Customer register privacy statement

1. Controller

T-Media Oy (1099844-1)

Eteläinen Makasiinikatu 4

00130 Helsinki


2. Person in charge of matters related to the register

Eila Lahti, Data Sourcing Manager


3. Register name

T-Media customer register


4. Legal basis and purpose of processing personal data

The processing of personal data is based on T-Media’s legitimate interest. The data collected on customers are used for the purpose of managing customer accounts and marketing.


5. Data content of the register

The data collected on customers include data necessary for managing customer accounts and marketing purposes, such as the names and contact details of contact persons and data related to orders and invoicing.

More specifically, the following data on customers and their contact persons are collected:

–       Name

–       E-mail address

–       Mobile and/or other phone number

–       Position

–       Organisation information

–       Business ID

–       Organisation address information

–       Order data

–       Quote data

–       Invoicing data

–       Communication data

In addition, the customers’ contact information is collected in a marketing register where data concerning companies and their contact persons are also stored.


6. Regular data sources

The contact and customer account data stored in the register are generated when the customer account is established and maintained. Personal data may be collected and updated from publicly available sources.


7. Register data protection principles and disclosure

Access to the data is restricted to the persons employed by T-Media, its subsidiaries and subcontractors maintaining customer accounts (e.g. accounting, invoicing, postal service providers) whose tasks require processing the data. We have ensured that all of our service providers comply with the Data Protection Act. All employees processing the data of the customer register are bound by an obligation of professional secrecy. The data are protected with appropriate safeguards: all computers and information systems are protected with technical measures. The data are not disclosed to third parties.


8. Transferring the data outside the European Union or the European Economic Area

T-Media uses the HubSpot service for the purpose of keeping the customer data register. HubSpot is active outside the EU in the United States, but it is listed on the list of Privacy Shield companies certified by the EU and the US and it complies with the EU’s General Data Protection Regulation. The data on the users specified in section 5 are stored in the HubSpot service. The privacy policy of HubSpot can be accessed on the company’s website:

No personal data are transferred outside the EU or the European Economic Area (excluding the aforementioned HubSpot service).


9. Rights of the data subject

According to the applicable data protection law, at any time, data subjects have the right to:

–       obtain information about the processing of their personal data;

–       inspect what information on them has been stored in the register;

–       request the rectification of inaccurate personal data or complementing incomplete personal data;

–       request the erasure of their personal data.

In order to exercise their aforementioned rights, data subjects must submit a related request by e-mail or in other written form to the company. The controller has the right to refuse to act on the request on grounds related to applicable law.


10. Data retention period

The personal data in the register are stored for as long as is necessary for fulfilling the purpose of collecting the personal data specified in this privacy statement.


11. Erasure of data

Data subjects have the right to prohibit the controller from processing their personal data for the purpose of keeping the marketing register. Such prohibitions can be made by e-mail to or submitted in other written form to the company.

The data stored in the register can be erased according to a request insofar as storing the data is not based on a contractual relationship or statutory obligation. The request can be made by e-mail to or submitted in other written form to the company.


12. Changes to this privacy statement

T-Media reserves the right to make changes to this privacy statement and related information. T-Media recommends data subjects to check this privacy statement regularly in order to learn about any changes to it.


This privacy statement was last updated on 21 September 2021.