Privacy Notice

---

What data do we collect?

Information in brief

Taloustutkimus collects data from survey participants in three ways:

1. Data provided by respondents themselves, such as survey answers and respondent background information.
2. Data derived from respondents' background information and survey responses, such as various segmentation data
3. Data collected or purchased from external sources that can be linked to survey participants. Such data include, for example, statistics published by Statistics Finland and data purchased from business registers.

For more information on the processing of survey participants' data, see the section on survey participants.

Data such as contact names and details and feedback from research projects are collected from clients for customer relationship management and marketing purposes. The clients of Taloustutkimus are mainly companies, organisations and public sector organisations.
For more information on the processing of client data, please see the section on Clients.

The data collected on employees are mainly those required by law, such as information on working hours, salaries and the processing of personal files. For more information on the processing of employee data, please see the section on employees.

---

How do we use your data?

The information provided by survey participants is primarily used to report and analyse the results of the survey. The results of the survey will be reported to the client organisation in a format that does not allow individual respondents to be identified. The information provided by survey participants may be used to create new derived data which may be used for analysis of the survey results and enrichment of data in Taloustutkimus' own registers and those of our clients and partners. 

The personal data provided by survey participants will never be used for direct marketing purposes.

The data collected from clients is used for customer relationship management and marketing and for the development of Taloustutkimus' business. 

The data collected on employees is used to maintain and develop the activities of Taloustutkimus, to fulfill legal obligations and, if necessary, for administrative measures.

---

How do we handle your data?

We process the personal data we collect carefully, securely and confidentially. Data may only be processed by pre-designated individuals whose duties require them to process the data. Identifiable personal data such as name, address, telephone number and e-mail address are processed only when necessary and always without compromising privacy. All Taloustutkimus employees are under a duty of confidentiality. 

We require our partners to agree to comply with the existing legislation and practices adopted by Taloustutkimus. This means, among other things, that the company or other organisation that commissions surveys from Taloustutkimus is responsible for ensuring that the personal data of the target group that it provides to Taloustutkimus has been collected in accordance with data protection legislation.It also means that Taloustutkimus can issue the survey invitation in accordance with data protection legislation. Where required by law, the client must obtain the necessary consent from the target group. The client is prohibited from providing Taloustutkimus with any contact information the use of which may breach data protection legislation or other rules and regulations governing data protection.

The data will be protected in an appropriate manner: electronic access control will be in place in the premises and computers and systems will be protected by technological solutions.

PROCESSING OF PERSONAL DATA

Personal data will only be processed by certain pre-designated persons who need to process it, in order to perform their duties and who have signed a non-disclosure agreement. The non-disclosure agreement includes confidentiality clauses. Identifiable personal data such as name, address, telephone number and e-mail address are processed only when necessary and always without compromising privacy. When personal data is processed remotely, the remote connection is encrypted, and additional authentication is required. Authentication with usernames and strong passwords is mandatory for all systems. The storage of personal data will be within the EU, but processing of personal data outside the EU may be necessary.

The processing of personal data is controlled to ensure that authorised persons can only access and process the data for which they are authorised. Personal data may not be read, copied, modified or deleted during or after processing or use or after storage without authorisation.

Taloustutkimus' information systems are designed to be fault tolerant. The information system is also backed up regularly so that data can be recovered in the event of a failure. Our information systems are also protected against external attacks.

ACCESS CONTROL

Access to Taloustutkimus premises is controlled by electronic access control. For employees, this means the use of electronic keys that allow access to the premises based on the access rights defined for each key. For visitors, access control means that visitors check in at the reception, where the visitor's details are recorded and they are issued with a visitor's badge that is valid for the duration of their visit.

The Taloustutkimus data centre is a closed and secured area. Both structural and technical access control is in place. The data centre is electronically secured and visitors are only admitted if they are properly accompanied and are never left unaccompanied. The required authorisations are always subject to strict conditions. Entrances to the building are monitored using recording cameras.

