Profinder Services Privacy Notice

Last updates 5 May 2026

This privacy notice describes how Profinder processes personal data when providing its customers with various data processing services, contact information services, and other information services. Profinder complies in all processing of personal data with applicable data protection legislation, including the European Union General Data Protection Regulation (EU 2016/679) and the supplementary national Data Protection Act (1050/2018), as well as the Act on Electronic Communications Services (917/2014).

Profinder as a service provider to corporate and community customers

Profinder provides its corporate and community customers (“Customer”) with various services through which the Customer may obtain, from Profinder’s databases, target group data consisting of company information and/or Profinder Directory Information suitable for its needs (“Services”). The Customer may use the target group data obtained through the Services for purposes agreed upon in the Services agreement entered into between the Customer and Profinder. As part of the Services, Profinder also provides register updates as well as information services from the Digital and Population Data Services Agency. Depending on the specific content of the Services, Profinder may either disclose personal data to the Customer or process personal data provided by the Customer on behalf of the Customer as a processor.

With regard to Profinder’s contact information service (“Profinder Directory Information”), Profinder acts as a provider of a contact information service as referred to in Chapter 23 of the Act on Electronic Communications Services (917/2014), and processes such data as a controller in accordance with the requirements defined in that chapter and has carried out a data protection impact assessment concerning the processing. Profinder Directory Information consists of name, address and telephone number. Through the Services, Profinder also provides information on company decision-makers. The register containing company decision-maker information (also “Profinder Decision-Maker Register”) contains personal data relating to persons who, by virtue of their position, make decisions as part of their duties on behalf of their employer.

When obtaining target group data through the Services, the Customer, as controller, determines the purposes and means of processing of the target group data it has obtained. In such cases, this constitutes a disclosure of personal data under data protection legislation from one controller (Profinder) to another controller (Customer) for the Customer’s own purposes. At the Customer’s request, Profinder may also process the Customer’s personal data register as a processor. For example, the Customer may further filter personal data obtained through the Services using data obtained from other sources. These other sources may include, for example, the Customer’s existing customer register or public data maintained by municipalities and cities on their building stock. Profinder may also carry out such filtering on behalf of the Customer, acting as a processor on behalf of and for the account of the Customer.

Controller’s contact details

CONTROLLER

Leadventure Oy (Profinder)

Address:
Ruoholahdenkatu 21 A
00180 Helsinki

Data Protection Officer Tero Järvinen: tuki@profinder.fi

CONTACT DETAILS FOR MATTERS RELATING TO DATA SUBJECT RIGHTS

Data subjects may contact Profinder regarding matters relating to their rights via the following page:

https://gdpr.profinder.fi

Personal data processed, purposes of processing and legal bases

CONTACT INFORMATION SERVICE AND PROFINDER DIRECTORY INFORMATION

A contact information service refers to a service as defined in Chapter 23 of the Act on Electronic Communications Services (917/2014). When acting as a provider of a contact information service, we process, as controller, the personal data referred to in Section 195 of the Act on Electronic Communications Services. This personal data includes the name, address and telephone number of the subscriber who has entered into a contract with a telecommunications operator for the use of a telephone network connection, and in this notice the register consisting of such contact details is referred to as Profinder Directory Information.

We process Profinder Directory Information to create and provide a contact information service. The processing of Profinder Directory Information is based on Section 197 of the Act on Electronic Communications Services, under which a provider of a contact information service has the right to process the above-mentioned contact details in order to create and provide the contact information service. The processing of personal data included in directory information is therefore necessary for the purposes of a legitimate interest.

COMPANY DECISION-MAKER INFORMATION

In addition to Profinder Directory Information, we process company decision-maker information. With regard to company decision-maker information, the legal basis for processing is the legitimate interest of Profinder and its Customers in conducting direct marketing. Profinder has carried out a balancing test concerning its legitimate interest. It is customary for companies and communities to market their services and products to other companies and communities. The interests and fundamental rights and freedoms of individuals are respected, no special categories of personal data are processed, and individuals can reasonably expect such processing. An individual has the right at any time to object to the processing of their personal data for direct marketing purposes. Company decision-maker information includes the following contact persons and data relating to the company/community/establishment concerning the data subject’s duties, position or activities in business or in a role, and is used for sending information related to their work duties and for direct marketing:

  • name and contact details (address, email address, telephone number);
  • role and position in the company/community;
  • possible consents and prohibitions relating to marketing;
  • website of the company/community; and
  • data relating to the company/community/establishment (name, business ID, address, switchboard telephone number).

REGULAR SOURCES OF DATA

The personal data included in Profinder Directory Information has been obtained from the nationwide subscriber database of Suomen Numeropalvelu Oy. The data in the subscriber database of Suomen Numeropalvelu Oy originates from telecommunications operators, which are obliged under Chapter 23 of the Act on Electronic Communications Services to disclose contact details for the provision of contact information services.

