Policy for Business Customers and Decision-Makers 

Updated 03.04.2025

Controller

MPS Enterprises Ltd.
Business ID: 0201148-3
Keilaranta 17 C, 02150 Espoo
+358 (0)20 7469 400
privacy@mps.fi

Contact for the register and data protection office

In data protection matters, please contact us at: privacy@mps.fi.

Name of the register

Business Customer and Decision-Maker Register of MPS Enterprises Ltd. and its subsidiaries.

Purpose and legal basis of processing personal data

We process the personal data pertaining to MPS’s business customers and their decision-makers on the basis of our legitimate interest, the customer representative’s consent, fulfillment of a contract and/or legal obligation.  

The personal data of business customers is used to deliver, maintain, develop and analyze contractual and customer relationships between MPS and business customers, as well as for statistical purposes.

The personal data of decision-makers is used for direct marketing and conducting MPS Enterprises opinion and market surveys, as well as for the design and development of MPS’s business and services.

Content of the register

The register may contain the following data related to a company, persons in charge of companies and entities, persons involved in the service processes and other stakeholders: 

• Name, title (incl. job description), company, phone number, e-mail address, postal address
• Interests and profiling information
• Customer feedback and contacts
• Information provided by the data subject (e.g. professional interests of the data subject)
• Information on a person's participation in MPS's service processes: mentoring programs, trainings, organizational research, outplacement programs and career guidance, coaching, family governance advisory processes, development processes, online training.
• Other possible information MPS services require
• Direct marketing restrictions
• Other information that is necessary for the intended use of the register

Regular sources of information

Our primary sources of information to be included in the register are the data subjects themselves, who may provide information by phone, online, during meetings, in client events or in similar ways. Personal data may be collected and maintained from generally available sources, such as websites of companies and other service providers (e.g. Suomen Asiakastieto Oy), and private and public registers.

Regular disclosure of data

The controller discloses data to third-party subcontractors. We process personal data mainly within the European Union or the European Economic Area. However, some of our subcontractors may also process personal data from outside the EU area, in which case we have ensured that such subcontractor is committed to upholding the requirements of the EU General Data Protection Regulation.

MPS does not regularly disclose data to third parties, unless disclosure is required by the law or on the orders of public authorities.

Principles for data security

Personal data is kept confidential. Only specified persons working on behalf of the controller have access to and the right to process customer data and personal data stored in our systems. Access to the system requires the use of a username and password for each user.

The data is collected in databases that are protected with firewalls, passwords and other technical measures. The databases and their back-ups are located in locked and guarded premises to which only certain designated persons have access to. Personal data is stored for as long as is necessary for their intended use. Personal data contained in the customer and decision-maker register will be deleted when the information used for marketing actions is identified as obsolete or unavailable.

Right of inspection and deletion of data

The data subject has the right, pursuant to the law, to inspect the data concerning himself/herself that is stored in the register. The request for an inspection (incl. a request for erasure) has to be done in writing and sent signed to the controller at the address indicated above. The data subject may exercise the inspection right once a year free of charge.

Right of rectification of incorrect data

The data subject also has the right to demand corrections to incorrect data. A request for rectification shall specify the incorrect data and provide the corrected data. A request for rectification must be made in writing and be sent signed to the controller at the address indicated above.

Other rights of the data subject

The data subject has the right to refuse the processing of data concerning himself/herself for use in direct marketing and opinion surveys. The refusal can be made at any time to the controller at the address above or by unsubscribing from a mailing list by following the instructions in marketing messages.

Changes to the Privacy Policy

We constantly improve and develop our services and websites and may occasionally make changes to this Privacy Policy. We will update the new policy on our website and mark the date of the update. Please read this Privacy Policy from time to time to get up-to-date information on any changes.