Privacy Policy
JAKE’s Privacy Policy
JAKE’s Clients and Potential Clients
JAKE’s Employees and Job Applicants
We Value Your Privacy
Every individual values their privacy, and that includes our clients and employees. However, conducting our business operations would not be possible without the processing of personal data. As a Data Controller, we primarily process the contact information of contact persons and other project personnel within our corporate clients, as well as our employees’ personal data. The same applies to potential clients and job applicants. Personal data refers to any information relating to an identified or identifiable natural person, such as a name, email address, personal identity code, and photograph.
JAKE processes personal data related to its customers, including potential customers, as well as its employees and job applicants, in accordance with this privacy policy and applicable legislation. We may update this privacy policy as our operations evolve or as legislation changes. Therefore, we encourage you to review this policy from time to time to stay updated.
Data Controller
The Data Controller responsible for the processing of personal data described in this privacy policy is JAKE Rakennus Oy (hereinafter also referred to as (“JAKE”, or “we”):
Jake Construction Ltd
Business ID: 1828663-3
Kuusisaarentie 3, 68600 Pietarsaari
Pitkäkatu 38 D 44, 65100 Vaasa
Satamatie 330, 67100 Kokkola (Port Tower 3 floor)
Email: johan.asplund@jakerakennus.fi
Tel: +358 50 366 9170
Matters regarding the data protection, client, and marketing registers, as well as personnel affairs, are managed by Johan Asplund.
For What Purposes Does JAKE Collect Personal Data, and on What Grounds?
We collect, store, and process personal data about clients and employees for predefined purposes. We always ensure that we have at least one legal basis for storing and processing personal data. The primary purposes and legal bases for processing personal data are:
Marketing and Client Communication:
We produce digital marketing, email marketing, targeted marketing content, and social media advertising for potential and current clients, and we look for new prospects. Consequently, corporate contact information is processed for marketing and communication purposes, as well as for targeting marketing-related messages and content. Marketing may involve automated decision-making and client profiling during social media advertising campaigns, search engine marketing, and content on our website. For these activities, the legal basis for processing personal data is primarily our legitimate interest. However, individuals have the right to object to direct marketing targeted at them at any time. Direct marketing may also, in certain instances, be based on consent (e.g., subscribing to a newsletter).
Business Development:
We may process personal data to develop our business operations in connection with providing marketing services. The legal basis for this processing is our legitimate interest.
Compliance with Legal Obligations:
We may process personal data to comply with statutory legal obligations (including accounting, taxation, and the Employment Contracts Act).
Personnel Administration Tasks:
Personal data relating to employees is collected and processed primarily for HR and administrative purposes, such as fulfilling employment contract obligations, project and time tracking, payroll, taxation, and fulfilling other rights and obligations arising from the employment relationship. For these activities, the legal basis for processing personal data is the performance of a contract, compliance with statutory obligations related to the employment relationship, and occasionally, the employee’s consent.
Recruitment and Job Applicants:
During recruitment processes, we process personal data primarily to prepare contracts or with the consent of the applicant. Data obtained from sources other than the job applicant themselves is processed solely based on consent.
What Personal Data Does JAKE Collect, and What are the Sources?
We primarily collect and process personal data related only to our clients’ contact and project personnel, our employees, and job applicants.
Clients and Potential Clients
We collect personal data related to our clients and potential clients mainly from the individuals themselves. For new prospective clients, we also gather prospect data primarily from LinkedIn and corporate websites. For potential clients, our website and its contact forms are a significant source of personal data. We also collect data regarding website usage using Google Analytics. Data is also generated and collected over the course of a client relationship, though this is primarily associated with the corporate entity. Information regarding potential clients may also be obtained from seminars organized in collaboration with partners.
Typically, we collect the following personal data regarding clients:
- First name and last name
- Email address
- Job title
- Address information
- Business phone number
- Employer company, company contact details, other relevant info, and Business ID
- The designated contact person at JAKE
- Language preference
- Legal basis for processing personal data (contract, consent, legitimate interest)
- JAKE records (phone calls / emails / references / meetings)
- Notes (phone calls / meetings / other JAKE interactions)
- Call data (timing of the call and topics discussed)
- Meeting data (timing of the meeting and topics discussed)
- Sales history and email correspondence
- Direct marketing consents / opt-outs
We may obtain similar data through prospecting on LinkedIn or from potential client websites, but naturally in a much more limited scope.
Employees
We obtain personal data regarding employees primarily from the individuals themselves and from other sources with their consent. For employees, we may also process data that otherwise arises during the course of the employment relationship.
We primarily collect and process the following data regarding employees:
- Name
- Contact details
- Personal identity code
- Tax withholding details
- Salary and details required for payroll
- Working time tracking and utilization logs
- Sick leave records
-
Employment contract
Job Applicants
We obtain personal data regarding job applicants directly from the applicants themselves and from other sources with their consent (such as LinkedIn, references, and any personality or aptitude tests).
For job applicants, we may process the following personal data in particular:
-
Name and basic contact details
-
Education, experience, competencies, and work history
-
Job application and CV/résumé
-
References and recommendations (with consent)
-
LinkedIn profile (with consent)
-
Results of any aptitude tests (with consent)
Who Processes Personal Data at JAKE and is Data Shared with Others?
As a rule, personal data is processed by employees belonging to JAKE in the performance of their professional duties. Access to personnel administration data is more restricted than access to client data, as a large portion of our staff performs client-facing work, while a smaller group handles HR and administrative responsibilities.