Company decision-maker information is obtained from Suomen Asiakastieto Oy, the nationwide subscriber database of Suomen Numeropalvelu Oy, or from public data sources.

Consumer data that is not Profinder Directory Information consists of statistical data derived from Statistics Finland and other public sources. Statistical data is not personal data.

TRANSFERS AND DISCLOSURES OF PERSONAL DATA

It is inherent to contact information services that contact details processed in the service are disclosed to parties using the service. We regularly disclose Profinder Directory Information and company decision-maker information to our Customers using the Services.

In maintaining and providing the Services, we use processors for the processing of personal data for the purposes described in this privacy notice. These processors process personal data for Profinder’s purposes on the basis of an agreement with Profinder:

  • Hetzner Online GmbH, Germany, which provides hosting services;
  • ICT support service provider(s) located within the EU.

TRANSFERS OF PERSONAL DATA OUTSIDE THE EEA

Profinder, as controller, does not transfer personal data outside the EU or EEA.

RETENTION PERIOD WHEN PROFINDER ACTS AS CONTROLLER

The retention period for personal data depends on the type of data and the basis for processing. Where Profinder acts as controller, Profinder has defined appropriate review and retention periods for different categories of personal data.

Profinder Directory Information and company decision-maker information are updated according to their purpose generally on a weekly basis, and deletion takes place generally at intervals ranging from a few days to six months. Log data and data relating to data subject requests and the exercise of data subject rights, as well as data relating to disclosures of personal data to Customers, may be retained thereafter for a longer period in accordance with applicable legislation for the purpose of enabling and verifying the exercise of data subject rights.

We carry out checks and delete personal data from the register regularly by comparing it with source registers.

The contact details of an individual data subject are deleted if the data subject prohibits the inclusion of their data or requests deletion of their data. In such cases, however, we may retain information on the data subject’s prohibition or deletion request in order to ensure that the personal data will no longer be included in Profinder’s register, as well as to verify that the data subject’s request has been fulfilled.

YOUR RIGHTS

Data protection legislation provides for several rights through which a natural person, i.e. a data subject, can influence the processing of their personal data. These rights, such as the right of access, the right to rectification, the right to object to processing and the right to be forgotten, are described in more detail below. The rights available to a data subject depend on the legal basis for processing and other details of the processing.

Please note that it is the responsibility of the controller to ensure that the rights of the data subject are fully implemented, and therefore requests relating to the exercise of data subject rights must be addressed to the controller. To the extent that Profinder processes, as controller, personal data included in Profinder Directory Information or the Profinder Decision-Maker Register, you may address your requests regarding the exercise of rights to us using the contact details provided above under “Contact details for matters relating to data subject rights”.

To the extent that Profinder’s Customer acts as controller, you may address your requests regarding the exercise of rights to the Customer. The Customer independently determines its policies for the processing of personal data.

To the extent that the processing concerns personal data processed by Profinder as a processor, Profinder is obliged to assist the controller in implementing requests concerning the exercise of rights, but we cannot take action in response to such requests unless the controller specifically instructs us to do so. Therefore, if you address a request concerning the exercise of your rights directly to us, we will forward it to the controller in accordance with applicable legislation.

As a data subject, you have the rights described below when we act as controller:

  • Right of access: You have the right to obtain confirmation as to whether we process your personal data and the right to access the personal data concerning you that we process, as well as, if you wish, to obtain a copy of such data.
  • Right to rectification: You have the right to have inaccurate or incorrect personal data concerning you rectified and to have incomplete personal data completed.
  • Right to be forgotten: In certain situations, you have the right to have personal data concerning you erased, for example if the legal basis for processing no longer exists or if you have prohibited the inclusion and disclosure of your personal data.
  • Right to restriction of processing: In certain situations specified in data protection legislation, you may have the right to have Profinder, as controller, restrict the processing of personal data concerning you.
  • Right to object to processing: In certain situations, you may have the right to object to the processing of your personal data unless Profinder, as controller, demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms. Profinder may also, despite your objection, process your personal data if it is necessary for the establishment, exercise or defence of legal claims.

You always have the right to object to the processing of your personal data for direct marketing purposes, including profiling insofar as it relates to direct marketing, as well as the right to prohibit the inclusion and disclosure of your personal data, in whole or in part, in the contact information service.

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Profinder does not use such automated decision-making.

If you consider that we have processed your personal data in breach of this privacy notice or applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority, in Finland the Data Protection Ombudsman, in accordance with the instructions provided by the authority. The website of the Data Protection Ombudsman can be found here.

Companies and other entities whose data is included in Profinder’s registers also have the right to have their data deleted and incorrect data corrected.

CHANGES

We continuously develop our Services, and as a result of these changes we may from time to time make amendments to this privacy notice.