This privacy notice applies to StreamPlay Oy’s customer, marketing, stakeholder, online service user, and partner registers and to the personal data stored in them. Personal data is processed in accordance with this privacy notice, applicable Finnish legislation, and the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
1. Data Controller
StreamPlay Oy Sarankulmankatu 12 B FI-33900 Tampere Finland Business ID: 2179474-3
We may process and store the following categories of personal data:
Name
Phone number
Email address
Postal address
Employer name
Job title
Communications, inquiries, and customer feedback
Information related to the use of our services
Technical data necessary for providing and securing our services
Consents and objections related to direct marketing
Other information necessary for the purposes of this register
4. Sources of Personal Data
Personal data is obtained from the following sources:
The data subject or the company they represent
Transactions and contract formation
The Finnish Business Information System (YTJ) and the Trade Register
Marketing data service providers
Providers of address and contact information
Credit information registers, where legally permitted
5. Purpose and Legal Basis for Processing
Personal data is processed for the following purposes:
Establishing and maintaining customer and partner relationships
Customer relationship management
B2B communication related to services, contracts, and cooperation
Customer communications and support
Analysis, statistics, and development of business operations, products, and services
Sales and marketing of StreamPlay Oy’s products and services
Legal Basis
The legal basis for processing is:
Performance of a contract, where applicable
Legitimate interest pursuant to Article 6(1)(f) GDPR
StreamPlay Oy’s legitimate interests consist of customer relationship management and B2B communication. The processing is limited to what is necessary for these purposes and does not override the rights or freedoms of the data subjects. Data subjects can object to processing based on legitimate interest at any time.
6. Data Retention Period
Personal data is retained for a maximum of five (5) years from the end of the customer or partner relationship or from the last meaningful interaction, unless a longer retention period is required by law or necessary for contractual or legal obligations.
7. Data Processors and Disclosure of Personal Data
Personal data is not disclosed to third parties for their own purposes without the data subject’s consent.
However, personal data may be processed on behalf of StreamPlay Oy by trusted service providers acting as data processors. These processors process personal data only under StreamPlay Oy’s instructions and are bound by data processing agreements in accordance with GDPR.
Hosting, email services, and related technical services are provided by Louhi Net Oy, which acts as a data processor for StreamPlay Oy.
8. Transfer of Data Outside the EU/EEA
Personal data is not transferred outside the European Union or the European Economic Area.
9. Rights of the Data Subject
The data subject has the following rights under GDPR:
Right of access: The right to know whether personal data is being processed and to access stored data
Right to rectification: The right to request correction of inaccurate or incomplete data
Right to erasure: The right to request deletion of personal data when there is no legal basis for retention
Right to restriction of processing: The right to request limitation of processing in certain situations
Right to object: The right to object to processing based on legitimate interest
Right to data portability: The right to receive provided personal data in a structured, commonly used, machine-readable format and to transfer it to another controller
Right to withdraw consent: Where processing is based on consent, consent may be withdrawn at any time
Right to lodge a complaint: The right to lodge a complaint with the supervisory authority
In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.
Requests regarding these rights should be submitted in writing to the data controller.
10. Automated Decision-Making and Profiling
StreamPlay Oy does not use automated decision-making or profiling as referred to in Article 22 GDPR.
11. Visits to Our Website and Cookies
StreamPlay Oy uses only strictly necessary cookies required for the technical functionality and security of its website.
No non-essential cookies are used
No tracking, profiling, or marketing cookies are employed
Cookie consent is therefore not required under applicable EU legislation
Users can manage cookies through their browser settings.
