Privacy policy


Improving User Experience

We use cookies on our website. Cookies are small files that your internet browser stores on your device. Cookies allow the website to remember your actions and settings for a certain period of time, so you don't have to enter them every time you navigate between pages or return to the site. When you visit the site, cookie data is automatically stored. We only use cookies that store user preferences or enable the functionality of the website. We do not collect or store any personally identifiable information. We do not use analytics cookies.

You can disable cookies at any time by changing your browser's privacy settings. Collected cookies can be deleted. However, disabling cookies may affect the functionality of the site and your user experience.

We value your privacy. Therefore, we handle your personal data in accordance with laws and the EU General Data Protection Regulation (GDPR). On this page, we explain how we process your personal data, how we use it, and how we store and protect it.


Data Controller

Testaamo / Tutkimustie Oy (Business ID 2010879-9)
Naulakatu 3, 33100 Tampere
testaamo(at)tutkimustie.fi
testaamo.net

Contact Person for the Register

Miia Moisio, Tutkimustie Oy
Naulakatu 3, 33100 Tampere
Puh. 03 212 6266

Register Name

Testaamo Participant Register, Marketing and Customer Register.


What Information We Collect and Why


Service Delivery and Communication

The Participant Register refers to data of those who have applied to participate in research or joined the Testaamo panel.

On our website, you can register for the Testaamo panel by providing your personal information. The Testaamo panel stores contact information, name, location, date of birth, and information about participation in research. Research-specific data collected through application forms are stored for 6 months, after which they are deleted.

The Participant Register processes the following information:
• Your contact details, such as your name, location, email address, and phone number
• Personal information like gender and date of birth
• Other personal information provided during registration and through application forms. Depending on the research setup, this information can be any type of personal data.
• Information about your participation
• Registration and participation date and time
• Login details and verification
• Content of messages you send us

The Marketing and Customer Register refers to Testimustie Oy's and Testaamo's customers and potential customers.

We receive information stored in the register directly from you through messages sent via contact forms, email, phone calls, social media services, contracts, customer meetings, and other situations where you provide us with your information.

We may also collect information about contact persons of companies and other organizations from public sources such as websites, directory services, and other companies.

The Marketing and Customer Register processes the following information:
• Name, position, company/organization, contact details (phone number, email address, address)
• IP address, location
• Login details and verification
• Information about ordered services and changes to them, billing information, other information related to customer relationships and ordered services
• Content of messages you send us


Fulfillment of Obligations

We collect personal data in accordance with legal requirements and our internal practices to protect our operations and rights. Data is stored for the period required by law.

Legal Basis for Processing

The legal basis for processing personal data is the individual's consent and the data controller's legitimate interest. The purpose of processing personal data in the Participant Register is to enable participation in research. In relation to this, data is processed, for example, for sending invitation messages, implementing reward practices, and general communication. The purpose of processing personal data in the Marketing and Customer Register is marketing, contract execution, compliance with legal obligations, and business-related reasons related to providing the website and services.

Deletion of Personal Data

We retain your personal data for as long as we need it for the purpose of processing. After joining the panel, we store your registration and profile data until you request their deletion. We retain information in the marketing and customer register for as long as there is consent or a legal basis. The retention period may be shorter or longer for legal reasons..

Protection of Your Data

We handle your data carefully and protect information processed using appropriate technical and administrative measures. When registry data is stored on internet servers, their physical and digital security is appropriately ensured. The data controller ensures that stored data, as well as server access rights and other information critical for the security of personal data, are treated confidentially and only by employees whose job description requires it. We regularly review, monitor, and evaluate our privacy practices and systems.

Please note that the internet is not entirely secure, so we cannot guarantee the security of all data transfers. For example, emails may not be encrypted, so please avoid sending confidential and sensitive information via email.

Sharing of Information

We never disclose your personal data or make them available to third parties without your consent or unless required by law.

If you are selected as a participant in research and confirm your registration, Testaamo may share the personal information you provided during registration and other relevant personal information ("screening") related to the research with our client who commissioned the research. The disclosure of personal data is always based on a written agreement between Testaamo and its client that limits the use of personal data. Our clients are not allowed to use your personal data for any purpose other than conducting the research. Testaamo provides information about the disclosure of personal data to registered individuals upon request. In some cases, the information provided by Testaamo to its clients may not contain any identifiable information.

We utilize Processors to implement our services, such as maintaining our website and facilitating information retrieval and communication. When using Processors, we ensure that we have a contract in place specifying how they process data on our behalf. We also ensure that they adequately ensure data security and that their privacy practices comply with the GDPR.

Testaamo uses the following tools and Processors to maintain its website and provide its services:

• MMD Network Ltd, website maintenance and servers
• Webropol Ltd, online surveys
• Tavoittaja.fi, automated and personalized text messages
• Provider of gift vouchers, such as GoGift
• Provider of movie tickets, such as Finnkino
• VismaSign, electronic signature system
• Microsoft Corporation, Microsoft Office Business Services

Transfer of Data Outside the EU/EEA

We do not transfer your personal data outside the EU/EEA.

Your Rights

You have the right to access the data stored in the register and request the correction of any incorrect information or completion of incomplete information. You also have the following rights:
Right to erasure of data
Right to restriction of processing
Right to object to the processing of personal data
Right to data portability

If you want to review the data stored about you or request correction, you should send a written request to us and provide proof of your identity.

If you have given your consent for the processing of your data, you can withdraw your consent at any time.

Information About Children

Protecting the privacy of children is of utmost importance. We never collect or maintain information on our website about individuals we know are under the age of 15. If you believe we have collected personal data of a child under 15, please contact us, and we will delete the information.

Changes to the Policy

We update this privacy statement and data protection practices to ensure that they are up to date. We will notify you of any changes related to these practices on our website. If you have registered for our services, we will send you a notification of any significant changes made to these practices to the email address you provided. If you continue to use our website or services after receiving the notification, we will interpret it as your acceptance of our privacy policy.

This statement and privacy description were last updated on August 21, 2023.