We may outsource the processing of personal data, and many systems used to store and process personal data are cloud-based services. The majority of stored and processed data is in electronic form. We utilize subcontractors and service providers to process personal data primarily in the following contexts: cloud data storage, marketing automation and CRM, financial management and payroll, website maintenance and visitor tracking, web analytics, email marketing, and project management.
When using subcontractors and service providers, we ensure that personal data confidentiality is protected and that the data is processed lawfully and solely on our behalf.
Furthermore, we may disclose data when required by law, a court of law, or a competent authority. We may also transfer your data if we are involved in corporate mergers, acquisitions, or business asset transfers.
Does JAKE Transfer Personal Data Outside the EU?
As a general rule, personal data is not transferred outside the EU. However, because data is stored and processed primarily in electronic form and via cloud-based services, some of our service providers may be located in countries outside the EU. Such service providers include Google and Mailchimp. In these instances, we ensure that the data transfer occurs using adequate safeguards required by law. The primary options are:
-
Transferring data to a country with an adequate level of protection approved by the European Commission.
-
Transferring data to an entity certified under data protection frameworks recognized by the EU (such as modern EU-US data frameworks for recipients in the United States).
-
Utilizing the EU’s Standard Contractual Clauses (SCCs).
How Long Does JAKE Store Personal Data?
We do not store your personal data longer than necessary for the purposes for which it was collected, or as required by contract or law. The retention period may vary depending on the purpose of use, the legal basis for processing, and the situation.
Personal data may be deleted when an individual withdraws their consent or requests the erasure of their data (provided JAKE has no other legal ground for processing), when the contractual relationship ends, or when the data is outdated or incorrect. Retention periods may also be dictated by legislation (e.g., accounting, taxation, and employment laws) as well as limitation periods for legal claims. We aim to review, update, and delete unnecessary, incorrect, or obsolete data on an annual basis.
How Does JAKE Store and Protect Personal Data?
Personal data is stored almost exclusively in electronic form and is protected in accordance with general industry security standards. We select reputable service providers for data storage and processing. We treat all data confidentially, and we do not disclose data publicly, nor do we sell or rent data for marketing purposes. Our physical premises are also well-secured and locked.
Is It Mandatory to Provide Data? What Happens If You Don’t?
The majority of personal data is provided on a voluntary basis. This applies primarily to potential clients and job applicants. However, providing and processing personal data to fulfill a contract within a client relationship is, to some extent, mandatory. This ensures that individuals entering into agreements on behalf of our corporate clients have the authority to do so, allows us to fulfill our contractual obligations, and secures our own legal rights.
On our website, we generally request an email address and other details from potential clients to facilitate contact. In an employment relationship, personal data is strictly required to fulfill our legal and contractual obligations under employment law and the employment contract.
Does JAKE Use Cookies on Its Website, and What Are They?
We use cookies on our website to deliver the best possible user experience to our visitors. Cookies are short text files that a web server stores on the user’s terminal device. They provide us with information on how visitors use our website. We utilize cookies to develop our services and website, analyze traffic, and target and optimize marketing efforts. Website visitors can allow or block the use of cookies through their browser settings. Most browsers accept cookies automatically. Please note that blocking cookies may limit access to certain functionalities on our website.
What Rights and Controls Do You Have Regarding Your Personal Data?
Withdrawal of Consent:
If we process your data based on your consent, you can withdraw your consent at any time by notifying us, for example via email at johan.asplund@jakerakennus.fi.
Right of Access and Data Subject Access Requests:
You have the right to obtain confirmation from us as to whether or not we are processing personal data concerning you, and to access the personal data we process. Additionally, you have the right to receive supplementary information regarding the grounds for processing your data.
Right to Rectification:
You have the right to request that we correct inaccurate, outdated, or incomplete personal data concerning you.
Right to Object to Direct Marketing:
Even if we do not process your personal data for direct marketing based on consent, you can object to direct marketing at any time by sending an email to johan.asplund@jakerakennus.fi
Right to Object:
If we process your personal data based on public interest or our legitimate interest, you have the right to object to the processing of your data, unless there are compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defense of legal claims. Please note that in this scenario, we may no longer be able to serve you.
Right to Restriction of Processing:
In certain situations, you have the right to request that we restrict the processing of your personal data.
Right to Data Portability:
If we have processed your data based on your consent or to fulfill a contract, you have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format, so that it can be transmitted to another service provider.
How Can You Exercise Your Rights?
You can exercise your rights described above by contacting us via email at johan.asplund@jakerakennus.fi or by using the company contact details listed below. When making a request, we kindly ask you to verify your identity (for example, with a signed access request or a copy of your ID—please mask your personal identity code and any other information we do not strictly need). If you believe that our processing of your personal data violates data protection laws, you also have the right to lodge a complaint with the competent supervisory authority (the Data Protection Ombudsman / Tietosuojavaltuutettu).
Can This Privacy Policy Be Updated?
We may update this privacy policy when our operations or the principles governing our personal data processing change. Updates may also become necessary due to statutory amendments. The changes take effect as soon as we publish the updated privacy policy on our website. We therefore invite you to review the contents of this policy regularly.
Who Can You Contact Regarding Data Protection?
Jake Construction Ltd
Business ID: 1828663-3
Kuusisaarentie 3, 68600 Pietarsaari
Pitkäkatu 38 D 44, 65100 Vaasa
Satamatie 330, 67100 Kokkola (Port Tower 3 floor)
Email: johan.asplund@jakerakennus.fi
Tel: +358 50 366 9170
Matters regarding the data protection, client, and marketing registers, as well as personnel affairs, are managed by Johan Asplund.