Privacy Policy

When processing your personal data, we follow the EU and Finnish legislation applicable to Infine Oy, as well as the regulations and instructions issued by the authorities. This Privacy Policy applies to representatives and contact persons of legal entities (companies, public administration organizations, associations, foundations and entrepreneurs). This Privacy Policy also applies to persons who use app.infineinsight.com, infineinsight.com or support.infineinsight.com on behalf of their company, submit forms, register for events or webinars, contact our customer support, or receive service-related or marketing communications from Infine. You can read the privacy policy of Ostavastuullisesti.fi here.

 
Data controller: Infine Oy
Address:
Aleksis Kiven katu 26 C 49
00500 Helsinki, Finland
Business ID: 2930948-2
Email: info@infineinsight.com
Privacy and support requests may also be sent to support@infineinsight.com
Our processing of personal data is based on one or more of the following legal bases:
 
Personal consent
Consent is voluntary, documented, individualized, conscious and unambiguous. We may ask for your consent, for example, when you subscribe to marketing communications, register for events or webinars, or accept non-essential cookies. You may withdraw your consent at any time.
 
An agreement to which the data subject is a party
We process the information you provide to fulfill the contract for the service or product you have purchased or ordered. Upon collecting information, we try to separate and inform you about the information needed to fulfill the contract and the information you can provide if you wish. Where your company uses Infine Connect or Infine Insight, we process user data to provide the service, manage user access, record orders and accepted terms, provide customer support, send service-related messages and keep the service secure.
 
Controller’s legitimate interests
We use personal data for business and customer service analysis and development, product development and reporting, maintaining customer relationships, responding to requests, improving our website and services, understanding customer needs, and communicating with business contacts about Infine’s products and services where permitted by law.
 
Legal obligation
Processing personal data is based on compliance with legal obligations when we store your information to comply with accounting and other mandatory legislation during and after the customer relationship.
 
The purpose of personal data processing is to provide and administer our services, manage customer and supplier relationships, process orders and invoices, respond to support requests, organise events and webinars, send service-related communications, send marketing communications where you have consented to or otherwise permitted them, protect our forms and services against misuse, analyse and improve our website and services, and comply with legal obligations.
We can collect personal data from the following sources:
 
Directly from the customer when they engage with us, including buying or ordering our services and products, visiting our website, subscribing to our newsletter, submitting a form on infineinsight.com, support.infineinsight.com or app.infineinsight.com, registering for an event or webinar, giving communication consent, contacting customer support, responding to a customer satisfaction survey or engaging with us in other ways.
 
Data collected from other sources may be data based on observations, derived data, or data specifically obtained from other sources.
 
Observed data can be collected in connection with the use of our website, support site, service, forms, email communications and social media services related to our activities.
 
Derived data is created from your personal data. This may include conclusions made with the help of analytics about your possible interests to improve our communications and services, where permitted by law.

Infine does not use personal data for decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on individuals.
 
In addition, we collect information explicitly from other sources, such as other service providers or publicly available registers, e.g. the trade register, Suomen Numeropalvelu Oy’s database and other reliable public and private registers.
 
Providing personal data to Infine is not mandatory. However, if you do not provide data needed for a service, request, event, order or communication, we may not be able to provide it.
 
Product, supplier and company data submitted to Infine Connect or Infine Insight is generally business data rather than personal data, unless it identifies an individual. Such data is governed by the applicable Terms of Service.
Information to be recorded in the register:
 
a) potential corporate and organizational customer representatives
 

Potential customers are representatives of companies potentially interested in our services. The following information is collected about them in the register:

  • name
  • company/organization
  • information related to the position and tasks, such as area of responsibility and board membership
  • industry
  • contact information such as phone number, email address or address
  • webpage address
  • target group information
  • event or webinar registration information
  • marketing consent and opt-out information
  • information about submitted forms and requests
 
Infine Oy stores information about potential corporate or organizational customers for 5 years. If the data subject refuses marketing, and there is no other basis for processing, information about the ban and contact information will be kept so that compliance with the ban can be ensured.
 
b) contact persons of corporate and organizational customers, from whom the following information is collected in the register: 
 
  • person’s name
  • information related to the position and tasks, such as area of responsibility and board membership
  • company/organization
  • industry
  • contact information such as phone number, email address or address
  • webpage address
  • billing information
  • website usage data, such as IP address and pages or articles viewed, where available
  • email engagement data, such as opens, clicks and related actions, where available
  • social media profile information where you interact with Infine on social media
  • information about ordered services and their changes
  • event, webinar, customer support and service communication information
  • form submissions and communication preferences
 
The data of corporate or organizational customers is kept in the register as long as the client relationship exists and for 5 years after, and erased once the client relationship no longer is valid, unless there are pending complaints or other disagreements, which require data processing. Certain information will be stored even after this time to the extent necessary to comply with statutory obligations, such as accounting legislation. 
 
