Privacy Policy

1. Controller

Name: HR-Boost Ltd
Business ID: 3097225-7
Address: Maustetehtaankatu 5 A 4, 00990 HELSINKI

2. Person responsible for the register

Name: entrepreneur Suvi Matinlauri, HR-Boost Ltd
Contact details:

3. Name of the register and the data subjects

HR-Boost Ltd’s marketing and customer register. We handle the personal information of our customers as well as our potential customers and their representatives.

4. Purpose of the processing of personal data and the legal basis for the processing

The purpose of the processing of personal data is the management of client relations, company’s communications, marketing and sales.

The legal basis for the processing of personal data is the legitimate interest pursued by the controller to process data and to communicate to the contact persons of stakeholders about matters related to their area of responsibility.

Personal data is collected from the data subjects themselves and from public sources, such as the internet, public company websites, social networking services or other similar registers in accordance with data protection legislation.

5. Data content of the register

  • Contact details, such as name, email address and telephone number
  • Information related to the person’s task, such as their job title and area of responsibility
  • Data concerning the employer
  • Information regarding customer relationships and contacts

6. Recipients or groups of recipients of personal data

Personal data is disclosed to the authorities to the extent permitted and bound by existing legislation.

No information for promotional purposes is disclosed to a third party. In case a third party is used for service provision, we may disclose the information that is needed, such as your name and email address to the service provider. These third parties process data only for the account of HR-Boos Ltd.

7. Transfer of data outside the EU or EEA

Some of the services related to the processing of personal data used by the Controller may operate outside the area of the European Union member states or the European Economic Area. We will ensure the proper and lawful implementation of the transfers in accordance with the legislation on the processing of personal data.

8. Personal data retention period

Personal data shall be retained for as long as it is necessary to retain it in order to meet the purpose for which it has been collected in accordance with this privacy policy. Due to the obligations of the Accounting Act or other applicable law, information may need to be stored for longer than the above-mentioned period. We will discard obsolete and unnecessary data in an appropriate manner.

9. The rights of data subjects in the processing of personal data

Right to inspect the data
The data subject has the right to inspect what data concerning them has been recorded in the personal data register and to receive a copy of the data. The data subject must send the inspection request by email to The data subject must present the information required for the retrieval of data in the inspection request. If necessary, the Controller may request further information in order to identify the data subject.

The response to the inspection request will be sent to the person presenting the inspection request by email unless the data subject requests to send the information in some other way.

Right to rectification
HR-Boost Ltd shall, according to its capacities, ensure the quality of the personal data it processes. HR-Boost Ltd shall rectify, erase or complement personal data that is incorrect or unnecessary of its own accord or at the demand of the data subject.

Right to restriction of processing
The data subject has the right to obtain from HR-Boost Ltd restriction of processing of data if the data subject, for example, contests the accuracy of the personal data. In such a situation, the processing is restricted for a period enabling the Controller to verify the accuracy of the data.

Right to demand erasure of data or object to the processing of data
The data subject has the right to demand erasure of their personal data or to object to its processing when it is based on legitimate interests. The data subject shall always have the right to object to direct marketing by sending an email to

Right to lodge a complaint with the supervisory authority
You also always have the right to file a complaint with the appropriate supervisory authority or with the supervisory authority of the EU Member State where your residence or work is located if you consider that we have not processed your personal data in accordance with applicable data protection legislation.

10. Changes to the data protection practice

We are constantly trying to develop our services and therefore we reserve the right to change this privacy statement by notifying it on this page.