Updated 1 October 2026
This policy explains what personal data Signal Group Oy processes, why it is processed, to whom it is disclosed and how you can exercise your rights. It covers customer and partner relationships and the signalgroup.fi website. The Finnish version of this policy is the binding one.
1. Controller and contact details
Signal Group Oy
Business ID: 3477030-2
Postal address: Haarlankatu 4B, 33230 Tampere, Finland
E-mail: asiakaspalvelu@signalgroup.fi
You can send questions and requests concerning data protection to asiakaspalvelu@signalgroup.fi.
2. What personal data is used for and on what basis
- Responding to enquiries and requests for quotes. Legal basis: steps taken prior to entering into a contract (EU General Data Protection Regulation, Article 6(1)(b)) and our legitimate interest in replying to messages sent to us (point f).
- Managing customer and partner relationships and performing contracts. Legal basis: contract (b) and, for contact persons of business customers and partners, legitimate interest (f).
- Statutory obligations, such as bookkeeping. Legal basis: legal obligation (c).
- Visitor statistics with Google Analytics: how many visitors the site has, which pages are read and where visitors come from. The data is used to develop the website, not for advertising. Legal basis: consent (a), which you give or decline in the site’s cookie notice.
- Website operation and security, for example server log data for investigating faults and misuse. Legal basis: legitimate interest (f).
- Other purposes for which we ask for your separate consent. Legal basis: consent (a), which you can withdraw at any time.
We do not make automated decisions based on personal data, and we do not use visitor data to target advertising.
3. What data we process
- Name and company or organisation
- Contact details: e-mail address, phone number and postal address
- Content of messages, for example a message sent using the contact form
- Information related to the customer relationship, such as quotes, contracts and projects
- From people who send an open application: the information in the application and its attachments, such as CV, education, work experience and other information you provide
- Technical data sent by your browser when you use the site: IP address, browser type and time of visit in server logs
- With your consent, visitor statistics: a random visitor identifier, pages viewed, visit duration, device and browser type, approximate location (country and city) and the page you came from
4. Where the data comes from
We mainly receive the data from you: through the contact form, by e-mail, by phone and during the customer relationship. We may supplement the contact details of business customers from public sources, such as company registers and company websites.
5. To whom data is disclosed
- To Signal Group companies when necessary to handle your request or the customer relationship.
- To service providers that process data on our behalf, such as website hosting and e-mail services. They process data only according to our instructions.
- To authorities when required by law.
The site also uses the following external services, to which your browser sends your IP address when loading parts of the page:
- Google Analytics (Google Ireland Ltd) for visitor statistics, only if you have accepted it. Google Analytics does not store IP addresses. Google’s privacy policy
- Cloudflare (cdnjs.cloudflare.com), from which the GSAP library used for the site’s animations is loaded. Cloudflare’s privacy policy
- Jobilla, from whose service the open positions and their images on the Careers page are loaded. Jobilla’s privacy policy
We do not sell personal data or disclose it for marketing.
6. Transfers outside the EU and EEA
Some service providers, such as Cloudflare and Google, also process data in the United States. Data is transferred outside the EU and EEA only if the European Commission has decided that the destination country ensures an adequate level of data protection (for example the EU–US Data Privacy Framework) or if the transfer is based on standard contractual clauses approved by the Commission or other safeguards under the GDPR.
7. Job applications and the reporting channel
Job applications are submitted through Jobilla’s recruitment service, to which the positions on the Careers page link. The processing of application data is described on the application form and in Jobilla’s privacy policy.
Open applications that you send by e-mail to rekry@signalgroup.fi are processed for recruitment: we assess whether you would be suited to a position in one of the group companies and contact you. Legal basis: steps taken prior to entering into a contract (b) and our legitimate interest in recruiting (f). We collect the data from you. We obtain data from other sources, such as referees, only with your consent, in accordance with the Finnish Act on the Protection of Privacy in Working Life (759/2004). Your application may be handled by the group company whose position it fits.
The processing of whistleblowing reports is described on the reporting channel page.
8. How the data is protected
- Traffic to the site is encrypted (HTTPS).
- Data is stored on secure servers, and access is restricted to people who need the data in their work.
- Technical safeguards such as firewalls, encryption and access management are in place.
- Staff who process the data are bound by confidentiality.
- Paper documents are kept in locked premises.
9. How long data is kept
- Contact form messages are stored in e-mail and in the website database. We delete them when they are no longer needed, at the latest after two years, unless the enquiry leads to a customer relationship.
- Requests for quotes are kept for two years unless they lead to a customer relationship.
- Customer relationship data is kept for the duration of the customer relationship. Accounting data is kept for the period required by the Finnish Accounting Act: vouchers for six years and accounting records for ten years from the end of the financial year.
- Server log data is kept only as long as required for security and troubleshooting.
- Visitor statistics are kept in Google Analytics for 14 months, after which they are deleted automatically.
- Open applications are kept for 12 months from receipt, after which they are deleted. You can ask us to delete your application earlier.
- Data based on consent is kept until you withdraw your consent.
10. Your rights
- Right of access: you can check what data we hold about you (Article 15).
- Right to rectification: you can ask us to correct inaccurate or incomplete data (Article 16).
- Right to erasure: you can ask us to delete your data, for example when it is no longer needed or when you withdraw your consent (Article 17).
- Right to restriction of processing in certain situations (Article 18).
- Right to data portability: you can receive the data you have provided in a machine-readable format when the processing is based on consent or a contract (Article 20).
- Right to object: you can object to processing based on our legitimate interest (Article 21).
- Right to withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing.
We reply to requests within one month at the latest. If a request is exceptionally extensive or there are many requests, we may extend the deadline by up to two months. We will inform you of any extension within one month of receiving the request.
If you believe that the processing of your personal data breaches data protection law, you can lodge a complaint with the Finnish Data Protection Ombudsman:
Office of the Data Protection Ombudsman
Visiting address: Lintulahdenkuja 4, 00530 Helsinki, Finland
Postal address: PL 800, 00531 Helsinki, Finland
Switchboard: +358 29 566 6700
E-mail (registry): tietosuoja@om.fi
tietosuoja.fi
11. Cookies
The site uses analytics cookies only if you accept them. You can change your choice at any time using the Cookie settings link at the bottom of the page. You will find more details in our cookie policy.
12. Changes
We update this policy when our processing of personal data or the law changes. The current version is always on this page, and the date of the latest update is shown at the top.
