Privacy policy

Last updated August 21, 2026

This Privacy Notice explains how Brunnen Communications Oy processes the personal data of its clients, prospective clients, business partners, newsletter subscribers, and website visitors.

1. Data controller

Brunnen Communications Oy
Kalevankatu 6, 6th floor, 00100 Helsinki, Finland
info@brunnen.fi

Questions concerning privacy or the exercise of data subject rights may be sent to the email address above.

2. What personal data do we process and where do we obtain it?

We process only personal data that is necessary for our business operations, such as name, email address, telephone number, organisation, and job title, as well as information related to inquiries, client and business partner relationships, and newsletter subscriptions.

We primarily obtain personal data directly from individuals when they contact us, subscribe to our newsletter, or enter into a client or business partner relationship with us. We may also obtain information from the organization the individual represents and from publicly available professional sources, such as company and organization websites.

We use website analytics, such as visitor numbers and page views, to analyze website traffic and usage. We do not use analytics to identify individual website visitors.

3. How and on what legal basis do we use personal data?

We process personal data to respond to inquiries and requests for proposals, manage client and business partner relationships, sell and market our services to businesses, send newsletters, and analyze and improve our website.

The processing of personal data is generally based on Brunnen’s legitimate interests in conducting its business, managing professional relationships, and communicating about its services. Website analytics are based on consent. You may unsubscribe from our newsletter at any time. Where we are required by law to process personal data, the processing is based on compliance with a legal obligation.

Providing personal data is generally voluntary. However, if you do not provide information necessary for us to respond to an inquiry or provide a service, we may not be able to respond to your inquiry or provide the requested service or communications.

4. With whom do we share personal data and where is it transferred?

Personal data is primarily processed by Brunnen personnel. In some cases, external service providers that are necessary for our business operations may also have access to personal data. They process personal data only to the extent necessary to provide their services and in accordance with agreed terms and applicable data protection requirements. We do not sell personal data to third parties.

We aim to use services in which personal data is processed within the European Economic Area (EEA). However, in connection with certain technology service providers, personal data may be processed or transferred outside the EEA. In such cases, transfers are carried out using safeguards required under applicable data protection law, such as an adequacy decision by the European Commission or the European Commission’s Standard Contractual Clauses.

5. How long do we retain personal data?

We retain personal data only for as long as necessary for the purposes for which it is processed, for the duration of the relevant client or business partner relationship, or as required to comply with legal obligations.

As a general rule, information relating to inquiries, client and business partner relationships, sales, and marketing is retained for no more than three years after the most recent relevant interaction or the end of the relationship. Personal data may be retained for a longer period where there is a justified reason to do so. Newsletter subscriber data is processed for the duration of the subscription and may be retained beyond that period only where there is a justified reason. Personal data subject to statutory retention requirements is retained for the period required by law.

6. Your rights

You have the right to access the personal data we hold about you and, where applicable, to request that your personal data be corrected or deleted or that its processing be restricted. For privacy-related questions or requests, please contact us at info@brunnen.fi.

7. Automated decision-making and cookies

We do not use personal data for automated decision-making or profiling.

Our website uses cookies and similar technologies. More information about how we use these technologies and how you can manage your consent is available in our separate Cookie Policy (prepared by Lassi).

8. Changes to this privacy notice

We may update this Privacy Notice as our operations, services, or applicable laws change. The current version is available on our website.