Cansome Oy Privacy Policy

Effective Date: 10.11.2025

At Cansome Oy (“Company”, “we”, “us”, or “our”), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in connection with our software-as-a-service (SaaS) platform, our newsletter, and our business-to-business (B2B) communications, in compliance with the European Union’s General Data Protection Regulation (GDPR) and relevant Finnish data protection laws.

 

1. Data Controller

Cansome Oy (FI33284716)
Address: Ratakatu 1, 32200 Loimaa, Finland
Email: info@cansome.com
Phone: +358445163062

For any privacy-related inquiries or concerns, please contact our Data Protection Officer (DPO) Timo Suonpää at timo@cansome.com.

 

2. Personal Data We Collect

We collect and process different types of personal data depending on your interaction with us:

a. Customer Data

When you register for our SaaS services, we may collect:

• Contact Information: Name, email address, phone number, company name, job title.
• Account Details: Username, password, and usage data.
• Payment Information: Billing address, credit card details (processed securely via a third-party payment processor).
• Usage Data: IP address, browser type, device information, and log data to help us improve our services.

b. Newsletter Subscribers

When you subscribe to our newsletter via our website, we may collect:

• Contact Information: Email address, and optionally, name and company details.
• Interaction Data: Engagement metrics (e.g., open rates, click-through rates) for optimizing our communication.

c. B2B Client Outreach

For potential B2B client contacts, we may gather:

• Business Information: Company name, contact person’s name, email address, phone number, and job title.
• Communication Records: Any correspondence or notes from meetings or calls.

 

3. Legal Bases for Processing

Our processing of your personal data is based on the following legal grounds under GDPR:

• Consent: Where you have provided explicit consent (e.g., subscribing to our newsletter).
• Contractual Necessity: To fulfill our contractual obligations when you sign up for our SaaS services.
• Legitimate Interests: To maintain and improve our services, to manage business relationships, and for direct marketing purposes related to our B2B activities, provided these interests do not override your fundamental rights and freedoms.
• Legal Obligations: To comply with applicable laws and regulatory requirements.

 

4. How We Use Your Personal Data

We use your personal data for various purposes, including:

• Providing and Maintaining Services: To set up and manage your account, process payments, and deliver our SaaS services.
• Customer Support: To respond to your queries and provide technical support.
• Communication: To send newsletters, updates, and promotional materials (with your consent where required).
• Marketing: To reach out to potential B2B clients with relevant offers and information.
• Improvement and Analytics: To analyze usage patterns and improve our products and services.
• Compliance: To meet legal and regulatory requirements.

 

5. Data Sharing and Disclosure

We do not sell or rent your personal data. However, we may share your information in the following circumstances:

• Service Providers: With trusted third-party vendors and service providers who support our business operations (e.g., payment processors, email service providers). These third parties are contractually bound to protect your data.
• Legal Requirements: If required by law or in response to a valid legal request (e.g., a court order).
• Business Transfers: In connection with any merger, sale, or acquisition of our business or its assets, your personal data may be transferred as part of that transaction.

 

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The retention period may vary depending on the type of data and applicable legal requirements.

 

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Despite our efforts, no security measure is perfect; please inform us immediately if you believe your data has been compromised.

 

8. International Data Transfers

We primarily process and store your personal data (including account information and usage data) within the European Economic Area (EEA).

If we use a third-party service provider (such as an email marketing tool or payment processor) that requires the transfer of a limited amount of personal data outside the EEA, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other mechanisms approved by the European Commission, to ensure your data remains protected in accordance with GDPR requirements.

 

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: You can request copies of your personal data.
• Right to Rectification: You may ask to correct any inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your personal data, subject to applicable legal obligations.
• Right to Restrict Processing: You can ask us to limit the processing of your data under certain circumstances.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your data, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please contact our Data Protection Officer using the contact details provided above.

 

10. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and collect usage data. For more information on our use of cookies, please refer to our Cookie Policy.

 

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any significant changes by posting the updated policy on our website with a revised “Effective Date.” We encourage you to review this Privacy Policy periodically.

 

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:

Cansome Oy
Address: Ratakatu 1, 32200 Loimaa, Finland
Email: info@cansome.com
Phone: +358445163062

By using our services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.