Privacy at a glance
Reflector Oy (Business ID 2283410-2, Itämerenkatu 3 A, 00180 Helsinki) processes personal data in accordance with the EU General Data Protection Regulation. Questions and requests: [email protected].
| Data subjects | Purpose | Legal basis | Retention |
| Customers and partners | Customer relationship, billing, sales, and marketing | Contract, legitimate interest, legal obligation | Customer relationship + 3 years; accounting records 6–10 years |
| Website visitors | Website functionality, analytics, and advertising | Consent (cookies), legitimate interest | According to the cookie policy |
| Job applicants | Recruitment | Pre-contractual measures, legitimate interest, consent | 2 years from the end of the recruitment process |
We do not sell data or engage in automated decision-making. You have the right to access, rectify, and erase your data, restrict and object to processing, opt out of direct marketing, and withdraw your consent. You may lodge a complaint with the Data Protection Ombudsman.
Detailed information
Customers and partners
We process the names, organizations, roles, and professional contact details of contact persons, as well as billing information, customer relationship and communication history, and marketing consents and opt-outs. We obtain this information from you, your organization, or public sources such as company websites and LinkedIn.
We market our services to companies based on legitimate interest. We have assessed that our interest does not override your rights, as marketing is targeted at professionals in relation to their work duties and you can opt out at any time. You can unsubscribe from direct marketing at any time via the link in the newsletter or by contacting [email protected]. Accounting records are kept in accordance with the Accounting Act: supporting documents for 6 years and accounting books for 10 years.
Website visitors
We use cookies for website functionality, visitor statistics (Google Analytics), and marketing (Google Ads, Leadfeeder). Non-essential cookies are only enabled with your consent, and you can change your preferences via the cookie icon at the bottom of the page. Leadfeeder identifies the visitor’s organization from the IP address, not the individual.
Cookies and retention periods
We use information from the contact form to respond to inquiries and delete it within [12 months], unless the contact leads to a customer relationship.
Job applicants
We process your contact details, application and CV, interview notes, and information regarding the progress of the recruitment. Additionally, we process information you have published for professional purposes, such as your LinkedIn profile. We cannot process your application without this information.
We collect information from you. We only contact references and conduct suitability assessments with your consent (Act on the Protection of Privacy in Working Life 759/2004). If the position requires a credit check or security clearance, we will inform you in advance. If our client requires it, we may ask the selected candidate for a drug test certificate. We only receive the certificate, not the test results. We may also use recruitment consultants who process your data on our behalf.
We retain applications for 2 years after the end of the recruitment process for potential legal claims. With your consent, we may also consider your application for other positions for a period of 6 months. If you are selected, your data will be transferred to processing in accordance with the employee privacy policy.
Service providers and transfers
We use services such as Microsoft 365, Visma Severa, and Mailchimp, as well as the financial management service provider Talousverkko. We have data processing agreements in place with them in accordance with the GDPR. If data is transferred outside the EU or EEA, the transfer is based on the EU-U.S. Data Privacy Framework or the Commission’s Standard Contractual Clauses. We only disclose information to authorities when required by law.
Your rights and data security
Please send your requests to [email protected]. We will respond within one month. The right to data portability applies to processing based on consent or contract. Complaints are handled by the Office of the Data Protection Ombudsman (tietosuoja.fi).
Data is only processed by those who need it for their work, and our systems are protected by multi-factor authentication.