In case the data subject refuses marketing, and there is no other basis for processing, information about the ban and contact information will be kept so that compliance with the ban can be ensured.
 
c) users of Infine Connect and Infine Insight
 
When your company uses Infine Connect or Infine Insight, we process the personal data of the persons who use the service on your company’s behalf. This may include name, work email, company, role, login and authentication data, user permissions, service usage data, actions taken in the service, data submitted, analyses viewed, orders placed, terms accepted, timestamps, support requests and related communications.
 
This data is processed to provide and administer the service, manage user access, keep the service secure, provide support, record orders and accepted terms, send service-related messages and comply with legal obligations.
 
User account data, user permissions, orders, accepted terms, support requests and related communications are retained for the duration of the agreement with your company and for 5 years after it ends, unless a longer retention period is required by law or necessary for claims, accounting, security or dispute resolution purposes. Login, authentication, session and detailed service usage logs are retained for 24 months after collection, unless longer retention is needed for security, support, legal claims or misuse prevention. Personal data in user accounts with no login or service activity for 12 months is deleted or anonymised, unless the account data must be retained as part of order records, accepted terms, support records or legal records.
Our website, support site and services use cookies and similar technologies. Necessary cookies are used to make the website and services work and to keep them secure, for example for login sessions, form protection and service functionality.
 
Other cookies are used only with your consent, which you can give or withdraw through the cookie banner or cookie settings. These may include analytics cookies, including Google Analytics, to understand how the website and services are used, and marketing cookies such as HubSpot cookies to measure and improve our communications.
 
We use CookieYes to manage cookie choices and record cookie consent. CookieYes may process limited technical data, such as a masked IP address and consent status, for this purpose.

We use service providers that process personal data on our behalf, where applicable under data processing agreements or equivalent processor terms. These include HubSpot for website forms, support.infineinsight.com, customer relationship management, support requests and email communication. Our HubSpot data hosting location is Europe (Germany). We also use Brevo for transactional emails, Procountor for invoicing, CookieYes for cookie consent management, Google Analytics for website analytics, Google Workspace for email and internal communications, and domain, website hosting, application hosting and IT infrastructure providers.

Where Google Analytics data sharing settings are enabled, Google may also process Analytics data as an independent controller under Google’s applicable controller-controller terms.

We do not sell personal data. We disclose personal data to other parties only where agreed with your company, where needed to provide or administer a purchased service, where service providers process data on our behalf, or where required by law.

Personal data is primarily processed in the EU/EEA where available. Some service providers or their subprocessors may process personal data outside the EU/EEA. Where personal data is transferred outside the EU/EEA, we rely on appropriate transfer mechanisms, such as adequacy decisions, the EU-US Data Privacy Framework for certified providers, or the European Commission’s standard contractual clauses.

Infine protects personal data using appropriate organisational, physical and technical measures designed to protect the confidentiality, integrity and availability of data. These measures include restricted access to systems, secure cloud environments, role-based access control, periodic access-right reviews, authentication controls, encryption measures where appropriate, backup procedures, personnel guidance and incident response procedures. Access to personal data is limited to authorised personnel and service providers who need the data for their tasks.

You have the right to request access to your personal data, rectification of incorrect or incomplete data, erasure of your personal data, and restriction of processing. You also have the right to data portability where the legal requirements for data portability are met.

Where processing is based on consent, you have the right to withdraw your consent at any time. Where processing is based on Infine’s legitimate interests, you have the right to object to the processing on grounds relating to your particular situation. You may also object to direct marketing at any time.

Requests can be sent to Infine by email or mail at info@infineinsight.com or support@infineinsight.com. Infine may ask you to verify your identity before processing the request. Infine usually responds within one month, as required by the EU data protection regulation.

You also have the right to lodge a complaint with the supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman.

Infine Oy updates this privacy statement throughout the development of its operations and services. Updates may also be necessary and based on changes in legislation. Updates to the policy can be checked on the infineinsight.com website, where the latest data protection statement is always displayed. Infine Oy can also notify registered users of changes to the Privacy policy by electronic notification, if deemed appropriate.
 
Latest update: 11 September 2026