion­ship. We may receive infor­ma­tion from the cus­tomer com­pa­ny or straight from the Data Subject.

8. Pro­vi­sion of infor­ma­tion
We dis­close infor­ma­tion about our cus­tomer rep­re­sen­ta­tives to Islet net­work con­sul­tants and part­ners who work as sub­con­trac­tors for the pur­pos­es only to com­mu­ni­cate with the cus­tomer and retain the cus­tomer rela­tion­ship. Islet also dis­clos­es infor­ma­tion to Islet affil­i­ates (list­ed on top of the doc­u­ment), if nec­es­sary. In addi­tion, Islet dis­clos­es infor­ma­tion to the com­pa­ny that main­tains its cus­tomer rela­tion­ship man­age­ment sys­tem. Now, SAP’s cus­tomer rela­tion­ship man­age­ment sys­tem is in use.

9. Trans­fer of data out­side the EU or EEA
We will not trans­fer your data out­side the EU/EEA.

10. Pro­tec­tion of the reg­is­ter
Islet process­es all per­son­al data in a secure way and con­stant­ly aims to devel­op its process­es and sys­tems. The reg­is­ter is pro­tect­ed with fire­wall, pass­word and oth­er tech­ni­cal means. Only autho­rised per­sons, whose job con­tains cus­tomer work, have access to the register.

11. Rights of the data sub­ject
At any time, the data sub­ject has the right:
- to obtain infor­ma­tion on the pro­cess­ing of per­son­al data;
- of access to the infor­ma­tion and check infor­ma­tion regard­ing them­selves;
- to demand cor­rec­tion or com­ple­tion of inac­cu­rate infor­ma­tion;
- to demand the era­sure of per­son­al data;
- to obtain from the con­troller restric­tion of pro­cess­ing;
- to object, on grounds relat­ing to his or her par­tic­u­lar sit­u­a­tion, at any time to pro­cess­ing of per­son­al data con­cern­ing him or her, in case where per­son­al data is processed based on the legit­i­mate inter­est of Islet;
- to receive the per­son­al data con­cern­ing him or her in a struc­tured, com­mon­ly used and machine-read­able for­mat and have the right to trans­mit those data to anoth­er con­troller;
- to object pro­cess­ing of per­son­al data;
- with­draw their con­sent and object to the pro­cess­ing, which is based on that consent.

We may ask the data sub­ject to clar­i­fy their request. In addi­tion, we may ver­i­fy your iden­ti­ty before pro­cess­ing the request. We may refuse to exe­cute your request on the basis of data pro­tec­tion legislation.

Data sub­ject has a right to lodge a com­plaint with a super­vi­so­ry author­i­ty if it thinks that Islet has not com­plied with the applic­a­ble data pro­tec­tion legislation.

12. Con­tact
Ques­tions about the pro­cess­ing of per­son­al data or request for the use of rights of data sub­ject must be done in writ­ing or by email to the fol­low­ing address:

Data pro­tec­tion
Islet Group Ltd
Met­sän­nei­donku­ja 12
02130 Espoo
Email: dataprotection(at)isletgroup.fi

Islet will respond to the requests as soon as pos­si­ble. How­ev­er, the respond will be giv­en with­in one month unless there are spe­cial rea­sons to extend this time.

13. Chang­ing the Pri­va­cy Pol­i­cy
We may change this pri­va­cy state­ment from time to time, if nec­es­sary. We will inform the reg­is­tered from changes to this Pri­va­cy Policy.

Last update to this Pri­va­cy Pol­i­cy was made: 8.8.2023

ISLET GROUP Part­ner Reg­is­ter Pri­va­cy Policy

1. Data Controller

Islet Group Oy and its Affil­i­ates (list­ed below) joint­ly deter­mine the pur­pos­es and means of pro­cess­ing. The com­pa­nies are joint con­trollers. Islet Group Oy owns major­i­ty of the Affil­i­ates and is the con­tact point for Data Sub­ject. The lead super­vi­so­ry author­i­ty is Finnish super­vi­so­ry author­i­ty. Con­tact infor­ma­tion of Data Con­troller is below.

