MentorMind Oy
Last update: 24.2.2025

We strongly recommend all of Our Customer's to carefully read through Our Privacy Statement before purchasing, accessing or using any of Our Services.

1. Data Controller

MentorMind Oy “MentorMind SaaS”
PB 1096
00101 Helsinki, Finland
Data Protection Officer
E-mail: asiakasvalitukset@omanelamanipomo.fi

Protecting the privacy of Our customers' personal data is a top priority for Us. We want Our customers to be able to share their personal data with Us with confidence. This Privacy Statement explains how We process personal data in Our business activities. It also explains your rights associated with the processing of personal data and how you can exercise those rights. It is therefore important that you read this Privacy Statement.

2. Our processing of your personal data

MentorMind Oy (“MentorMind SaaS”) is a SaaS platform designed to support individuals in building careers online. The curriculum focuses on providing an effective SaaS platform including strategies and tools to support our Customer's. We take your privacy seriously, and this privacy statement describes how and in which situations personal data is processed and your rights as a data subject.

A set of purposes for which personal data is processed is listed below. The personal data that We are processing about you is determined by your activity and our relationship with Us. We typically collect information from the Customer when the Customer registers on Our site, places an order, subscribes to a newsletter, responds to a survey, participates in webinars, fills out a form, or provides feedback on Our products or services. We may also automatically collect information about your browsing actions, equipment, and usage patterns using server logs, cookies, and similar technologies.

3. Purposes and legal basis for processing

We process personal data mainly for the following purposes and on the following legal basis:

3.1. Assignment management

When turning to Us for assistance, We need certain personal data to keep in touch with you, and to handle the task in a manner We deem best for you. The personal data required can vary from case to case. Legal basis for processing is GDPR Art. 6.1(b) performance of contract.

3.2. Invoicing, payments and debt collection

We naturally need to receive due payments for Our services. We handle such payments by invoicing you and keeping track of your payments, based on the applicable general conditions. Should We not receive payment, We may turn to debt collection agencies, which is based on legitimate interests. Legal basis for processing is GDPR Art. 6.1(b) performance of contract.

3.3. Product, service and business development

Offering relevant and modern products and services serves both your and Our interests, and we want to be at the forefront of development in Our field. Personal data you provide—through your activity on our website or as a client—helps Us reach these goals. These processing activities are based on legitimate interests. Legal basis for processing is GDPR Art. 6.1(f) legitimate interest.

3.4. Newsletters and marketing

We offer many services that we would like you to use, and for this reason We keep you updated on our latest news. Newsletters and other types of marketing are ways for Us to be more relevant to you, with processing activities based on legitimate interests. Legal basis for processing is GDPR Art. 6.1(a) data subject consent.

3.5. Webinars and other digital events

We consider various events to be excellent opportunities to meet new people and connect with clients, and we naturally would like you to participate. Such processing activities are usually based on legitimate interests and the applicable conditions for the event. However, digital webinars are usually recorded for educational purposes to continuously improve Our services. The recording is based on Your consent. Legal basis for processing is GDPR Art. 6.1(a) data subject consent.

3.6. Handling relationships with suppliers

When buying products and services from suppliers, We process certain personal data to keep registers of suppliers, evaluate their products and services, follow up on purchases, and handle payments. We need to monitor supplier performance to maintain relationships with the best ones. This is based on the performance of a contract and legitimate interests.

3.7. Smooth visit on our website

Both you and We are interested in a website that is quick to use and suited to your preferences, supported by a smooth and user-friendly interface. Improving Our website helps us better serve the Customer (this is necessary for Our legitimate interests to study how customers use Our products/services, to develop them, to grow Our business, and to inform Our marketing strategy). Legal basis for processing is GDPR Art. 6.1(a) data subject consent.

3.8. Handling job applications, evaluating applicants

For possible interviews and applicant selection, we may use your personal data to maintain contact with you, evaluate if your experience is suited for Us, arrange interviews, and use certain basic personal data as the basis for a possible employment contract. The processing is based on Our legitimate interests. In certain limited situations, the processing is based on your consent (e.g. if we use personal data collected from third parties in the recruitment process). Legal basis for processing is GDPR Art. 6.1(a) data subject consent.

3.9. To follow up after correspondence (live chat, email or phone inquiries)

This is necessary for Our legitimate interests to study how customers use Our services, to develop them, to grow Our business, and to inform Our marketing strategy. At any time, you may email Us at asiakasvalitukset@omanelamanipomo.fi to unsubscribe from marketing letters or campaigns, or click the “unsubscribe” button on any email communication from Us. Legal basis for processing is GDPR Art. 6.1(b) performance of contract.

4. What personal data do we process?

The categories of personal data processed by Us vary depending on the type of data subject in question. The categories are as follows:

1. Technical user data: such as cookies, IP addresses, language settings, geographical location data, software and hardware versions, the subsites you have visited on our website, as well as likes and comments on our social media channels.
2. Contact information: such as name, e-mail address, postal address, postal code, city, and country.
3. Marketing consents and bans.
4. Client data: such as natural or legal person, office in charge, Our in charge, field of business, and client number.
5. Payment data: such as fee quotes, invoice amount, paid amounts, outstanding amounts, invoice date, due date of payment, reminders, contact person, and bank account numbers.

