1. Data Controller
Datalystics Oy
Business ID: 3421151-9
Location: Siilinjärvi, Finland
Email: support@datalystics.fi
This privacy statement concerns visitors to Datalystics Oy's public website and users of its customer portal.
2. Groups of Data Subjects
- Visitors to Datalystics Oy's public website.
- Employees and other designated users of customer organizations who have access to the Datalystics Oy portal through SSO authentication.
- Contact persons for support requests and technical customer service.
3. Categories of Personal Data Collected
We collect only the data necessary for the use of the service:
3.1 Basic Information
- Name
- Email address
- Organization
- User role
3.2 Login and Authentication Data
- SSO identifier (from customer's identity management)
- Session identifiers
3.3 Usage and Log Data
- Login times
- IP addresses
- Technical actions performed in the portal
- Error and event logs
3.4 Technical Device Data
- Browser and operating system
- Device type
- Cookie identifiers
3.5 Public Website Measurement Data
- Page and referrer URLs and event timestamps
- Google Ads conversion and cookie identifiers
- IP address and browser or device information transmitted to the measurement provider
4. Sources of Personal Data
- Information is primarily obtained from the user themselves during SSO login
- From the customer organization's identity management
- Automatically during service use (log data and technical data)
5. Purposes of Personal Data Processing
Personal data is processed for the following purposes:
- Creating and managing user accounts
- Providing the service and technical maintenance
- Ensuring information security and preventing misuse
- Monitoring service operation and resolving error situations
- Measuring cookie-free active time on public pages for service development
- Measuring optional advertising performance when the visitor has consented
- Fulfilling legal obligations
6. Legal Basis for Processing (GDPR Article 6)
- Contract: Providing the service to data subjects
- Legitimate interest: Information security, service development, technical monitoring and cookie-free public-page measurement
- Consent: Optional analytics cookies and Google Ads conversion measurement on public pages
- Legal obligation: Accounting, authority requests
7. Recipients of Personal Data
Personal data is processed only by:
- Datalystics Oy's own personnel
- Trusted technical service providers (e.g., cloud services)
- Google Ireland Limited when a public-site visitor consents to Google Ads conversion measurement
- Authorities in situations required by law
All personal data processors act on behalf of Datalystics Oy based on written data processing agreements.
8. Data Retention Period
- User accounts: deleted no later than 12 months after the termination of the customer agreement
- Usage and log data: retained for a maximum of 12 months
- Anonymous cookie-consent audit evidence: retained for 395 days
- Google Ads first-party conversion cookies: retained for up to 90 days
- Backups: rotate for a maximum of 180 days
- Support requests: retained for a maximum of 3 years
Data is deleted or anonymized regularly.
9. Transfer of Data Outside the EU/EEA
The service is hosted in the Microsoft Azure North Europe region (EU/EEA).
Microsoft may process personal data from outside the EU/EEA in certain support situations. In such cases, transfers are based on Standard Contractual Clauses (SCC) approved by the EU Commission and other safeguards required by GDPR.
Google may process public-site measurement data outside the EU/EEA. Transfers rely on an applicable adequacy decision or the European Commission's Standard Contractual Clauses and supplementary safeguards.
10. Cookies and Tracking Technologies
The service uses:
- Necessary functional cookies
- Security-related cookies
- Cookie-free public-page measurement that does not use browser storage or track visitors between pages
- No separate analytics-cookie service is currently loaded; any future analytics cookies would require consent
- Optional Google Ads conversion cookies on public pages only
Optional cookies are based on consent given through the cookie banner. The user can change or withdraw consent at any time through the cookie tool.
11. Automated Decision-Making and Profiling
The service does not perform automated decision-making or profiling that would have significant legal effects on data subjects.
12. Protection of Personal Data
The following protective measures are in place, among others:
- Encrypted data transfer (TLS)
- Encrypted storage
- Restricted access rights
- Logging and monitoring
- Regular backups
13. Data Subject Rights
The data subject has the right to:
- Access their own data
- Rectify incorrect data
- Request erasure of their data
- Restrict processing
- Object to processing
- Transfer data from one system to another
- Withdraw consent
- Lodge a complaint with the Data Protection Ombudsman's Office
Requests regarding rights can be sent to:
📧 support@datalystics.fi
14. Minor Users
The service is intended for business customers and their employees. The customer organization is responsible as the data controller for the processing of data of any minor users.
15. Changes to the Privacy Statement
The privacy statement may be updated. Changes will be published on this page and the date will be updated visibly.
16. Contact Information
Datalystics Oy
📧 support@datalystics.fi
📍 Siilinjärvi, Finland