Privacy policy
Last updated: 9 July 2026
1. Controller and contact details
Controller: Atenos Oy, business ID 3618636-1, Töölönkatu 11–15 A 120 B, 00100 Helsinki, Finland.
Data protection contact: privacy@atenos.io.
2. What personal data we process
We process personal data in these situations:
- Website visitors: none. The website uses no cookies (see section 9).
- Enquiries and prospects: name, email, phone, organisation, role, and enquiry content.
- Recruitment: the information applicants provide.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Operating and improving the website | Legitimate interest |
| Responding to enquiries and sales | Legitimate interest / pre-contractual steps |
| Marketing communications | Consent or legitimate interest |
| Recruitment | Pre-contractual steps / consent |
4. Where the data comes from
We collect this data directly from you, through your enquiries and job applications.
5. Recipients and sub-processors
We share data with service providers (sub-processors), such as cloud hosting and communication tools. Request the current list from the contact in section 1.
6. Transfers outside the EU/EEA
We store personal data within the EU/EEA. If we transfer it outside the EU/EEA, we rely on a valid GDPR transfer basis. That includes the EU Standard Contractual Clauses and any necessary safeguards.
7. How long we keep data
We keep personal data only as long as we need it, or as the law requires.
| Data category | Purpose | Retention period |
|---|---|---|
| Enquiry and prospect data (name, email, phone, organisation, role, enquiry content) | Responding to enquiries and sales | 24 months from the last contact, then deleted or anonymised |
| Marketing contact data | Marketing communications | Until you withdraw consent or unsubscribe. We then keep a suppression record to honour the opt-out. |
| Applicant data (recruitment) | Recruitment | 12 months after recruitment closes, unless the applicant agrees to join our talent pool |
8. Your rights
You can access your data, correct or erase it, restrict or object to processing, receive a portable copy, and withdraw consent. To use these rights, contact us using the details in section 1.
9. Cookies
The website does not use cookies.
10. Customer data in the Atenos product
When a customer organisation uses the Atenos product, Atenos acts as the processor of the personal data the customer puts in. The customer is the controller. Our data processing agreement (DPA) with the customer governs that processing. This policy does not cover it.
11. Changes to this policy
We update this policy when needed. The current version is on our website, and the date at the top shows the last update.
12. Your right to complain
You have the right to lodge a complaint with a supervisory authority. In Finland, that authority is the Office of the Data Protection Ombudsman.