1. Data Controller
Name: Above IT Oy
Business ID: 3425088-4
Address: Linnoitustie 6A
Postal Code: 02600
City: ESPOO
Phone Number: 09 4272 6725
Email Address: info@aboveit.fi
2. Person Responsible for Registry Matters
Company: Above IT Oy
Name: Mika Hakkarainen
Address: Linnoitustie 6A
Postal Code: 02600
City: ESPOO
Phone Number: 09 4272 6722
Email: mika.hakkarainen@aboveit.fi
4. Purpose of the Register
The collected personal data is used for:
Sales and marketing purposes of Above IT Oy. Delivery of newsletter subscriptions.
5. Basis for Data Collection and Processing
Customer data is collected and processed with the customer’s consent or to execute an agreement with the customer.
6. Contents of the Register
Company Name, Business ID, Company Address, Contact Person, Email Address, and Phone Number
7. Data Retention Period
Personal data is retained as long as needed to execute an agreement with the customer or for sales and marketing purposes.
8. Regular Data Sources
Data is collected for the register from:
The individual themselves. Registers maintained by authorities within the limits allowed by law (e.g., ytj.fi). Data is also collected using Google Analytics and Leadfeeder analytics tools. Data may be transferred and stored in the CRM system used by Above IT Oy, with data located in Finland.
9. Regular Data Disclosures and Data Transfer Outside the EU or European Economic Area
Data is not regularly disclosed outside the company. Some external service or software providers used by the company may store data outside the EU or European Economic Area.
10. Use of Cookies
We use cookies on our website. A cookie is a small text file sent to and stored on a user’s computer, allowing the website administrator to recognize frequent visitors, facilitate user login, and compile aggregate data about visitors. This feedback helps us continuously improve our website content. Cookies do not harm users’ computers or files. We use them to provide information and services tailored to each customer’s individual needs.
If a user visiting our website does not want us to obtain the aforementioned information through cookies, they can refuse cookies if they wish. However, it is important to note that cookies may be necessary for the proper functioning of some of the pages and services we maintain.
11. Register Protection
Data is transferred over an SSL-secured connection. Electronic data is protected by appropriate methods.
Access to data is restricted to those employees of the data controller who need the information for their duties.
12. Automated Decision-Making
No automated individual decisions (Article 22 of the EU General Data Protection Regulation) are made.
13. Rights of the Data Subject
The data subject has the right to inspect what information concerning them has been stored in the personal data register. A written inspection request must be sent signed to the person responsible for registry matters. The right of inspection is free of charge when exercised once a year.
The data subject has the right to request the correction or deletion of incorrect or outdated information or the transfer of data from one system to another. They also have the right to restrict or object to the processing of their data in accordance with Articles 18 and 21 of the EU General Data Protection Regulation.
The data subject has the right to withdraw their previously given consent for data processing or to file a complaint with the supervisory authority regarding matters related to the processing of their personal data.
The data subject also has the right to prohibit the use of their data for direct marketing purposes.