---

Your rights

Taloustutkimus handles personal data in a confidential and transparent manner. In this section we describe

• how you can contact Taloustutkimus regarding data protection issues
• why we collect personal data
• the type of personal data
• where and why we disclose personal data
• your rights at the various stages of the processing of your personal data.

The easiest way to contact Taloustutkimus regarding data protection issues is to send an e-mail to tietosuoja@taloustutkimus.fi.

You can also send a letter to:
Taloustutkimus Oy / Data Protection Officer
Lemuntie 9
00510 Helsinki, FINLAND

The easiest way to check the information you have provided to the Taloustutkimus internet panel is to log in to the service at www.tutkitaan.fi.

Personal data is collected from survey participants, clients, partners and employees in order to maintain and develop the business and to fulfil legal obligations. Personal data is only collected for pre-defined purposes and only to the extent necessary.

Personal data may be disclosed to clients and partners where the recipient has the right to process such data. In accordance with ESOMAR's Principles, we will ensure that survey participants have given their consent to having their identifiable personal data disclosed. The information provided by survey participants may be used to create new derived data which may be used for analysis of the survey results and enrichment of data in Taloustutkimus' own registers and those of our clients and partners. 

Personal data provided by survey participants will never be used for marketing purposes.

Personal data provided by clients may be disclosed to Taloustutkimus' partners if the recipient has the right to process such data. The personal data provided by Taloustutkimus employees will not be shared outside Taloustutkimus; however, Taloustutkimus' partners may process such data on behalf of Taloustutkimus.

As a survey participant, client and employee of Taloustutkimus, you have the right to know what personal data is held about you. You also have the right to correct or complete your personal data and the right to request its deletion.

---

Our cookie policy

We use cookies, web beacons, scripts and other similar technical identifiers and technologies to identify end-user devices, to monitor and analyse the use of our services and usage patterns, to improve the quality and customisation of our online and research services and to develop our online and research services. Our online and research services may also contain cookies from third parties, such as our partner research or analytics companies. Cookies are never used for direct marketing or targeted advertising to users of our services.

You can delete or block cookies and other tracking through your browser or device settings. By deleting cookies periodically, the user changes the identifier used to build user profiles. However, deleting cookies does not completely prevent the collection of this data.

Our services also include community plug-ins, such as the Like and/or Share button on Facebook, Twitter or LinkedIn. Community plug-ins are embedded within our online services, but their functionality and content is provided by a third party. Some community plug-ins may also allow third parties to collect information about the use of services when the user is logged in to that service. The terms and conditions of each social networking service are provided by that service. You can read Facebook's privacy policy here, Twitter's privacy policy here and LinkedIn's privacy policy here.

COOKIES AND OTHER TRACKING TECHNOLOGIES

We use cookies, web beacons, scripts and other similar technical identifiers and technologies to identify end-user devices, to monitor and analyse the use of our services and usage patterns, to improve the quality and customisation of our online and research services and to develop our online and research services.

 A cookie is a small text file that is stored by the browser on the user's terminal. Cookies usually contain an anonymous, unique identifier that can be used to identify browsers using the services. The data collected by cookies may be shared with Taloustutkimus' partners. Where necessary and appropriate for research purposes, the information contained in the cookie may be linked to personal data we collect from identified users, such as their username, for the purposes of targeting and analysis. Cookies are never used for direct marketing or targeted advertising to users of our services.

Our online and research services may also contain cookies from third parties, such as our partner research or analytics companies. Measurement and analysis services such as Google Analytics also use cookies. These third parties may place cookies on your device in connection with your use of our online services or surveys.  

In connection with web-based surveys, the interests of respondents may be determined on the basis of cookies collected by the Internet browser, in practice this means on the basis of the browsing history. The browsing history is used to build an AI-based interest profile to supplement the survey results. Where cookie data is used, the survey participant's consent will be sought in relation to the survey in question. Information about an individual survey participant's interest profile is not shared outside of Taloustutkimus and the results are reported in a form that does not allow the individual survey participant to be identified.