Islet Group Oy
Com­pa­ny ID: 1445054 – 7
Met­sän­nei­donku­ja 12
02130 Espoo

and Islet Group Oy’s Affil­i­ates:
Islet Inno­va­tions Oy (Com­pa­ny ID: 3177120 – 3)
Islet Intel­li­gence Oy (Com­pa­ny ID: 3207476 – 8)
Islet Group Kft (Hun­gary: VAT: 12552652 – 2‑43)

[lat­er joint­ly togeth­er “Islet”]

2. Con­tact per­son for mat­ters relat­ing to the reg­is­ter
Tom­mi Luo­to
Email: dataprotection(at)isletgroup.fi

3. Name of the reg­is­ter
Islet’s Part­ner Register

4. Use and basis for pro­cess­ing per­son­al data
The reg­is­ter con­tains Per­son­al Data of Net­work Con­sul­tants and Part­ners of Islet. Per­son­al Data is processed to allo­cate con­sul­tants for cus­tomer projects. This is done based on the con­trac­tu­al rela­tion­ship between the net­work con­sul­tant / part­ner and Islet. Per­son­al Data is also used to com­mu­ni­cate with the con­sul­tants and for the pay­ment of fees.

The basis for pro­cess­ing is the per­for­mance of a con­tract between the net­work con­sul­tant / part­ner and Islet. The basis for stor­ing Per­son­al Data after the ter­mi­na­tion of the con­trac­tu­al rela­tion­ship is the
legit­i­mate inter­est of Islet.

5. Data con­tent of the reg­is­ter
The fol­low­ing infor­ma­tion can be stored or reg­is­tered:
- First name and last name
- Con­tact infor­ma­tion (phone num­ber, email)
- Linkedin pro­file
- Edu­ca­tion­al infor­ma­tion and infor­ma­tion about pre­vi­ous employ­ment his­to­ry
- Pho­to

6. Reten­tion of per­son­al data
Per­son­al Data is stored dur­ing the con­trac­tu­al rela­tion­ship between the consultant/​partner and Islet and for five years after the end of this con­trac­tu­al rela­tion­ship. After this the infor­ma­tion is man­u­al­ly deleted.

7. Infor­ma­tion sources of the reg­is­ter
The infor­ma­tion is obtained from the data sub­ject themselves.

8. Pro­vi­sion of infor­ma­tion
Per­son­al Data are trans­ferred between Islet and to cus­tomers to whom projects / assign­ments are offered or done. Per­son­al Data are also pro­vid­ed to Microsoft, who is the IT Ser­vice provider of Islet. In addi­tion, the resumes of the part­ners’ con­sul­tants are stored in a cloud ser­vice called CV Deals.

9. Trans­fer of data out­side the EU or EEA
We will not trans­fer your data out­side the EU/EEA.

10. Pro­tec­tion of the reg­is­ter
Islet process­es all per­son­al data in a secure way and con­stant­ly aims to devel­op its process­es and sys­tems. The reg­is­ter is pro­tect­ed with fire­wall, pass­word and oth­er tech­ni­cal means as well as with pass­word. Only autho­rized per­sons, who have a need in order to do their work, have access to the register.

11. Rights of the data sub­ject
At any time, the data sub­ject has the right:
- to obtain infor­ma­tion on the pro­cess­ing of per­son­al data;
- of access to the infor­ma­tion and check infor­ma­tion regard­ing them­selves;
- to demand cor­rec­tion or com­ple­tion of inac­cu­rate infor­ma­tion;
- to demand the era­sure of per­son­al data;
- to obtain from the con­troller restric­tion of pro­cess­ing;
- to object, on grounds relat­ing to his or her par­tic­u­lar sit­u­a­tion, at any time to pro­cess­ing of per­son­al data con­cern­ing him or her, in case where per­son­al data is processed based on the legit­i­mate inter­est of Islet;
- to receive the per­son­al data con­cern­ing him or her in a struc­tured, com­mon­ly used and machine-read­able for­mat and have the right to trans­mit those data to anoth­er con­troller;
- to object pro­cess­ing of per­son­al data;
- with­draw their con­sent and object to the pro­cess­ing, which is based on that consent.

We may ask the data sub­ject to clar­i­fy their request. In addi­tion, we may ver­i­fy your iden­ti­ty before pro­cess­ing the request. We may refuse to exe­cute your request on the basis of data pro­tec­tion legislation.

Data sub­ject has a right to lodge a com­plaint with a super­vi­so­ry author­i­ty if it thinks that Islet has not com­plied with the applic­a­ble data pro­tec­tion legislation.

12. Con­tact
Ques­tions about the pro­cess­ing of per­son­al data or request for the use of rights of data sub­ject must be done in writ­ing or by email to the fol­low­ing address:

Data pro­tec­tion
Islet Group Ltd
Met­sän­nei­donku­ja 12
02130 Espoo
Email: dataprotection(at)isletgroup.fi

Islet will respond to the requests as soon as pos­si­ble. How­ev­er, the respond will be giv­en with­in one month unless there are spe­cial rea­sons to extend this time.

