Privacy policy
Last updated: 31 August 2026
1. Controller and contact details
Controller: Atenos Oy, business ID 3618636-1, Töölönkatu 11–15 A 120 B, 00100 Helsinki, Finland.
Data protection contact: privacy@atenos.io.
2. What personal data we process
We process personal data in these situations:
- Website visitors: none. The website uses no cookies (see section 9).
- Enquiries and prospects: name, email, phone, organisation, role, and enquiry content.
- Event registrations: the session you choose, name, email, phone, organisation, role, who invited you, and whether you object to appearing in photographs.
- Recruitment: the information applicants provide.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Operating and improving the website | Legitimate interest |
| Responding to enquiries and sales | Legitimate interest / pre-contractual steps |
| Marketing communications | Consent or legitimate interest |
| Organising an event you registered for | Legitimate interest |
| Photography at an event for Atenos communications | Legitimate interest, subject to your objection |
| Recruitment | Pre-contractual steps / consent |
4. Where the data comes from
We collect this data directly from you, through your enquiries, event registrations, and job applications.
5. Recipients and sub-processors
We share data with service providers (sub-processors), such as cloud hosting and communication tools. Request the current list from the contact in section 1.
When an event is held at another organisation's premises, we give that organisation the attendee list it needs to admit you to the building. For the autumn 2026 leadership events, that organisation is WithSecure, Välimerenkatu 1, Helsinki.
We photograph our events and may use the photographs in Atenos communications. Tell us on the registration form, or at the venue, if you prefer not to appear in them.
6. Transfers outside the EU/EEA
We store personal data within the EU/EEA. If we transfer it outside the EU/EEA, we rely on a valid GDPR transfer basis. That includes the EU Standard Contractual Clauses and any necessary safeguards.
7. How long we keep data
We keep personal data only as long as we need it, or as the law requires.
| Data category | Purpose | Retention period |
|---|---|---|
| Enquiry and prospect data (name, email, phone, organisation, role, enquiry content) | Responding to enquiries and sales | 24 months from the last contact, then deleted or anonymised |
| Marketing contact data | Marketing communications | Until you withdraw consent or unsubscribe. We then keep a suppression record to honour the opt-out. |
| Event registration data (session, name, email, phone, organisation, role, invitation source) | Organising an event you registered for | 6 months after the event, then deleted |
| An objection to appearing in event photographs | Honouring the objection | Kept as a suppression record for as long as we use photographs from that event, so the objection outlives the rest of the registration |
| Applicant data (recruitment) | Recruitment | 12 months after recruitment closes, unless the applicant agrees to join our talent pool |
8. Your rights
You can access your data, correct or erase it, restrict or object to processing, receive a portable copy, and withdraw consent. To use these rights, contact us using the details in section 1.
9. Cookies
The website does not use cookies.
10. Customer data in the Atenos product
When a customer organisation uses the Atenos product, Atenos acts as the processor of the personal data the customer puts in. The customer is the controller. Our data processing agreement (DPA) with the customer governs that processing. This policy does not cover it.
11. Changes to this policy
We update this policy when needed. The current version is on our website, and the date at the top shows the last update.
12. Your right to complain
You have the right to lodge a complaint with a supervisory authority. In Finland, that authority is the Office of the Data Protection Ombudsman.