DELETING AND BLOCKING COOKIES

You can delete or block cookies and other tracking through your browser or device settings. By deleting cookies periodically, the user changes the identifier used to build user profiles. However, deleting cookies does not completely prevent the collection of this data.

Users who do not wish to have cookies stored on their device can set their browser to refuse cookies (the so-called incognito or private browsing setting) before or while using our services. On mobile devices, users can adjust settings related to the tracking functionalities of their device and applications. Disabling cookies and tracking may affect the performance of online and research services.

DATA COLLECTED AND TECHNOLOGIES USED BY THIRD PARTIES

Our services also include community plug-ins, such as the Like and/or Share button on Facebook, Twitter or LinkedIn. Community plug-ins are embedded within our online services, but their functionality and content is provided by a third party. Some community plug-ins may also allow third parties to collect information about the use of services when the user is logged in to that service. If the user is logged out or does not have a user account for the service, the user's browser/device will send more limited information.

The terms and conditions of each social networking service are provided by that service. You can read Facebook's privacy policy here, Twitter's privacy policy here and LinkedIn's privacy policy here.

Third party services are subject to their own privacy policies and terms of use, and Taloustutkimus is not responsible for the collection or processing of information by these operators, including cookies and other tracking technologies and links. We encourage you to read the terms of use and privacy policies of these third party services.

---

Survey participants

Taloustutkimus collects data from survey participants in three ways:

1. Data provided by respondents themselves, such as survey responses and respondent background information
2. Data derived from respondents' background information and survey responses, such as various segmentation data
3. Data collected or purchased from external sources that can be linked to survey participants. Such data include, for example, statistics published by Statistics Finland and data purchased from business registers.

The information provided by survey participants is primarily used to report and analyse the results of the survey. The results of the survey will be reported to the client organisation in a format that does not allow individual respondents to be identified. The information provided by survey participants may be used to create new derived data which may be used for analysis of the survey results and enrichment of data in Taloustutkimus' own registers and those of our clients and partners. 

Taloustutkimus is committed to protecting the anonymity of survey participants.s. Identifiable personal data such as name, address, telephone number and email address may be disclosed to clients and partners if the recipient has the right to process the data and it is necessary for the use of the survey results. In accordance with ESOMAR's principles, we ensure that survey participants have given their consent to the disclosure of their identifiable personal data. 

Personal data provided by survey participants will never be used for marketing purposes.

1. Data provided by respondents themselves, such as survey responses and respondents' personal and background data. In most surveys and when registering for the Taloustutkimus internet panel, a varying amount of background information is required. The following personal and background information is collected at the time of registration:

• First name
• Last name*
• E-mail*
• Username*
• Password*
• Street address
• Postcode*
• Town
• Telephone number
• Gender
• Year of birth
• Data on educational background
• Data related to the respondent’s stage of life and financial situation
• Employment data
• Data related to areas of interest
• * mandatory data 

In the case of group, thematic and in-depth interviews, audio or video recordings of the interviews may be made. The interviewees will be informed in advance about the audio or video recording. 

In connection with web-based surveys, the interests of respondents may be determined on the basis of cookies collected by the Internet browser, in practice this means on the basis of the browsing history. The browsing history is used to build an AI-based interest profile to supplement the survey results. Where cookie data is used, the survey participant's consent will be sought in relation to the survey in question. Information about an individual survey participant's interest profile is not shared outside of Taloustutkimus and the results are reported in a form that does not allow the individual survey participant to be identified.

Prizes may be drawn from among the survey respondents.  Winners will be notified personally.

2. Data derived from respondents' background information and survey responses, such as various segmentation data.
 

3. Data collected or purchased from external sources that can be linked to survey participants.  Such data include, for example, statistics published by Statistics Finland and data purchased from business registers. Data will only be obtained from reliable sources and Taloustutkimus will ensure that the data provider has the right to disclose the data.