13. Chang­ing the Pri­va­cy Pol­i­cy
We may change this pri­va­cy state­ment from time to time, if nec­es­sary. We will inform the reg­is­tered from changes to this Pri­va­cy Policy.

Last update to this Pri­va­cy Pol­i­cy was made: 8.8.2023

ISLET GROUP Recruit­ment Reg­is­ter Pri­va­cy Policy

1. Data Controller

Islet Group Oy and its Affil­i­ates (list­ed below) joint­ly deter­mine the pur­pos­es and means of pro­cess­ing. The com­pa­nies are joint con­trollers. Islet Group Oy owns major­i­ty of the Affil­i­ates and is the con­tact point for Data Sub­ject. The lead super­vi­so­ry author­i­ty is Finnish super­vi­so­ry author­i­ty. Con­tact infor­ma­tion of Data Con­troller is below.

Islet Group Oy
Com­pa­ny ID: 1445054 – 7
Met­sän­nei­donku­ja 12
02130 Espoo

and Islet Group Oy’s Affil­i­ates:
Islet Inno­va­tions Oy (Com­pa­ny ID: 3177120 – 3)
Islet Intel­li­gence Oy (Com­pa­ny ID: 3207476 – 8)
Islet Group Kft (Hun­gary: VAT: 12552652 – 2‑43)

[lat­er joint­ly togeth­er “Islet”]

2. Con­tact per­son for mat­ters relat­ing to the reg­is­ter
Eri­ika Hiltunen
Email: dataprotection(at)isletgroup.fi

3. Name of the reg­is­ter
Islet’s Recruit­ment Register

4. Use and basis for pro­cess­ing per­son­al data
The reg­is­ter con­tains Per­son­al Data of job appli­cants of Islet. Per­son­al Data are used to recruit new employ­ees for Islet. The infor­ma­tion is processed to eval­u­ate appli­cants, to devel­op the recruit­ment process and to com­mu­ni­cate with appli­cants. Infor­ma­tion may also be stored for future recruit­ment purposes.

Con­tact infor­ma­tion of ref­er­ences are processed with the con­sent of ref­er­ence which the appli­cant obtains. Per­son­al Data may also be used for per­son­al assess­ment of the appli­cants in which case an exter­nal HR advi­sor is used.
The basis for pro­cess­ing Per­son­al Data for recruit­ment pur­pos­es is the legit­i­mate inter­est of Islet.

The basis for stor­ing infor­ma­tion is the legal oblig­a­tion of Islet. The basis for pro­cess­ing infor­ma­tion about per­son­al eval­u­a­tion is the con­sent of appli­cant. If an appli­cant does not give con­sent to the eval­u­a­tion, there is a risk that the recruit­ment process will not be continued.

5. Data con­tent of the reg­is­ter
The fol­low­ing infor­ma­tion can be stored or reg­is­tered:
- First name and last name
- Con­tact infor­ma­tion (address, phone num­ber, email)
- LinkedIn pro­file
- Date of birth and nation­al­i­ty (if appli­cant pro­vides this)
- Pho­to (if appli­cant pro­vides this)
- Edu­ca­tion­al infor­ma­tion and infor­ma­tion about pre­vi­ous employ­ment his­to­ry
- infor­ma­tion about per­son­al eval­u­a­tion
- Infor­ma­tion about the recruit­ment process
- Con­tact infor­ma­tion of ref­er­ences
- Oth­er infor­ma­tion that the appli­cant provides

6. Reten­tion of per­son­al data
Per­son­al Data is stored dur­ing the recruit­ment process and for five years after the end of the process. The recruit­ment process ends when all the appli­cants have received results of the process. After five years the per­son­al data is man­u­al­ly delet­ed from the systems.

The appli­cant can object to the pro­cess­ing of their per­son­al data after the end of the recruit­ment process. How­ev­er, the infor­ma­tion is stored for two years so that Islet can answer to the pos­si­ble legal claims aris­ing from the process. After two years, the infor­ma­tion is man­u­al­ly delet­ed from the systems.

7. Infor­ma­tion sources of the reg­is­ter
The infor­ma­tion is main­ly obtained from the data sub­ject them­selves. In some select­ed cas­es, an exter­nal recruit­ment part­ner or HR advi­sor is used to make a per­son­al assess­ment of the appli­cant. In these cir­cum­stances, per­son­al data relat­ing to the assess­ment are obtained from the recruit­ment part­ner or HR advisor.

