Small Data Garden Oy is committed to processing personal data in accordance with this Privacy Policy and applicable law. We hope that our customers and users will read this Privacy Statement carefully.
1. Data Controller:
Small Data Garden Oy
Maantie 1
11130 Riihimäki
Business ID: 2815472-2
2. Contact person for the register
Small Data Garden Oy is available on weekdays from 9:00 to 16:00 for registry matters. Questions regarding the register can be sent by e-mail to the contact persons of the register or by letter to Small Data Garden Oy, Maantie 1, 11130 Riihimäki.
Contact person for matters regarding the register:
Ville Salminen
ville.salminen@smalldatagarden.fi.
3. Name of the register
The register’s name is Small Data Garden Oy’s customer and contact information register. The register includes the registers of cloud services, customer data management, financial management and ERP systems.
4. Purposes of processing personal data
The personal data used by Small Data Garden Oy is divided into data related to the management of orders, deliveries, maintenance and billing, data related to registration, use and maintenance of the service, data related to customer relationship management, development of our business and marketing.
The processing of personal data is based on a contractual relationship, consent or information given by the data subject, contractual relationship or obligation required by law.
The purpose of processing personal data is to maintain customer information for the purposes of service provision, delivery, maintenance and management as well as for targeted marketing and communication by e-mail or by telephone. We may process the data subject’s information to carry out electronic marketing activities or to share contact details with selected partners for direct marketing activities. We may also disclose information to our partners for the purposes of managing and administering deliveries and invoicing and for the management and maintenance of telecommunications.
In addition, telephone conversations with Small Data Garden Oy contact persons may be recorded. The recordings can also be used to verify telephone dealings on matters discussed and agreed.
The processing of personal data is based on Article 6(1)(b;c;e) of the EU General Data Protection Regulation.
5. What kind of information we collect
We only collect personal data from the data subject that is necessary for the predefined purposes. The purpose of use determines what information is collected from the data subject in which circumstances.
Small Data Garden Oy processes or may process the following data for the purposes described in this notice:
- Company name
- Company’s existing contracts
- Company’s contact details
- Company’s customer number
- Company’s contact persons
- First and last name of persons
- Contact details of persons (phone number, address and e-mail address)
- Title of person
- Language used by person
- Customer user management information, such as user IDs
- Software and hardware information and related usage data
- Measurement and conditions data collected by our services
- User feedback collected for our services
- Any marketing permissions and bans
- Marketing, promotional and customer relationship management information, such as contact details of the individual
- Information provided by the individual, such as during registration or by telephone
- Other information collected with the consent of the data subject or other information for which there is a legitimate basis.
- Recordings of telephone conversations.
In addition, our services use cookies for analytics and for preventing interruptions in the service.
6. Regular sources of information
Small Data Garden Oy collects data for its registers primarily from the data subject, either by telephone, online, social media, meetings or in some other way, for example by e-mail or through the contact form or information provided to our service. The register is regularly updated from information provided by the customer, from information collected by our service and from information otherwise obtained in the course of mutual contacts.
Small Data Garden may also collect and update information through public data sources such as company websites or commercial registers.
7. Data disclosures and transfers of data outside the EU or EEA
Data may be passed on to our partners in order to maintain customer relations and services. Small Data Garden Oy takes into account the data protection legislation and the limits set by it for data disclosures. Data will only be disclosed in those cases and to the extent necessary for the purposes for which the data is used and for the proper provision of services. Small Data Garden Oy will take appropriate security measures to ensure the protection of personal data when disclosures are made.
Data may also be transferred by the data controller outside the EU or EEA when using external service providers.
8. Retention period of personal data
Small Data Garden Oy will retain personal data collected in the register only for as long and to the extent necessary and permitted by law in relation to the original or compatible purposes for which the personal data was collected. The purposes for which personal data is used are described in section four (4).
As a general rule, personal data will be kept for a maximum of six (6) years from the date of the transaction recorded by the customer or contact person in the register. Exceptions to this are legal obligations such as the archiving of orders and contracts. In these cases data may be kept for a default period of ten (10) years.
Once the retention period has expired, Small Data Garden Oy will either destroy or delete the personal data or convert it into a form that no longer identifies the individual. The data will also be deleted from the register after the data subject has withdrawn his or her consent.
After the termination of the customer relationship, personal data may be processed, where necessary, to comply with applicable law. In addition, in the following cases, we may or are obliged to retain your data:
- Fulfilment of contractual obligations
- Long-term maintenance of products and services
- Compliance with a legal obligation
- Creating, presenting or defending a legal claim
Secure practices are followed in the destruction and deletion of data. In addition, Small Data Garden Oy regularly deletes information that is no longer necessary.
9. Right of inspection and right to request correction of information
Every person in the register has the right to check the data recorded in the register and to request the correction of any inaccurate data or the completion of incomplete data. If a person wishes to check or request the rectification of data stored about themselves, the request must be sent in writing to the data controller. The data controller may, if necessary, ask the applicant to prove his or her identity. The data controller will reply to the customer within the time limit laid down in the EU General Data Protection Regulation (ie, within one month).
10. Other rights relating to the processing of personal data
A data subject has the right to request the erasure of personal data concerning themselves from the register (“right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation, such as the restriction of the processing of personal data in certain circumstances. Requests should be sent in writing by e-mail to the data controller. The data controller may, if necessary, ask the applicant to prove his or her identity. The data controller will reply to the customer within the time limits set by the EU GDPR (ie, within one month).
11. Changes to the Privacy Policy
Small Data Garden Oy is constantly developing its business and among other things, Small Data Garden Oy reserves the right to change this Privacy Policy. Changes will take effect when we have published an updated Privacy Policy. Changes may be based on changes in legislation or new features in our services. Small Data Garden Oy also recommends that you review this Privacy Policy regularly.
This Privacy Policy was last updated on 21.5.2025.