Privacy Policy

Effective date: 11 November 2019
Last updated: [add update date if changed]

This Privacy Policy explains how Shevestments (“we”, “our”, “us”) collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

Shevestments Oy
Särkiniementie 3b
Contact person: Hanna Nyholm
Email: shevestments@shevestments.com

2. Name of the Register

Shevestments Customer and Marketing Register

3. Legal Basis for Processing

We process personal data on the following bases:

  • Your consent (e.g., newsletter subscriptions, downloads, event registrations)

  • Our legitimate interest (maintaining a customer relationship and marketing relevant services)

We do not use your data for automated decision-making or profiling.

4. Purpose of Processing

We process personal data in order to:

  • Maintain and manage customer relationships

  • Provide and improve our services

  • Communicate with customers and respond to inquiries

  • Send newsletters, updates, and marketing communications

  • Conduct surveys, research, analyses, and statistics

  • Run targeted marketing campaigns and remarketing using tools from Facebook, Google, and Instagram

5. Data We Collect

The register may include the following information:

  • Name

  • Company/organization

  • Contact details (phone number, email address, postal address)

  • Details of services and products ordered

  • Other information relevant to the customer relationship

6. Sources of Data

We collect personal data when you:

  • Fill in forms on our websites

  • Contact us by email, phone, or during customer meetings

  • Enter into an agreement or make a purchase

  • Subscribe to newsletters, guides, or other content

7. Data Sharing and Transfers

We do not regularly disclose data to third parties.
We may share personal data only:

  • With authorities, such as the police, when required by law

  • With debt collection agencies for payment recovery

  • With trusted service providers acting as data processors under a written contract. Processors are not permitted to use the data for their own purposes.

We do not transfer personal data outside the EU/EEA unless adequate safeguards are in place.

8. Data Retention

We retain personal data only as long as necessary to fulfil the purposes described in this policy or as required by law. After this, the data will be securely deleted or anonymized.

9. Data Security

We take appropriate technical and organizational measures to protect your personal data.

  • Data stored electronically is secured by passwords, firewalls, and other safeguards.

  • Physical and digital security of servers is maintained by our hosting provider.

  • Access to data is restricted to employees who need it for their work and who are bound by confidentiality obligations.

10. Your Rights

Under the GDPR, you have the following rights:

  • Right of access – to know what personal data we hold about you

  • Right to rectification – to request correction of inaccurate data

  • Right to erasure – to request deletion of your personal data

  • Right to restriction – to limit processing in certain situations

  • Right to object – to object to direct marketing or certain processing activities

  • Right to data portability – to receive your data in a structured, commonly used format

To exercise your rights, please contact us in writing at shevestments@shevestments.com. We may request proof of identity. We will respond within the timeframe required by GDPR (normally within one month).

11. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, and we encourage you to review it regularly.