8. Pro­vi­sion of infor­ma­tion
In prin­ci­ple, we do not trans­mit your per­son­al data. In spe­cial cir­cum­stances, when need­ed, infor­ma­tion will be trans­mit­ted to an exter­nal HR advi­sor who does a per­son­al evaluation.

Per­son­al Data is also pro­vid­ed to Microsoft, who is the IT Ser­vice provider of Islet.

9. Trans­fer of data out­side the EU or EEA
We will not trans­fer your data out­side the EU/EEA.

10. Pro­tec­tion of the reg­is­ter
Islet process­es all Per­son­al Data in a secure way and con­stant­ly aims to devel­op its process­es and sys­tems. The reg­is­ter is pro­tect­ed with fire­wall, pass­word and oth­er tech­ni­cal means. Only autho­rized per­sons, who have a need in order to do their work, have access to the register.

11. Rights of the data sub­ject
At any time, the data sub­ject has the right:
- to obtain infor­ma­tion on the pro­cess­ing of per­son­al data;
- of access to the infor­ma­tion and check infor­ma­tion regard­ing them­selves;
- to demand cor­rec­tion or com­ple­tion of inac­cu­rate infor­ma­tion;
- to demand the era­sure of per­son­al data;
- to obtain from the con­troller restric­tion of pro­cess­ing;
- to object, on grounds relat­ing to his or her par­tic­u­lar sit­u­a­tion, at any time to pro­cess­ing of per­son­al data con­cern­ing him or her, in case where per­son­al data is processed based on the legit­i­mate inter­est of Islet;
- to receive the per­son­al data con­cern­ing him or her in a struc­tured, com­mon­ly used and machine-read­able for­mat and have the right to trans­mit those data to anoth­er con­troller;
- to object pro­cess­ing of per­son­al data;
- with­draw their con­sent and object to the pro­cess­ing, which is based on that consent.

We may ask the data sub­ject to clar­i­fy their request. In addi­tion, we may ver­i­fy your iden­ti­ty before pro­cess­ing the request. We may refuse to exe­cute your request on the basis of data pro­tec­tion legislation.

Data sub­ject has a right to lodge a com­plaint with a super­vi­so­ry author­i­ty if it thinks that Islet has not com­plied with the applic­a­ble data pro­tec­tion legislation.

12. Con­tact
Ques­tions about the pro­cess­ing of per­son­al data or request for the use of rights of data sub­ject must be done in writ­ing or by email to the fol­low­ing address:

Data pro­tec­tion
Islet Group Ltd
Met­sän­nei­donku­ja 12
02130 Espoo
Email: dataprotection(at)isletgroup.fi

Islet will respond to the requests as soon as pos­si­ble. How­ev­er, the respond will be giv­en with­in one month unless there are spe­cial rea­sons to extend this time.

13. Chang­ing the Pri­va­cy Pol­i­cy
We may change this pri­va­cy state­ment from time to time, if nec­es­sary. We will inform the reg­is­tered from changes to this Pri­va­cy Policy.

Last update to this Pri­va­cy Pol­i­cy was made: 8.8.2023

ISLET GROUP Share and Share­hold­er Reg­is­ter Pri­va­cy Policy

1. Data Controller

Islet Group Oy and its Affil­i­ates (list­ed below) joint­ly deter­mine the pur­pos­es and means of pro­cess­ing. The com­pa­nies are joint con­trollers. Islet Group Oy owns major­i­ty of the Affil­i­ates and is the con­tact point for Data Sub­ject. The lead super­vi­so­ry author­i­ty is Finnish super­vi­so­ry author­i­ty. Con­tact infor­ma­tion of Data Con­troller is below.

Islet Group Oy
Com­pa­ny ID: 1445054 – 7
Met­sän­nei­donku­ja 12
02130 Espoo

and Islet Group Oy’s Affil­i­ates:
Islet Inno­va­tions Oy (Com­pa­ny ID: 3177120 – 3)
Islet Intel­li­gence Oy (Com­pa­ny ID: 3207476 – 8)
Islet Group Kft (Hun­gary: VAT: 12552652 – 2‑43)

[lat­er joint­ly togeth­er “Islet”]

2. Con­tact per­son for mat­ters relat­ing to the reg­is­ter
Jan­i­na Luo­to
Email: dataprotection(at)isletgroup.fi

3. Name of the reg­is­ter
Islet’s Share and Share­hold­er Register

4. Use and basis for pro­cess­ing per­son­al data
Per­son­al Data are used to list share­hold­ers and deter­mine their own­er­ship of Islet com­pa­nies. Share Reg­is­ter and Share­hold­er Reg­is­ter are also used to evi­dence ownership.

