G-Works privacy policy

In this Privacy Policy, we explain how we process your data if you are our customer, a prospective customer, a job applicant, or a visitor to our website. This Privacy Policy has been prepared in accordance with the Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). This Privacy Policy was last updated on June 1, 2023.

1. Data Controller

Company: G-Works
Business ID: 2359498-0
Address: Salomonkatu 17 D, 00100 Helsinki
Email: hello@gworks.fi

Contact person for matters related to the registry
Valtteri Ahde
valtteri@gworks.fi
044 346 9145

Name of the register
G-Works Oy’s customer register, marketing register, and online service user register

2. Purpose of Processing Personal Data

Personal data is used, among other things,

• to communicate with our customers and potential customers
• recruitment
• general maintenance of customer relationships
• to develop our products and operations
• to improve the user experience
• to better target our digital marketing

3. Data Contained in the Registry

We use the following personal data depending on whether you are our customer, a potential customer, or a job applicant.

Information we collect from our customers and potential customers for communication and business relationship management:

• Name, email address, phone number, street address, ZIP code, and country
• Company name, person’s role in the company
• Information about services ordered from G-Works, billing information, and other information related to the customer relationship and ordered services
• Information about your computer and your visit to this website, such as IP address, geographic location, browser type, traffic source, duration of visit, and pages viewed

Information we collect from job applicants during the recruitment process:

• Name, email address, phone number, street address, ZIP code, and country
• Job application, resume, portfolio, and other information that the job applicant has submitted to us
• Any links to the job applicant’s social media profiles
• Information obtained through interviews and other discussions related to the position applied for
• Information about your computer and your visit to this website, such as IP address, geographic location, browser type, traffic source, duration of visit, and pages viewed

4. Regular sources of information

The data stored in the registry is obtained from the data subject themselves through the following channels, among others: via email, by phone, through website forms, during customer meetings, through social media services, through contracts, and through other channels where the data subject provides their information.

5. Regular Disclosures and Transfer of Data

Data is not routinely disclosed to third parties. Data may be transferred to service providers selected by the data controller, who process the data on behalf of the data controller. In such transfers, the data controller has ensured that data protection laws are complied with by the service providers in question. Data may also be transferred by the data controller outside the EU or the EEA.

6. Data Retention Period

Personal data will be retained for as long as necessary for the purpose for which the data is used. When the data is no longer needed, it will be anonymized or deleted.

7. Principles of Data Protection

We process personal data confidentially and implement appropriate technical and organizational security measures to protect personal data from unauthorized access, loss, misuse, or other unlawful processing. Access to personal data is restricted to only those persons who need it, and they are bound by a duty of confidentiality.

8. Right of Access and Right to Request Correction

Every individual listed in the registry has the right to review their data stored in the registry and to request the correction of any inaccurate data, the completion of incomplete data, and the deletion of unnecessary data.

If a person wishes to review the data stored about them or request a correction, the request must be submitted in writing to the data controller. If necessary, the data controller may ask the person making the request to verify their identity. The data controller will respond to the customer within the timeframe specified in the EU General Data Protection Regulation (generally within one month).

9. Other Rights Related to the Processing of Personal Data

Data subjects have the right to request the deletion of their personal data from the register (“right to be forgotten”), and they also have other rights under the EU General Data Protection Regulation, such as the right to restrict the processing of personal data in certain situations. Such requests must be submitted in writing to the data controller. The data controller may ask the person making the request to verify their identity. The data controller will respond to the customer within the timeframe specified in the EU General Data Protection Regulation, typically within one month.

10. Cookies

Cookies are small text files that allow us to track a visitor’s behavior on the website. We use cookies on our website to improve the visitor’s experience on our site. In addition, cookies are used to personalize digital advertising and analyze visitor traffic.

If a visitor does not wish to use cookies, they can opt out of cookies via the cookie consent form. Our website does not store cookies on visitors’ devices until they have given their consent via the cookie prompt.