Modified
28.09.2026

Business Partner Register

Privacy Policy

Data controller

Strongest Group Oy (3214681-3)
Annankatu 31-33 E 62
00100 Helsinki
Suomi

Contact person for matters concerning the register

tietosuoja@strongest.fi

Registry

Business Partner Register

Preparation date

2026-09-28

Legal basis for processing

Legitimate Interest

Purpose of processing personal data

Personal data is processed to manage Strongest Group Oy’s cooperation with its business partners, suppliers and subcontractors. We use the data to communicate, prepare and manage agreements, deliver services, and handle matters and obligations relating to the cooperation.

The processing of organizational contact persons’ data is based on Strongest Group Oy’s legitimate interest in managing these relationships. Where the contracting party is an individual, such as an entrepreneur acting in their own name, the processing of personal data necessary to prepare and perform the agreement is based on the contract.

Basis of legitimate interest

Strongest Group Oy has a legitimate interest in establishing, carrying out and maintaining relationships with business partners, suppliers and subcontractors. We process information relating to the professional roles of these organizations’ contact persons so that we can communicate with them and handle matters relating to the cooperation.

Personal data categories concerned

Contact persons of business partners, suppliers and subcontractors, as well as entrepreneurs acting in their own name.

Recipients and recipient groups

Personal data is processed, according to their duties, by authorized employees of Strongest Group Oy and subcontractors involved in the cooperation. Data may also be processed by providers of the email, contract management, financial administration and cloud services we use, to the extent necessary to manage the cooperation.

Data content of the register

The partner register may contain the following information:

- name, role and organization or sole proprietorship represented
- business contact details, such as email address, phone number and postal address
- information relating to agreements, cooperation and communications
- information describing the performance and results of assignments
- for an entrepreneur acting in their own name, information needed to manage the agreement and invoicing, such as a Business ID.

Regulatory data sources

We obtain data from the data subject and the organization they represent during communications, contract negotiations and cooperation. We may also receive data from partners and subcontractors involved in the cooperation and from public professional sources, such as organizations’ websites and professional networking services. Data may additionally be obtained from commercial company and contact information services.

Personal data retention period

We retain personal data while preparing and managing the cooperation. We update or delete contact details when we find that they are outdated or no longer needed to manage the cooperation. After the cooperation ends, we retain information relating to agreements and invoicing to the extent and for as long as required by legal obligations or the handling of potential legal claims.

Regulatory data transfers

Contact details may be shared with customers, partners and subcontractors involved in the cooperation to the extent necessary to manage it. Data may also be processed by providers of the contract management, financial administration and IT services used by Strongest Group Oy. We may disclose data to public authorities where required by law.

Transfer of data outside the EU or EEA

Personal data in the partner register may be processed outside the EU or EEA through the services we use. Where data is transferred, we use a transfer mechanism applicable to the service under the GDPR, such as a European Commission adequacy decision (including the EU–US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses. Information about the transfer mechanisms used is available on request at tietosuoja@strongest.fi.

Principles of register protection A: Manual data

Partner register data is mainly processed electronically. Any paper contracts or other documents containing personal data are stored so that they are accessible only to people who need them for their work. Documents are securely destroyed when they no longer need to be retained.

Principles of register protection B: Electronic material

Electronic partner register data is stored in systems used by Strongest Group Oy. Access is limited to people who need the data for their work. Users sign in with individual accounts, and access rights are managed according to their duties.

Automatic processing and profiling

Electronic tools may be used to identify potential partners.

Information describing the performance and results of assignments carried out by partners may be processed in our systems. We may use this information to plan the cooperation and future assignments. Decisions concerning a partnership or agreement are not made solely by automated means.

Right of inspection, i.e. the right to access personal data

The data subject has the right to know whether Strongest Group Oy processes personal data concerning them and to access and receive a copy of that data. Requests can be sent to tietosuoja@strongest.fi. If we have reasonable doubts about the identity of the person making the request, we may ask for additional information needed to verify their identity.

The right to transfer data from one system to another

In certain circumstances, the data subject may have the right to receive personal data they have provided to us in a commonly used, machine-readable format and to transmit it to another controller. This applies where the processing is automated and based on a contract with the data subject. Requests can be sent to tietosuoja@strongest.fi.

The right to demand correction of information

The data subject has the right to request the correction of inaccurate personal data concerning them and the completion of incomplete data. Requests can be sent to tietosuoja@strongest.fi. It is helpful to specify which information is inaccurate or missing.

Right to restriction

The data subject has the right to request restriction of the processing of their personal data in the circumstances set out in the GDPR, for example while we verify the accuracy of data they have contested. Requests can be sent to tietosuoja@strongest.fi.

Right to object

The data subject has the right to object to processing based on Strongest Group Oy’s legitimate interest on grounds relating to their particular situation. Objections can be sent to tietosuoja@strongest.fi. Whether processing may continue after an objection will be assessed in accordance with the GDPR.

Right to lodge a complaint with a supervisory authority

If you consider that the processing of personal data concerning you infringes data protection legislation, you have the right to lodge a complaint with a supervisory authority.

You may lodge a complaint in the Member State of your habitual residence or place of work.

Office of the Data Protection Ombudsman Visiting address:
Lintulahdenkuja 4
00530 Helsinki
Postal address: P.O. Box 800
00531 Helsinki
Telephone exchange: +358 29 566 6700
Registry: +358 29 566 6768
tietosuoja@om.fi
www.tietosuoja.fi

Other rights related to the processing of personal data

The data subject has the right to request the deletion of their personal data where the conditions laid down in the GDPR are met. Requests can be sent to tietosuoja@strongest.fi. We may nevertheless retain data to the extent that a legal obligation or another lawful ground requires it, for example to handle a legal claim.