Privacy Policy
March 10, 2025
Privacy protects your ("you"; "data subject") rights and freedoms in the processing of personal data. The purpose of privacy is to define when and under what conditions personal data can be processed. This privacy policy ("Privacy Policy") explains in detail how SwiftDial Oy ("we"; "us"; "our") collects, uses, and discloses your personal data.
1. General Information
SwiftDial Oy's Privacy Policy explains how we collect, use and disclose personal data and ensure their protection.
This Privacy Policy applies to the processing of personal data that we perform. The Privacy Policy does not cover third-party websites, applications, software, products, or services that integrate with our services or that are linked to us or our services.
SwiftDial Oy collects and processes personal data of company representatives as part of B2B sales processes. The data is transferred to the CRM system for lead management, marketing, and contact purposes.
We act as both a data controller and a data processor depending on the situation. As a data controller when we determine the purposes and means of processing (for example, for prospective customers or website visitors), in which case HubSpot acts as a processor. We act as a processor when we perform processing on behalf of our customers based on their instructions, in which case the customer acts as the data controller.
2. Types of Personal Data We Collect
As part of our business, we collect and use your personal data only for the purposes mentioned in this Privacy Policy.
We collect and process only necessary information, such as names, contact details, and data available from public sources. We do not process sensitive data unless required by legislation or provided by the user themselves.
Data processing is based on legitimate interest. The company's business need (customer acquisition) does not override the data subject's fundamental rights. The person is the subject of professional contact in their role within the company.
We collect limited personal data about the role of the data subject in a company from publicly available sources. Such personal data is limited to basic information, such as name, title, position, country, and contact details, which are publicly available from the legal entities concerned. Public sources include, for example, the Patent and Registration Office, company websites, press releases, and other source material published by the company or its representatives.
We monitor the following information about the use of our services:
Cookies. When you browse our websites, we collect your cookie information, including advertising identifier. More information about cookie-related purposes can be found in our Cookie Policy.
We may also process personal data to comply with obligations imposed by applicable law, regulations, and decisions issued by authorities. Such examples of legal obligations that require the processing of personal data may include:
- prevention, detection, and investigation of fraud
- accounting and tax regulations
- authority reporting
- risk management obligations
- other service or product-specific legislative obligations
- labor law obligations
Electronic direct marketing and communication via email. We may send you electronic direct marketing, such as newsletters, information about new products, and information about user surveys and trials via email. You can opt out of such electronic direct marketing or communication at any time by replying to the message or contacting us directly.
Sensitive data. We do not collect or have access to any special categories of personal data ("sensitive data") as defined in Article 9 of the GDPR, unless you decide to provide us with such data or mandatory legislation, such as labor law, requires it.
3. Retention of Personal Data
We retain your personal data in our CRM system only as long as such personal data is needed for the purposes described in this Privacy Policy or to fulfill legal obligations.
4. Data Sharing and Disclosure
We store your data in databases located in the EU/EEA area. However, some of our third-party providers may be located outside the EU area, including the United States.
4.1 Sharing Your Personal Data
We share your data in the following ways:
Our third-party providers, who provide us with cloud-based IT and business support services, may need to process your data. All such third parties operate under contract and act on our behalf.
Competent authorities. When necessary, in response to a legal process or request from a competent authority in accordance with applicable laws, or in connection with legal proceedings or processes.
Mergers, acquisitions, or sale of assets. When necessary, as part of a merger, acquisition, sale of assets (such as service agreements), or transfer of service to a group company or another company.
Third-party advertising channels. When our digital marketing activities utilize features of various third-party advertising channels, we may target you by uploading your account information (e.g., encrypted email address or phone number) or advertising identifier to that platform. We may also use third-party tracking platforms that collect information about how users interact with our advertisements for ad targeting and impact assessment. Such third parties operate under contract and act on our behalf and include data transfers to partners located in the United States.
When transferring and disclosing your data outside the EU/EEA in the situations mentioned above, where local law may not provide the same level of protection, we comply with applicable legal requirements to provide adequate safeguards for such transfer, using e.g., the European Commission's Standard Contractual Clauses (SCCs).
5. Your Rights
You have the right to control the processing of your personal data by using the rights listed below:
- Right of access: you can obtain a copy of your personal data that we store in our systems;
- Right to rectification: you can rectify inaccurate personal data that we process about you;
- Right to erasure ('right to be forgotten'): you can request us to delete your personal data;
- Right to restriction of processing: you can request us to restrict the processing of your personal data;
- Right to data portability: you can request us to provide you with a copy of your personal data in a structured, commonly used, and machine-readable format;
- Right to object: you can request us to stop processing your personal data;
- Right to withdraw consent: you have the right to withdraw your consent if you have given such;
- Right to lodge a complaint: you can make a complaint about the processing of your personal data to the local data protection authority. For more information, visit https://tietosuoja.fi/en/home.
If you wish to exercise any of your rights, please contact us by email at miska@swiftdial.ai or by mail (our postal address can be found at the end of this privacy policy) and explain your request in detail.
6. Security
We use various technical and organizational methods and security measures to try to ensure an adequate level of data security and prevent the accidental loss and unauthorized access, use, alteration, and disclosure of your personal data.
Only personnel with a work-related need have access to your personal data. Role-based access control and encryption are in use.
7. Contact Information
For questions and information requests, please contact us by email at miska@swiftdial.ai or by mail:
Keilaranta 1 (2nd floor), 02150 Espoo, Finland
SwiftDial Oy