Privacy Statement for Dual Impact Finland Oy

This privacy framework covers Dual Impact Finland Oy and activities of “DUAL IMPACT FINLAND OY” plus subsidiaries. Dual Impact Finland Oy serves as the data controller and may be reached regarding this policy.

1. How and why we use personal data

1.1 Website visits

When accessing Dual Impact Finland Oy, the company collects data via cookies (detailed in section 4) relating to devices, IP addresses, and browsing behavior. This data improves user experience and tracks usage patterns. Users may adjust cookie settings through browser controls.

1.2 Newsletter subscriptions

Email addresses collected for newsletters require prior consent. The organization sends news and press releases. Recipients may unsubscribe anytime using newsletter instructions.

1.3 Contact inquiries

Personal data collected through contact forms (name, email, event registration details) is processed based on contract fulfillment necessity or legitimate organizational interests in addressing requests and improving services.

1.4 Job applications

Applicants submit CVs, contact information, education, competencies and background details through email or a third-party portal. Data is used to evaluate candidacy and, with consent, identify future opportunities. Candidates may withdraw consent via portal or oskar@dualimpactfinland.fi.

1.5 Whistleblowing reports

Reports submitted to the dedicated email address may include optional contact information. The dedicated person anonymizes sender details before processing. Legal basis: legitimate interest in confidential reporting and compliance with the EU Whistleblowing Directive and related regulations.

1.6 Customer, supplier and partner management

Business-related data supports relationship management, service delivery, security, audits and operational transactions. Legal basis: legitimate business interests, legal compliance and occasionally consent.

1.7 Background checks and due diligence

Personal information regarding business partners, employees and visitors undergoes due diligence screening against anti-corruption and export control standards. Legal basis: legal obligations under the Security Act and legitimate interests in maintaining secure facilities.

1.8 Video surveillance and activity logs

CCTV recordings and access logs monitor premises security and equipment operation. Legal basis: legitimate interests in preventing unauthorized access and safeguarding facilities. All visitors and personnel receive notification before entry.

1.9 Legal compliance

Tax, accounting and legal proceeding information is processed to fulfil legal obligations and defend legal claims.

2. Sharing of personal data

Data sharing within DUAL IMPACT FINLAND OY occurs when necessary to fulfil requests or employment contracts, subject to Binding Corporate Rules. External third-party service providers (website hosting, transaction processing, statistical analysis) receive limited data necessary for service delivery. In business acquisition scenarios, prospective buyers or sellers may receive personal data. Public authorities receive data when mandated by law.

3. Transfers of personal data

The Binding Corporate Rules authorize transfers from EU/EEA group companies to those outside these regions. Transfers to non-adequate third countries require appropriate safeguards such as Binding Corporate Rules or EU Standard Contractual Clauses, per applicable data protection legislation.

4. Cookies

Cookies are small data files enabling browser authentication and identification without collecting computer information or carrying viruses. They store registration data and preferences.

DUAL IMPACT FINLAND OY uses cookies to optimize user experience and website functionality. Third-party cookies may enable YouTube streaming, PDF readers and Adobe Flash. Using the website constitutes cookie approval. Users may delete or disable cookies through browser settings, though some webpage functionality may be compromised.

Additional cookie information: dualimpactfinland.fi/cookies.

5. Security of processing

The organization applies appropriate technical and organizational safeguards protecting personal data against unlawful destruction, loss, alteration, unauthorized disclosure or access, particularly during network transmission.

6. Privacy statements of third parties

This statement addresses DUAL IMPACT FINLAND OY’s practices only, not third-party websites or services. The organization is not responsible for third-party privacy practices. Users should review third-party policies before sharing data.

7. Your rights as a data subject

Data subjects may request information about processing, receive copies of personal data, correct inaccurate or incomplete information, request erasure under certain circumstances, restrict processing, object to processing (including direct marketing), receive data portability in machine-readable format, and opt out of solely automated decision making with legal effects.

To exercise rights, contact the Corporate Privacy Officer: oskar@dualimpactfinland.fi.

8. Complaints to DUAL IMPACT FINLAND OY

File complaints regarding Binding Corporate Rules compliance or data protection law violations with the Corporate Privacy Officer at oskar@dualimpactfinland.fi or through the company website. Responses are provided within four weeks; complex complaints receive timeline estimates. Rejected complaints include reasons. Unsatisfied parties may pursue claims under Binding Corporate Rules (section 9).

9. Complaints to data protection authorities or courts

Internal complaints (section 8) should precede authority or court filings. For Binding Corporate Rules violations, complainants may choose to submit claims to:

1. The data protection authority or courts in the EU/EEA country of personal data origin, against the originating group company;
2. Finnish authorities, against Dual Impact Finland Oy; or
3. The authority or courts where the complainant resides or works, against the controlling group company.

Authorities and courts apply their own substantive and procedural laws. Complainant choice does not prejudice rights under applicable law.

10. Governing law and jurisdiction

The website operates under Finnish legislation with the Helsinki District Court holding exclusive jurisdiction over disputes.

11. Changes to this Privacy Statement

Minor, non-material updates may be made without website notice. Material changes affecting rights or data use receive specific website notification. Regular review is encouraged.

12. How to contact us

Corporate Privacy Officer
Email: oskar@dualimpactfinland.fi

Dual Impact Finland Oy
Pohjoisranta 4 A 8
00170 Helsinki, Finland

For unresolved concerns, file complaints with the applicable data protection authority per relevant law or Binding Corporate Rules.

Effective date: 11.01.2026 · Last updated: 11.01.2026