1. Data Controller Avatars Intelligence Oy Kröötinkuja 6, 33730 Tampere, Finland
   Contact Information for Registry Inquiries: Avatars Intelligence Ltd / Sanna Varpukari +358407621762 sanna.varpukari@avatarsintelligence.fi
2. Data Subjects Customers, potential customers, and partners of Avatars Intelligence Oy
3. Purpose of Personal Data Processing The basis for maintaining the register includes customer relationship, consent, and legitimate interest
   Purpose of Personal Data Processing and Use of the Register: The purpose of personal data processing is to manage, maintain, develop, analyze, and compile statistics on customer and partner relationships of Avatars Intelligence Ltd, as well as for communication, marketing, and collecting research data for planning and developing services and business operations. We also collect information about website and social media visitors for development, customer service, and sales purposes. We process data based on legitimate interest for event registrations, content downloads, and community memberships, with one purpose being data processing for direct marketing purposes. Based on legitimate interest, we can offer appropriate content, organize events, market, and manage information.
   Our goals include providing information, improving accessibility, service, and support, facilitating information search and purchasing processes, and creating profiles for advertising relevant services.
4. Personal Data Stored in the Register
   The customer register includes the following information: name, position, company/organization, business ID, organization’s postal address, email address, phone number, and other role- and organization-related information provided by the individual. It also includes information about interested services, offered and purchased products and services. User and web traffic data includes username and IP address. Conversation history with virtual assistants may be recorded. For job applications, the information provided by the applicant during the application process is stored.
   We limit data collection and processing to necessary information only. Unnecessary and outdated information is deleted. The company does not process sensitive personal data. Personal data processing does not pose a likely high risk.
5. Data Subject Rights Data subjects have the following rights, which should be requested by contacting sanna.varpukari@avatarsintelligence.fi.
   Right to Access Data subjects can review their stored personal data.
   Right to Rectification Data subjects can request to correct incorrect or incomplete information about them.
   Right to Object Data subjects can object to the processing of their personal data if they believe it is being processed unlawfully.
   Right to Restrict Direct Marketing Data subjects have the right to prohibit the use of their data for direct marketing purposes.
   Right to Erasure Data subjects have the right to request the deletion of their data if processing is no longer necessary. We will process the deletion request and then either delete the data or provide a justified reason why the data cannot be deleted.
   It should be noted that the data controller may have a statutory or other right not to delete the requested data. The data controller is obliged to retain accounting material according to the Accounting Act (Chapter 2, Section 10) for a specified period (10 years). Therefore, accounting-related material cannot be deleted before the expiration of this period.
   Right to Withdraw Consent If the processing of personal data is based solely on consent and not, for example, on customer or membership, the data subject can withdraw their consent. You can unsubscribe from marketing communications by following the opt-out instructions in marketing communications or by contacting the contact person.
   Right to Lodge a Complaint Data subjects have the right to lodge a complaint with the Data Protection Ombudsman if they believe that we are violating applicable data protection laws.
   Contact information: www.tietosuoja.fi/fi/index/yhteystiedot.html
6. Regular Data Sources The information entered into the personal data register is obtained from the data subjects themselves, messages sent via the website, emails, phone calls, social media services, contracts, customer meetings, and other situations where the customer provides their information.
   Personal data may also be collected and updated from public registers and sources, private registers, and potentially from third-party data collectors and communication and marketing partners.
7. Regular Data Disclosures Data is generally not disclosed for marketing purposes outside Avatars Intelligence Ltd. If we use external service providers, such as a newsletter program, we ensure that the service provider complies with data protection legislation.
8. Duration of Processing Personal data is primarily processed as long as the customer relationship is valid or contractual obligations require. When personal data is processed on another legal basis, such as legitimate interest, data is retained as long as necessary to achieve the purpose of the processing.
9. Personal Data Processors The data controller and its employees process personal data. We may also partially outsource the processing of personal data to a third party, ensuring through contractual arrangements that personal data is processed in accordance with applicable data protection legislation and appropriately.
10. Transfer of Data Outside the EU Personal data is generally not transferred outside the EU or the European Economic Area. If data is transferred outside the EU or the European Economic Area, we ensure an adequate level of data protection, for example by agreeing on the confidentiality and processing of personal data as required by legislation.

The up-to-date data protection policy is available at www.avatarsintelligence.fi.