Skip to main content

TPM Consulting Oy

Menu

Privacy Notice

Last updated: 10 September 2026

This Privacy Notice explains how TPM Consulting Oy processes personal data when you use our website, contact us, request a meeting, submit an application or otherwise communicate with us.

1. Data controller

TPM Consulting Oy
Business ID: 3253938-5
Vennikuja, Rovaniemi, Finland
Email: veli-matti.ylijaasko@tpm-consulting.fi
Phone: +358 45 783 95556

2. Personal data we process

Depending on how you interact with us, we may process:

  • name, email address, telephone number, company and role;
  • meeting, stand, hall, schedule and event-related information;
  • the content of your message and the type of discussion or support you request;
  • application, CV, work history, qualifications and other information you choose to provide for recruitment or partner-network purposes;
  • technical data such as IP address, browser and device information, timestamps, referring page, form submission metadata and server or security logs.

Please do not submit confidential, sensitive or special-category personal data through an initial website form unless it is necessary and specifically requested.

3. Purposes and legal bases

We process personal data to:

  • respond to enquiries, arrange meetings, assess potential assignments and prepare possible cooperation or contracts;
  • manage customer, partner and supplier relationships and deliver agreed services;
  • evaluate recruitment, subcontractor, partner and early-career applications;
  • operate, secure, maintain and improve our website and forms;
  • meet legal, accounting and compliance obligations and establish or defend legal claims.

The legal bases are steps taken at your request before entering into a contract, performance of a contract, TPM Consulting Oy’s legitimate interests in developing and managing its business relationships, compliance with legal obligations and, where specifically requested, your consent.

4. Sources of personal data

We normally receive personal data directly from you through forms, email, telephone, meetings and other communications. Limited technical data is generated automatically when the website and its forms are used. In a business context, we may also use relevant information from public company websites, professional profiles and other lawful public sources.

5. Recipients and service providers

Personal data is accessible only to authorised persons who need it for the stated purposes. We may use service providers for website hosting and maintenance, WordPress, Elementor, Forminator, email, security, performance and website statistics. These providers process data under their own terms or on our instructions, as applicable. Data may also be disclosed where required by law or necessary for professional advisers, accounting, authorities or the establishment or defence of legal claims.

6. Transfers outside the European Economic Area

Some technology providers may process data outside the European Economic Area. Where this occurs, transfers are protected using an applicable adequacy decision, the European Commission’s standard contractual clauses or another transfer mechanism permitted by data protection law.

7. Retention periods

  • General enquiries and meeting requests are normally retained for up to 24 months after the last relevant contact.
  • Recruitment and open applications are normally retained for up to 12 months, unless a longer period is separately agreed or an active process requires continued retention.
  • Technical and security logs are retained only as long as reasonably necessary, normally for no longer than 12 months.
  • Customer, contract and accounting information is retained for the duration required by the relationship, applicable limitation periods and statutory obligations.

Data may be retained longer where necessary to establish, exercise or defend legal claims or to meet a legal obligation.

8. Cookies and website services

The website may use essential cookies and similar technologies needed for security, administration, forms and technical functionality. WordPress and services such as Jetpack/Automattic may process limited technical and usage information for security, performance and website statistics. Where applicable law requires consent for non-essential cookies or similar technologies, the processing is based on consent. You can also control or delete cookies through your browser settings.

9. Your rights

Subject to the conditions in data protection law, you may have the right to:

  • request access to your personal data;
  • request correction or deletion of your data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive data you provided in a portable format where applicable;
  • withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us using the details above. We may need to verify your identity. You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland at tietosuoja.fi.

10. Security

We use appropriate technical and organisational measures to protect personal data. Access is limited according to need, and our website, accounts and service providers are managed with security and confidentiality in mind. No online service can, however, guarantee absolute security.

11. Changes to this notice

We may update this notice when our services, website or data-processing practices change. The latest version and update date are published on this page.