Privacy Policy and Data Protection

Improving User Experience

We use cookies on our website. Cookies are small files that a web browser saves on your device. Cookies allow the website to remember your actions and settings for a certain period, so you don’t have to enter them every time you navigate between pages or return to the site. When you visit the site, cookie data is automatically stored. We only use cookies that store user preferences or enable the use of the site. We do not collect or store any personally identifiable information, nor do we use analytics cookies.

Cookies can be disabled at any time by adjusting the privacy settings of your browser. Stored cookies can also be deleted. However, disabling cookies may affect the functionality of the site and your user experience.

We value your privacy. Therefore, we process your personal data in compliance with the law and the EU General Data Protection Regulation (GDPR). On this page, we explain how we handle your personal data, what we use it for, and how we store and protect it.

Data Controller

Testaamo / Tutkimustie Oy (Business ID 2010879-9)
Naulakatu 3, 33100 Tampere
testaamo(at)tutkimustie.fi
testaamo.net

Contact Person Responsible for the Register

Miia Moisio, Tutkimustie Oy
Naulakatu 3, 33100 Tampere
Tel. 03 212 6266

Name of the Register

Testaamo Participant Register, Marketing and Customer Register.

What Data We Collect and Why

Service Execution and Communication

Participant Register refers to the data of individuals who have applied for studies or joined Testaamo’s panel.

On our website, you can register for the Testaamo panel by providing your personal information. The Testaamo panel stores contact information, name, place of residence, date of birth, and participation in studies. Information collected on application forms for specific studies is processed only during the execution of the study. Project data may be stored for up to 24 months and then deleted.

In the Participant Register, we process the following information:
• Your contact information, such as your name, place of residence, email, and phone number
• Personal details like gender and date of birth
• Other personal information provided on registration and application forms, which can vary depending on the study
• Participation details
• Registration and participation dates and times
• Login information and verification
• Content of messages you send to us

Tutkimustie Oy’s Privacy Policy

Marketing and Customer Register refers to data on Tutkimustie Oy’s and Testaamo’s customers and potential customers.

We receive the information stored in the register directly from you through messages sent via contact forms, email, phone, social media services, contracts, customer meetings, and other situations where you provide your information.

We may also collect information about the contact persons of companies and other organizations from public sources such as websites, directory services, and other companies.

In the Marketing and Customer Register, we process the following information:
• Name, position, company/organization, contact details (phone number, email address, postal address)
• IP address, location
• Login information and verification
• Details of ordered services and changes to them, billing information, and other information related to the customer relationship and ordered services
• Content of messages you send to us

Fulfilling Obligations

We collect personal data to comply with legal requirements and internal policies, as well as to protect our operations and rights. The data is retained for the period required by law.

Legal Basis for Processing

The legal basis for processing personal data is the individual’s consent and the data controller’s legitimate interest. The purpose of processing personal data in the Participant Register is to enable participation in studies. This includes, for example, sending invitations, managing rewards, and general communication. The purpose of processing personal data in the Customer and Marketing Register is marketing, fulfilling contracts, complying with legal obligations, and business reasons related to providing the website and services.

Deleting Personal Data

We retain your personal data as long as necessary for the purpose of the processing. After you join the panel, we retain your registration and profile data until you request their deletion. We retain data in the marketing and customer register as long as there is consent or a legal basis for it, but no longer than 10 years. The retention period may be shorter or longer due to legal reasons.

Protecting Your Data

We handle your data carefully, and information processed via information systems is appropriately protected through technical and administrative measures. When registry data is stored on internet servers, the physical and digital security of the hardware is ensured accordingly. The data controller ensures that stored information, as well as access rights to servers and other critical information for data security, are handled confidentially and only by employees whose job description includes such tasks. We regularly review, monitor, and evaluate our data protection practices and systems.

However, please note that the internet is not a completely secure environment, so we cannot guarantee the security of all data transfers. For example, emails may not be encrypted, so please avoid sending confidential and sensitive information via email.

Sharing Your Data

We never disclose your personal data to third parties or make it available to them without your consent unless required by law.

If you are selected to participate in a study and confirm your registration, Testaamo will forward the personal data you provided during registration and other relevant study-specific personal data ("screening") to our client who ordered the study. The disclosure of personal data is always based on a written agreement between Testaamo and its client, which restricts the use of personal data. Our clients may not use your personal data in any other way than to conduct the study. Testaamo provides information about the disclosure of personal data to registered individuals upon request. In some cases, the information Testaamo provides to its clients may not include any identifiable data.

We use processors to assist in providing our services, such as maintaining our website and for information retrieval and communication purposes. When using processors, we ensure that we have an agreement on how they process data on our behalf. We also ensure that they take appropriate data security measures and that their privacy policies comply with GDPR.

Testaamo uses the following tools and processors to maintain its website and provide services:

• MMD Networks, website maintenance and servers
• Webropol Oy, online surveys
• Tavoittaja.fi, automated and personalized text messages
• Gift voucher suppliers, such as GoGift
• Movie ticket suppliers, such as Finnkino
• VismaSign, electronic signature system
• Microsoft Corporation, Microsoft Office Business Services

Transfer of Data Outside the EU/EEA

We do not transfer your personal data outside the EU/EEA.

Your Rights

You have the right to review the data stored in the register and request the correction of any incorrect or incomplete information. Additionally, you have the following rights:
right to have your data deleted
right to restrict processing
right to object to processing
right to data portability
right to withdraw your consent at any time
right to appeal to the supervisory authority

If you want to review the data stored about you, or request the correction or deletion of your personal data, or if you have any questions about your rights, please contact us at testaamo(at)tutkimustie.fi or mail us at the addresses provided above.