HOW DO WE USE YOUR DATA?

The information provided by survey participants is primarily used to report and analyse the results of the survey. The results of the survey will be reported to the client organisation in a format that does not allow individual respondents to be identified. The client has the right to receive the response data in the form of an Excel spreadsheet, for example. However, even in this case, the identity of the individual respondent cannot be identified. Clients use the survey results in the development of their own operations, such as customer service, product and service development, market potential assessment and communication planning.

Taloustutkimus is committed to protecting the anonymity of respondents. Identifiable personal data such as name, address, telephone number and e-mail address may be disclosed to clients and partners if the recipient has the right to process such data and it is necessary for the use of the survey results. In accordance with ESOMAR's principles, we ensure that survey participants have given their consent to the disclosure of their identifiable personal data.

The personal data provided by survey participants will never be used for direct marketing purposes.

The information provided by survey participants may be used to create new derived data which may be used for analysis of the survey results and enrichment of data in Taloustutkimus' own registers and those of our clients and partners. Most of the derived data is generated using multivariate statistical methods, which are always chosen on a case-by-case basis. More information about multivariate methods can be found on Wikipedia's Multivariate statistics page.

The enrichment of data in client and partner registers is usually done using statistical prediction models. This means that the individual survey participant cannot be identified from the data used for enrichment. Taloustutkimus clients and partners use data enrichment to develop their business and manage their customer relationships, such as planning segment-specific marketing activities and defining target groups for marketing. For more information on statistical prediction, see the Wikipedia page on predictive analytics.

YOUR RIGHTS

As a survey survey participant, you always have the right to know the source of your contact details for a specific survey sample. Contact information can be obtained from four different sources:

From the client's own register

From a business register

From the Taloustutkimus internet panel

From public sources

If you are registered with the Internet Panel, you can access and correct the personal data you have provided on the Internet Panel's own tutkitaan.fi website. You can also unsubscribe from the Internet Panel, in which case we will delete the personal data you have provided. If you wish to obtain information about your own data from other panels, we will tell you how to contact the person responsible for the panel.

As a survey participant, you have the right to object to the processing of your data. If you are registered in an internet panel, prohibiting the processing of your data will result in your removal from the panel. You also have the right to have your personal data deleted from all our systems.

As a survey participant, you also have the right to opt-out of research invitations. If you choose not to receive survey invitations, we will keep your details on the opt-out register.

---

Clients

Taloustutkimus' clients are mainly companies, organisations and public sector organisations. Data such as contact names and details and feedback from research projects is collected from clients for customer relationship management and marketing purposes. 

The data collected from clients is used for customer relationship management and marketing and for the development of Taloustutkimus' business. Personal data provided by clients may be disclosed to Taloustutkimus' partners if the recipient has the right to process such data.

As a client of Taloustutkimus, you have the right to know what personal data is stored about you. You also have the right to correct or complete your personal data and the right to request its deletion.

WHAT KIND OF DATA DO WE COLLECT?

Taloustutkimus' clients are mainly companies, organisations and public sector organisations. Data such as contact names and details, order and billing history and feedback from research projects are collected from clients for customer relationship management and marketing purposes. Specifically, the following information is collected from clients and their contacts

• Company ID
• Company details
• First name
• Last name
• E-mail
• Mailing address
• Postcode
• Town
• Telephone number
• Client feedback
• Ordering history
• Offer details
• Billing information

In addition, contact information of client and prospective clients is collected in a marketing register that stores company and contact information.

HOW DO WE USE YOUR DATA?

The data collected from clients is used for customer relationship management and marketing and for the development of Taloustutkimus' business. Personal data provided by clients may be disclosed to Taloustutkimus' partners if the recipient has the right to process such data.

YOUR RIGHTS

As our client, you have the right to know what personal data we hold about you and you also have the right to prohibit the use of your data for purposes such as customer communications and direct marketing. You may also correct or complete your data and request that it be deleted, unless its retention is based on a contractual relationship or a legal obligation.

