Privacy policy

Last updated: 18 October 2026

1. Controller and contact details

Controller: Atenos Oy, business ID 3618636-1, Helsinki, Finland.

Data protection contact: privacy@atenos.io.

2. What personal data we process

We process personal data in these situations:

Website visitors: none. The website uses no cookies (see section 9).
Enquiries, waitlist registrations and prospects: name, email, phone, organisation, role, and enquiry content.
Event registrations: the session you choose, name, email, phone, organisation, role, who invited you, and whether you consent to appearing in photographs.
Recruitment: the information applicants provide.

3. Purposes and legal basis

Purpose	Legal basis
Operating and improving the website	Legitimate interest
Responding to enquiries and sales	Legitimate interest / pre-contractual steps
Marketing communications	Consent or legitimate interest
Organising an event you registered for	Legitimate interest
Photography at an event for Atenos communications	Consent
Recruitment	Pre-contractual steps / consent

4. Where the data comes from

We collect this data directly from you, through your enquiries, waitlist registrations, event registrations, and job applications.

5. Recipients and sub-processors

We share data with service providers (sub-processors), such as cloud hosting and communication tools. Request the current list from the contact in section 1.

When an event is held at another organisation’s premises, we give that organisation the attendee list it needs to admit you to the building. For the autumn 2026 leadership events, that organisation is WithSecure, Välimerenkatu 1, Helsinki.

We photograph our events and use the photographs in Atenos communications only with the consent you give on the registration form. You can withdraw your consent at any time by writing to privacy@atenos.io.

6. Transfers outside the EU/EEA

We store personal data within the EU/EEA. If we transfer it outside the EU/EEA, we rely on a valid GDPR transfer basis. That includes the EU Standard Contractual Clauses and any necessary safeguards.

7. How long we keep data

We keep personal data only as long as we need it, or as the law requires.

Data category	Purpose	Retention period
Enquiry, waitlist and prospect data (name, email, phone, organisation, role, enquiry content)	Responding to enquiries and sales	24 months from the last contact, then deleted or anonymised
Marketing contact data	Marketing communications	Until you withdraw consent or unsubscribe. We then keep a suppression record to honour the opt-out.
Event registration data (session, name, email, phone, organisation, role, invitation source)	Organising an event you registered for	6 months after the event, then deleted
Photography consent record for an event	Showing that you gave consent	Kept as a record of consent for as long as we use photographs from that event, so it outlives the rest of the registration
Applicant data (recruitment)	Recruitment	12 months after recruitment closes, unless the applicant agrees to join our talent pool

8. Your rights

You can access your data, correct or erase it, restrict or object to processing, receive a portable copy, and withdraw consent. To use these rights, contact us using the details in section 1.

9. Cookies

The website does not use cookies.

10. Customer data in the Atenos product

When a customer organisation uses the Atenos product, Atenos acts as the processor of the personal data the customer puts in. The customer is the controller. Our data processing agreement (DPA) with the customer governs that processing. This policy does not cover it.

11. Changes to this policy

We update this policy when needed. The current version is on our website, and the date at the top shows the last update.

12. Your right to complain

You have the right to lodge a complaint with a supervisory authority. In Finland, that authority is the Office of the Data Protection Ombudsman.