PRIVACY STATEMENT / TERMS, PERSONAL REGISTRY STATEMENT

In this document, we define how personal data is processed.

Aksios Corporation Oy’s Privacy Statement

1 REGISTER HOLDER AND REGISTER CONTACT PERSON

Name: Aksios Corporation Oy

Address: Kiltakallio 13 A 5, 02770 Espoo

Phone: +(358) 50 60 345

Business ID number: FI18602325

Contact person: Tommi Kokonaho

Email address: tommi@aksios.fi

2 DATA PROTECTION OFFICER

Aksios Corporation Oy’s data protection officer Tommi Kokonaho

Email address: tommi@aksios.fi

3 REGISTERED

The register handles the personal data of the information technology systems implemented by Aksios Corporation Oy (hereinafter “Aksios”) for itself and its customers.

4 PURPOSES OF PROCESSING, BASIS OF PROCESSING AND ROLES OF HOLDERS OF THE JOINT REGISTER

Aksios implements various surveys and software/applications for itself and its customers.

Regarding surveys, Aksios collects the data and compiles the results for itself or its customers. Aksios acts as the Registrar and Processor of Personal Data.

In terms of software/applications, the customer of Aksios collects data and acts as the Data Controller, and Aksios acts as the Processor of Personal Data.

The purpose of processing personal data, the basis for processing and the data to be processed are:

Reason for processing personal data	Basis for processing personal data	Personal data to be processed
a) Managing the customer relationship of Aksios or Aksios’ customer	Consent and/or agreement	Name, e-mail, possibly phone number, address and billing information
b) Surveys conducted for the development of Aksios or Aksios’ customer operations, such as customer satisfaction and personnel satisfaction surveys	Consent and/or legitimate interest of the data controller	Name, e-mail, possibly phone number and address
c) Use of the software/application	Consent and/or agreement	Name, email, phone number, address and billing information
c) Marketing of services or products of Aksios or Aksios’ customer	Consent and/or the controller’s legitimate interest/direct marketing legislation	Name, e-mail, professional title, phone number and address

5 PROCESSED PERSONAL DATA

See previous table. Name, e-mail, possibly phone number, address and billing information.

6 REGULAR INFORMATION SOURCES

Personal data is only collected from the registered person or from the Aksios customer’s own data sources when it comes to inquiries made on behalf of the Aksios customer.

7 REGULAR TRANSFER AND TRANSFER OF PERSONAL DATA

Aksios does not hand over or transfer personal data to third parties.

8 TRANSFER OF PERSONAL DATA OUTSIDE THE EU OR EEA

Personal data will not be transferred outside the European Union or the European Economic Area.

9 PERSONAL DATA STORAGE PERIOD

Aksios takes care of the destruction of personal data as follows:

Aksios customer relationship management will be deleted three (3) months after the end of the customer relationship. The personal data collected for the raffle will be deleted three (3) months after the raffle has been completed and the prizes have been delivered. The contact information of persons collected for the development or marketing of Aksios or Aksios customer’s company will be deleted three (3) months after the completion of the development or marketing surveys.

10 REGISTERED RIGHTS

The registered person has the right, in accordance with the applicable data protection legislation, at any time:

– receive information about the processing of their personal data;

Aksios about them ;

– demand the correction and completion of inaccurate and incorrect personal data;

– demand the deletion of their personal data;

– withdraw his consent and object to the processing of his personal data to the extent that the processing of personal data is based on the data subject’s consent;

– receive their personal data in a machine-readable format and transfer the relevant data to another data controller, provided that the data subject has himself provided the relevant personal data to Aksios, Aksios processes the relevant personal data based on the data subject’s consent and the processing is carried out automatically; and

– demand the restriction of the processing of their personal data.

The registrant must submit a request regarding the exercise of the above-mentioned right in accordance with the Contact section of this privacy statement. Aksios can ask the registrant to specify his request in writing and to verify the registrant’s identity before processing the request. Aksios may refuse to fulfill the request on the basis stipulated in the applicable law.

11 THE RIGHT TO COMPLAINT TO THE SUPERVISORY AUTHORITY

Every registered person has the right to file a complaint with the relevant supervisory authority or the supervisory authority of the EU member state where the registered person’s place of residence or workplace is located, if the registered person considers that Aksios has not processed personal data in accordance with the applicable data protection legislation.

12 INFORMATION SECURITY

Aksios does not store personal data collected in connection with the study in a manual format. Digitally processed personal data is protected and stored in the Aksios information system, access to which is limited to only those persons who need the data in question to perform their work tasks. The persons in question have personal usernames and passwords at their disposal. The workstations and storage media used by Aksios are encrypted.

13 CONTACTS

Requests regarding the exercise of the registrant’s rights, questions about this data protection statement and other contacts should be made by email to the data protection officer. The registered person can also contact the address below in person or in writing:

Aksios Corporation Oy

Tommi Kokonaho

tommi@aksios.fi

Kiltakallio 13 A 5, 02770 Espoo

14 CHANGES TO THIS PRIVACY STATEMENT

This data protection statement can be updated from time to time, for example when the legislation changes. This Privacy Statement was last updated on February 20, 2024