Privacy Policy

This Privacy Policy explains how SisuDent Oy processes personal data when you use the website www.sisudent.fi, send a request through its forms, or contact SisuDent. SisuDent processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection legislation.

Controller and contact

• Controller: SisuDent Oy
• Business ID: 3570970-6
• Address: Veteraanintie 1B, Espoo, Finland
• Telephone: +358 45 157 5979
• Privacy contact: info@sisudent.fi

Please send all questions about this policy and all requests concerning your personal data to the privacy contact address.

Personal data we collect

SisuDent collects only the data that is needed to answer you and to run the website. The website forms are:

• Book a Free Meeting (also used as the contact step of the Solution Finder): first and last name, email, phone number, country, role, and the main reason for the meeting. Optional: WhatsApp number, company or clinic, professional or academic degree, preferred meeting method, preferred time, and an additional message. When you send the form from the Solution Finder, your answers in the Finder (role, situation, challenge) and the recommendation you received are attached.
• Request Consultation on a service page: first and last name, email, phone number, country, role, and the description of your current situation. Optional: the project type, the areas where you need support, operational challenges, expected goals, company or clinic, and WhatsApp number. The service you asked about is attached.
• Contact (on the Contact page and on product pages): first and last name, email, phone number, country, and your message. When you send the form from a product page, the product name and code are attached.

With every request, SisuDent stores the date and time, the page where the form was sent, and a record of your consent (the date and the version of this policy). The status of the request and SisuDent’s notes on how it was handled are added later. No IP address is stored with a request.

When you contact SisuDent by email or telephone, SisuDent processes the information you give in that message or call. When you visit the website, technical data (such as your IP address, browser type, and the pages requested) is processed by the web server to deliver the website and protect it from misuse. Statistics on the use of the website are collected only with your consent (see Website statistics).

Purposes and legal bases

• Answering your request — arranging a meeting, answering a consultation request or a message, and following up on it. Legal basis: your consent given in the form (GDPR Article 6(1)(a)) and, where your request concerns a possible agreement with SisuDent, steps taken at your request before entering into a contract (Article 6(1)(b)).
• Customer relationship and agreements — when a request leads to an agreement, the data is used to deliver the agreed services or products. Legal basis: contract (Article 6(1)(b)) and legal obligations such as accounting (Article 6(1)(c)).
• Security of the website — preventing spam and misuse of the forms and keeping the website available. Legal basis: SisuDent’s legitimate interest in a secure website (Article 6(1)(f)). Spam protection uses a short-lived, non-reversible code derived from the IP address that expires after one hour; the IP address itself is not stored.
• Website statistics — understanding how the website is used in order to improve it. Legal basis: your consent (Article 6(1)(a); section 205 of the Finnish Act on Electronic Communications Services).

SisuDent does not sell personal data, does not use it for advertising, and does not make decisions about you based solely on automated processing. The Solution Finder shows its recommendation from your answers in your browser; the answers are sent to SisuDent only if you send the meeting request.

Who processes the data

Requests are stored in the website’s database and sent by email to info@sisudent.fi. Only authorized SisuDent personnel can read them. SisuDent uses the following service providers, who process personal data on SisuDent’s behalf:

• Web hosting and email — FastComet: hosting of the website and its database, and the info@sisudent.fi mailbox, through which the website also sends its emails. The website is hosted in a data centre in Frankfurt, Germany. The technical server access logs, which include IP addresses, are kept for at most 30 days for security and troubleshooting and are then deleted automatically.
• Google — if you write to sisudentoy@gmail.com, the message is processed by Google as the provider of the Gmail service. Google Analytics is used only with your consent (see below), and Google Maps only when you choose to show the map.

Personal data may also be disclosed to authorities when the law requires it.

Website statistics, cookies, and maps

The website uses Google Analytics 4 (Google Ireland Limited) to produce statistics on how the website is used, such as pages viewed and the general type of device. Google Analytics is loaded only after you accept statistics cookies in the cookie banner. If you reject them or make no choice, no statistics are collected. Google Analytics 4 does not store IP addresses. You can change your choice at any time with “Cookie settings” at the bottom of every page.

The map on the website is a picture until you select “Show map”. Only then is the map loaded from Google Maps, and Google receives data such as your IP address. The fonts of the website are delivered from SisuDent’s own server, so no data is sent to a font service.

The cookies and their purposes are listed in the Cookie Policy. Links to SisuDent’s social media profiles (LinkedIn, Instagram, Facebook, YouTube) open the services of those companies; their own privacy policies apply there.

Transfers outside the EU and EEA

Google may process data in the United States. Such transfers are based on the EU–US Data Privacy Framework, under which Google LLC is certified, and on the European Commission’s standard contractual clauses. The website, its database, and the info@sisudent.fi mailbox are hosted in the EU (Frankfurt, Germany). SisuDent does not otherwise transfer personal data outside the EU and EEA.

How long the data is kept

• Requests sent through the website forms without a customer account are deleted automatically 24 months after the last activity on the request (the last change of its status). Requests linked to a customer account are kept as long as the account exists.
• Email delivery records of the website (date, recipient, subject, and status, without the content of the form) are deleted after 14 days.
• Data of customers with an agreement is kept for as long as the customer relationship continues and, after that, as long as Finnish accounting and tax legislation requires.
• Website statistics are kept in Google Analytics for the shortest retention period the service offers.

Your rights

Under the GDPR you have the right to:

• access the personal data SisuDent holds about you;
• have incorrect data corrected;
• have your data erased or its processing restricted;
• object to processing that is based on SisuDent’s legitimate interest;
• receive the data you have given in a commonly used format (data portability);
• withdraw your consent at any time — the withdrawal does not affect processing that took place before it.

To use your rights, write to info@sisudent.fi. SisuDent answers within one month. You also have the right to lodge a complaint with the supervisory authority, the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

How the data is protected

The website is used over an encrypted connection (HTTPS). Requests are stored in a part of the website that is not public, and only authorized SisuDent personnel can access it with personal user accounts. The forms collect only the data listed in this policy.

Changes to this policy

SisuDent updates this policy when its processing of personal data changes. The date of the latest update is shown at the top of this page. A request records the version of the policy that was in force when you sent it.