---

Employees

The data collected on employees are mainly those required by law, such as information on working hours, salaries and the processing of personal files.

The data collected on employees is used to maintain and develop the activities of Taloustutkimus, to fulfil legal obligations and, if necessary, for administrative measures. The personal data provided by Taloustutkimus employees will not be shared outside Taloustutkimus; however, Taloustutkimus' partners may process such data on behalf of Taloustutkimus.

As an employee of Taloustutkimus, you have the right to know what personal data we hold about you. You also have the right to correct or complete your personal data and the right to request its deletion.

WHAT KIND OF DATA DO WE COLLECT?

The data collected on employees are mainly those required by law, such as information on working hours, absences, salaries and the processing of personal files.

The access control data and the working hours of the employees working in the offices of Taloustutkimus are stored electronically. The data is stored securely and is only accessible to pre-designated persons. The external doors and courtyards of the main office are monitored by security cameras to protect staff and property.

Respondents' details are recorded in a register, which includes the following information

• Name
• Telephone number
• Email address
• Postal address
• Internal training and skills
• Availability (part-time, full-time, self-employed or available at any time)
• Date of birth
• Start date of employment
• Date employment ended
• Reason for termination of employment
• Photo of the interviewer
• Computer + other tools provided to the employee
• Other possible employment-related information

The work of Taloustutkimus is guided by the ISO 20252 standard, which requires that 10% of the interviews conducted in each survey are validated by calling the respondent and recording the results in a validation register.

HOW DO WE USE YOUR DATA?

The data collected on employees is used to maintain and develop the activities of Taloustutkimus, to fulfil legal obligations and, if necessary, for administrative measures. The personal data provided by Taloustutkimus employees will not be shared outside Taloustutkimus; however, Taloustutkimus' partners may process such data on behalf of Taloustutkimus.

YOUR RIGHTS

As an employee of Taloustutkimus, you have the right to know what personal data we hold about you. The storage of personal data is based on an agreement and legal obligations, so the use of the data cannot be prohibited. Upon termination of the agreement, you may request the deletion of data that Taloustutkimus is not legally obliged to retain.

For jobseekers who have submitted an open application, the information on the forms in the "Work with us" section is stored centrally. For open positions, applications may be requested to be sent to a specific person, in which case that person will be responsible for processing the data in an appropriate manner.

---

HoReCa register

To carry out opinion and market surveys directly related to the professional kitchens (HoReCa sector), Taloustutkimus maintains a list of professional kitchens which are contacted when Taloustutkimus is commissioned to carry out an opinion or market survey or Taloustutkimus conducts the survey on its own behalf. The data in the register is collected from the data subjects themselves through online and telephone interviews and from publicly available data sources such as company websites.

The information contained in the register

• Name of kitchen and operator
• Name of the person in charge of the kitchen
• The owner of the kitchen (municipality, state, limited company, private company, association, etc.)
• Visiting and postal address of the kitchen
• Telephone number of the kitchen and/or the person responsible for the kitchen
• E-mail address of the kitchen and/or the person responsible for the kitchen
• Business sector
• Municipality
• Region
• Type of kitchen
• Catering capacity
• Opening days
• Multiple kitchen ID
• Licence to serve alcohol

---

Register of doctors

In order to carry out opinion, market and patient surveys directly related to the medical profession, Taloustutkimus maintains a list of general practitioners and specialists who are contacted when Taloustutkimus is commissioned to carry out an opinion, market or patient survey aimed at doctors. Surveys are conducted through personal interviews, group discussions, internet questionnaires or patient surveys. 

Taloustutkimus has collected the data from public sources such as the websites of healthcare companies and organisations and in connection with surveys conducted by Taloustutkimus.

