Privacy policy

This privacy policy describes how Tendera Bid Oy processes personal data on the website, in the Tendera service, in customer communication and in marketing.

1. Controller

Tendera Bid Oy
Business ID: 3527101-1
Email: support@tendera.bid

2. What data we process

We may process the following personal data:

• name, email address, telephone number and organisation
• data relating to the user account and signing in
• data on the use of the service, such as search profiles, saved searches, choices made in the service and times of use
• data relating to enquiries, demo bookings and the customer relationship
• data relating to invoicing, subscriptions and customer management
• data relating to marketing and communication permissions
• technical data, such as IP address, browser, device, operating system, log data, cookies and similar identifiers

We do not intentionally collect special categories of personal data, such as data concerning health, political opinions or religious beliefs.

3. Purposes for which the data is used

We use personal data for the following purposes:

• providing, maintaining and developing the Tendera service
• creating user accounts, signing in and managing access rights
• producing search profiles, procurement alerts and other service functions
• customer service, enquiries and handling demo bookings
• managing the customer relationship, subscriptions, invoicing and contracts
• ensuring the security of the service, preventing misuse and ensuring technical functionality
• analysing and developing the use of the service and the website
• marketing, sales and customer communication
• fulfilling statutory obligations

4. Legal bases for processing

Depending on the situation, the processing of personal data is based on:

• a contract or the preparation of a contract, when we process data in order to provide the service, create a user account, manage a subscription or handle the customer relationship
• legitimate interest, when we develop the service, take care of information security, process contact person data of business customers, or carry out B2B sales and marketing
• consent, when the user gives permission for example for certain cookies, analytics or electronic marketing
• a legal obligation, when we process data for example for accounting, requests from authorities or other statutory duties

5. Cookies and analytics

On the website and in the service we use necessary cookies and similar technical identifiers to ensure the functioning of the service, information security and the management of the user's session.

We may also use analytics and marketing cookies, such as Google Analytics 4 measurement, to develop the service and our marketing. Such cookies are used only on the basis of the user's consent where applicable legislation requires it. The user can manage their cookie choices in the site's cookie settings.

6. Where the data comes from

We receive personal data mainly:

• from the users themselves, in connection with registration, use of the service, forms, enquiries or a demo booking
• from the user's organisation or from persons involved in managing the customer relationship
• from the use of the service and the website, via technical logs, cookies and similar identifiers
• from public sources and business information services, when the data is used for B2B sales and customer relationship purposes

7. To whom the data may be disclosed

In processing personal data we may use service providers and partners who process the data on our behalf. These may include, for example:

• cloud and hosting service providers
• sign-in, authentication and information security service providers
• customer relationship management, communication and marketing tools
• analytics and tracking tools
• service providers relating to payment, invoicing and accounting
• customer support and technical maintenance service providers

Data may be disclosed to authorities or other parties if the law so requires, or if the disclosure is necessary for the establishment, exercise or defence of legal claims.

We do not sell personal data to third parties.

8. Transfers of data outside the EU or the EEA

Personal data may be processed outside the EU or the EEA if a service provider we use is located outside these areas or processes data outside them.

In such cases we ensure that appropriate safeguards are used for the transfers, such as standard contractual clauses approved by the European Commission or another transfer mechanism compliant with data protection legislation.

9. Retention of data

We retain personal data only for as long as is necessary for the purposes described in this policy, or for the period required by law.

Retention periods are affected, for example, by:

• the validity of the user account and the customer relationship
• the processing needs of contracts, subscriptions and invoicing
• handling customer service and enquiries
• accounting and other statutory retention obligations
• the handling of any legal claims
• consent given or withdrawn by the user

When personal data is no longer needed, we delete or anonymise it within a reasonable time.

10. Information security

We protect personal data by technical and organisational means. We use, for example, access rights management, logging, encrypted connections, backups and contractual information security obligations for service providers.

Access to personal data is limited to persons and service providers who have a justified need to process the data for their duties or for producing the service.

11. Rights of the data subject

Under applicable data protection legislation, you have the right to:

• access the personal data concerning you
• request the rectification of inaccurate or incomplete data
• request the erasure of data
• request the restriction of processing
• object to the processing of personal data when the processing is based on legitimate interest
• withdraw your consent at any time
• request the portability of data from one system to another where the right applies
• lodge a complaint with the supervisory authority

You can exercise your rights by contacting support@tendera.bid.

12. Complaint to the supervisory authority

If you consider that your personal data is being processed contrary to data protection legislation, you have the right to lodge a complaint with the supervisory authority.

In Finland the supervisory authority is the Office of the Data Protection Ombudsman:
https://tietosuoja.fi

13. Changes to this policy

We may update this privacy policy when the service, the website, legislation or our practices change. The current version is available on our website.

This is a translation of the Finnish privacy policy. In the event of any discrepancy, the Finnish version prevails.