The personal data processed by Us is limited to what is necessary for the specific purpose. We require certain personal data to perform various tasks in accordance with applicable legislation and Our terms of service. You are entitled not to provide this personal data to us, but in such a case we cannot guarantee the delivery of our products and services in the best possible manner—or at all. For example, we cannot commence an assignment unless you provide us with the necessary personal data.

5. Data Sources

Personal data is primarily collected from you when you contact Us, require Our assistance, or purchase Our services. It is also generated by your own activities on our website or social media channels.

In special situations and upon explicit customer request, we might collect personal data from the trade register maintained by the Finnish Patent and Registration Office for client or assignment registrations. For assignment management, we collect the necessary personal data, which may also be obtained from third parties.

6. Cookies

Our website uses cookies, which are small text files saved on your computer when you visit a website. This website uses two types of cookies: necessary cookies and non‑essential cookies. Necessary cookies ensure that the website works smoothly from a technical and functional perspective (for example, for user identification, authentication, language settings, and the display of visual recordings). Without necessary cookies, the website's services will be available only to a limited extent. We have a legitimate interest (GDPR Art. 6.1(f)) in using necessary cookies; therefore, consent to them is not mandatory.

7. Categories of recipients

We mainly process personal data within the company for our own purposes. However, certain situations require that personal data is disclosed to third parties. For example, we might arrange events in cooperation with other organizations, and personal data may be disclosed to other event organizers or catering companies. We also work with several business service suppliers, and personal data may occasionally be disclosed to these organizations to facilitate our processing.

Assignment management might sometimes require disclosure of personal data to third parties. Since assignments often involve counterparties, opposing counsels, public authorities, banks, and insurance companies, personal data may need to be disclosed to these parties. Personal data may also be disclosed for obtaining expert advice.

8. Storage period

Your personal data will be stored for as long as necessary for the purposes set out in this Privacy Statement, unless longer storage is required by national law. The storage period can, for example, be determined by the requirements of the Accounting Act, the Money Laundering Act, or other relevant legislation. Customer data will be deleted at the end of the period required by law or when it is no longer necessary to process it.

If personal data is found to be incorrect, unnecessary, incomplete, or outdated for processing purposes, it will be corrected or deleted on the controller's initiative or at the request of the data subject.

9. Transfer of personal data outside the EU/EEA

We always aim to process personal data within the EU/EEA. If personal data is transferred outside the EU/EEA, We will ensure that the data is protected to the best of our ability. Data will only be transferred if it is adequately protected or if there are appropriate safeguards in place, such as binding corporate rules, standard contractual clauses, an approved policy, or binding internal company rules.

10. The rights of the data subject

10.1. Right of inspection ("Registration Document")

The data subject has the right under the GDPR to check what data relating to him/her is recorded in the controller's personal data register. The request for inspection must be submitted in writing by post to the address in section 1. The request should include the data subject's name, contact details (address, e-mail address, and/or telephone number), and the data to be checked. The right of access will be exercised without undue delay and within the time limits set by the GDPR.

10.2. Right to rectification

The data subject has the right to request the rectification of inaccurate, incomplete, or outdated data. The request for rectification may be addressed to the Data Protection Officer and must specify the corrections requested along with the reasons for them. Incorrect data will be corrected after verification of identity.

10.3. Right to erasure ("right to be forgotten")

Data subjects have the right to request the erasure of their data if the processing is not necessary. Requests for erasure will be processed and the data deleted unless there is a legitimate reason to retain it (for example, legal obligations). The controller may refuse to erase data if retention is necessary for establishing, exercising, or defending legal claims.

10.4. Right to restriction of processing

The data subject has the right to request the restriction of processing, for example, if the accuracy of the data is contested. Requests for restriction should be made in writing to the Data Protection Officer.

10.5. Right to object to processing

The data subject has the right to object to the processing of personal data when the processing is based on the controller's legitimate interests. The controller may not continue processing the data unless it can demonstrate compelling legitimate grounds that override the interests, rights, and freedoms of the data subject, or if the processing is necessary for establishing, exercising, or defending legal claims.

10.6. Right to data portability

In certain circumstances, the data subject has the right to receive data concerning him/her in a machine-readable format and to transfer that data to another controller. This applies to data that the data subject has provided to the controller and that is processed automatically on the basis of consent or a contract.

10.7. Right to opt-out of direct marketing

Data subjects have the right to object to the use of their data for direct marketing. This right may be exercised at any time by contacting the controller.

11. Right to lodge complaints with the supervisory authority

You have the right to lodge a complaint against Our processing of personal data with the Finnish supervisory authority. The authority supervising Our processing of personal data in Finland is the Office of the Data Protection Ombudsman (www.tietosuoja.fi). You may also lodge a complaint with the supervisory authority in your country of residence.

12. Profiling and automated decision-making

We do not use automated decision-making, including profiling, in Our decision making.

13. Amendments to the Privacy Statement

This Privacy Statement may be amended and updated due to changes in data protection legislation, changes in practices, or other necessary reasons. Any changes will be published on this page, and significant changes may also be communicated directly to data subjects. It is recommended that you review this Privacy Statement regularly for any changes.