The data in the register are

• Name
• Field of specialisation
• Place of employment
• Age
• Work address
• Work e-mail
• How can I take part?
• Opt out of the survey

With the doctor's consent, other information may be included in the registry, such as

• Other contact information, such as a personal email address
• the type of studies in which the physician wishes to participate

Data in the register of doctors will not be shared with third parties.

---

Notification channel/Whistleblow

Purpose upon which the new personal data handling process is based
The process is based on the EU directive approved on 23 October 2019 on the protection of persons who report breaches of Union law (EU 2019/1937).

The directive obliges companies to provide a reliable notification channel that enables notifications of abuses and unethical activities. The processing of personal data is necessary in order to fulfill the obligations set out in the directive.

Brief overview of the processing of personal data and its purpose
The processing of the data is related to the maintenance of the whistleblowing channel provided by the Finland Chamber of Commerce, and which is used by Taloustutkimus for receiving reports. Taloustutkimus is the controller and the Chamber of Commerce the processor of the personal data.

A whistleblower can submit a report anonymously and, in a manner, where the report does not include personal data pertaining to themselves. If the whistleblower exceptionally provides their own contact information and/or the report contains other personal data, the processing of the personal data is based on the consent of the registered.

How is the personal data collected?
The whistleblower (the registered) provides information when making a report on abuse or other unethical conduct that they have observed. The report does not contain personal data pertaining to the whistleblower, unless the whistleblower explicitly provides them. The instructions regarding the information state that submitting it does not require, for example, providing the personal information of the whistleblower.

A report may include personal data pertaining to other individuals if the whistleblower deems this necessary for the report. This might be the case for example, if the report includes a image file of another person.

The controller collects the personal data of those processing the reports for purposes of processing and access management.

Personal data is not collected in any other way.

How is the personal data processed?
The personal data is processed in order to process reports received through the whistleblowing channel.

The persons authorized to process reports in Taloustutkimus will respond through the channel within three months, which measures Taloustutkimus may take based on the report. We issue a notification of receipt within seven days of receiving the notification.

The data of Taloustutkimus reports processors are processed for measures necessary for the access management purposes of the Finland Chamber of Commerce’s whistleblowing channel. The processing is based on the implementation of the contractual obligations between the contracting controller and processor of the personal data on to the use of the whistleblowing channel service.

Where is the collected personal data stored?
The whistleblowing data is encrypted and stored in the database. The data is available to the designated report processors of Taloustutkimus. Taloustutkimus has restricted the access to the reports based on different report types.

The service subscriber and processor data are stored for purposes of service-related user communications, invoicing and the implementation of other contractual obligations pertaining to the customer data system of the processor of the personal data.

Extent of the processing of personal data
The following personal data is processed in the service:

• The first and last names, e-mail addresses, public names, and usernames of the processors of the reports
• Personal data is not collected on the whistleblowers, but the whistleblowers may themselves include their own, another person’s or multiple other persons’ information as part of the written report or by way of attachment file metadata.

Informing the registered
To ensure that the registered are aware of the purpose and extent of the processing of personal data, Taloustutkimus maintains a privacy policy on the website of Taloustutkimus.

Assessment of the necessity and authenticity of the processing of personal data
Regarding the data of third parties, such as the persons being reported on, the processing of personal data is based on the controller’s statutory obligation or the legitimate interest of the controller or a third party, and regarding the data of the whistleblower, on consent or the legitimate interest of the controller or a third party. Regarding the personal data of those processing the reports, processing is based on a statutory obligation or legitimate interest.

A report shall only contain the necessary information for processing the reports.  There is no need to give personal data such as contact information.

It would be possible to collect the reports using an alternative method, such as by e-mail or telephone, but these alternative methods involve considerably more significant deficiencies about confidentiality and security.

The data are stored in the whistleblowing channel service for a limited time. The controller shall remove the data once the processing of personal data is no longer necessary.

The personal data are not processed outside the EU or EEA area.

Only a limited number of people have access to the personal data. Those processing personal data received through the whistleblowing channel service must be bound by an appropriate obligation of confidentiality.