The basis for pro­cess­ing is the legal oblig­a­tion of Islet to main­tain a Share and Share­hold­er reg­is­ter of the own­er­ship of the company.

5. Data con­tent of the reg­is­ter
The fol­low­ing infor­ma­tion can be stored or reg­is­tered:
- First name and last name
- Address
- Own­er­ship information

6. Reten­tion of per­son­al data
Per­son­al Data are stored as long as Islet exists or at least as long as the Data Sub­ject owns part of Islet. If the Data Sub­ject sells his or her own­er­ship, the infor­ma­tion will be deleted.

7. Infor­ma­tion sources of the reg­is­ter
The infor­ma­tion is obtained from the Data Sub­ject them­selves. Infor­ma­tion about the own­er­ship, for exam­ple num­ber of shares, are obtained from Islet.

8. Pro­vi­sion of infor­ma­tion
Due to the pub­lic nature of the Share reg­is­ter and share­hold­er reg­is­ter, infor­ma­tion can be pro­vid­ed to any­one who asks. In addi­tion, infor­ma­tion is pro­vid­ed to Finnish patent and reg­is­tra­tion office and Finnish Tax Admin­is­tra­tion. Per­son­al Data are also pro­vid­ed to Microsoft, who is the Cloud Ser­vice provider of Islet.

9. Trans­fer of data out­side the EU or EEA
We will not trans­fer your data out­side the EU/EEA. How­ev­er, due to the pub­lic nature of the share reg­is­ter and share­hold­er reg­is­ter, the infor­ma­tion must be giv­en to any­one who asks it, even out­side the EU or EEA.

10. Pro­tec­tion of the reg­is­ter
slet process­es all Per­son­al Data in a secure way and con­stant­ly aims to devel­op its process­es and sys­tems. The reg­is­ter is held in the secure Microos­ft cloud ser­vice, host­ing part­ner of Islet. Only autho­rised per­sons of man­age­ment team and own­ers, have access to the register.

Infor­ma­tion in the reg­is­ter is pub­lic and every­one has a right to obtain copy of it. How­ev­er, Islet does not
store a paper copy of the register.

11. Rights of the data sub­ject
At any time, the data sub­ject has the right:
- to obtain infor­ma­tion on the pro­cess­ing of per­son­al data;
- of access to the infor­ma­tion and check infor­ma­tion regard­ing them­selves;
- to demand cor­rec­tion or com­ple­tion of inac­cu­rate infor­ma­tion;
- to demand the era­sure of per­son­al data;
- to obtain from the con­troller restric­tion of pro­cess­ing;
- to object, on grounds relat­ing to his or her par­tic­u­lar sit­u­a­tion, at any time to pro­cess­ing of per­son­al data con­cern­ing him or her, in case where per­son­al data is processed based on the legit­i­mate inter­est of Islet;
- to receive the per­son­al data con­cern­ing him or her in a struc­tured, com­mon­ly used and machine-read­able for­mat and have the right to trans­mit those data to anoth­er con­troller;
- to object pro­cess­ing of per­son­al data;
- with­draw their con­sent and object to the pro­cess­ing, which is based on that consent.

We may ask the data sub­ject to clar­i­fy their request. In addi­tion, we may ver­i­fy your iden­ti­ty before pro­cess­ing the request. We may refuse to exe­cute your request on the basis of data pro­tec­tion legislation.

Data sub­ject has a right to lodge a com­plaint with a super­vi­so­ry author­i­ty if it thinks that Islet has not com­plied with the applic­a­ble data pro­tec­tion legislation.

12. Con­tact
Ques­tions about the pro­cess­ing of per­son­al data or request for the use of rights of data sub­ject must be done in writ­ing or by email to the fol­low­ing address:

Data pro­tec­tion
Islet Group Ltd
Met­sän­nei­donku­ja 12
02130 Espoo
Email: dataprotection(at)isletgroup.fi

Islet will respond to the requests as soon as pos­si­ble. How­ev­er, the respond will be giv­en with­in one month unless there are spe­cial rea­sons to extend this time.

13. Chang­ing the Pri­va­cy Pol­i­cy
We may change this pri­va­cy state­ment from time to time, if nec­es­sary. We will inform the reg­is­tered from changes to this Pri­va­cy Policy.

Last update to this Pri­va­cy Pol­i­cy was made: 8.8.2023