Strongest Group Oy (3214681-3)
Annankatu 31-33 E 62
00100 Helsinki
Suomi
tietosuoja@strongest.fi
Prospect and Potential Customer Register
2026-09-28
Legitimate Interest
We process personal data to target Strongest Group Oy’s B2B sales and direct marketing, identify potential customers and their representatives, build prospect lists, enrich and verify contact details, and communicate about our services.
We also process data to manage contacts, responses and requests concerning data protection rights, and to comply with objections to direct marketing.
Our legitimate interest is to conduct our business and market our services to organizations and representatives whose professional roles make the services relevant to them.
Processing is limited to information relating to a person’s professional role and necessary for these purposes. We have assessed the need for processing and its effects on the rights and freedoms of the people concerned. The assessment takes account of their reasonable expectations, the sources and scope of the data, and the safeguards used.
A person may object to the processing of their personal data for direct marketing at any time. After an objection, we no longer use their data for direct marketing. Electronic direct marketing is also subject to the electronic communications and direct marketing laws applicable in the recipient’s country.
Representatives, employees and decision-makers of companies and other organizations whose professional roles make them potential customers or partners for Strongest Group Oy’s services.
Personal data may be processed by authorized employees of Strongest Group Oy and by subcontractors and service providers working on its behalf, including data suppliers and providers of data enrichment and verification, CRM, campaign, communications, IT and AI services. We do not sell personal data or disclose it to third parties for their own marketing.
The register may contain:
- name, job title and professional role
- the organization represented and its domain name
- business email address and phone number
- professional social media profile, such as a LinkedIn URL
- professional location, such as city or country
- information about the source of the data and verification of contact details
- contact, campaign and communication history
- the minimum suppression information needed to comply with an objection to direct marketing.
To target prospecting, we may also use background information about the person’s organization, such as its industry, number of employees and revenue range.
We may receive personal data directly from the person through emails, calls, meetings, contact forms and other communications.
We may also obtain data from publicly available sources related to the person’s professional role, such as company websites and professional networking services.
Data may also be obtained from commercial suppliers of company and contact information, as well as data enrichment, business email lookup and verification services. A business email address may be obtained and verified using such services.
We retain prospects’ personal data for as long as it is needed for the purposes described in this notice. We update or delete data when we find that it is outdated or no longer needed. Information relating to a business interaction, such as an agreed meeting or a customer relationship, may be retained to manage that interaction and any follow-up.
After an objection to direct marketing, data is removed from marketing use. We may retain the minimum suppression information necessary to prevent further contact. We may also retain data for as long as needed to comply with legal obligations, document the handling of data protection requests or deal with legal claims.
Personal data may be processed by service providers used by Strongest Group Oy for data lookup and verification, prospecting, campaigns, customer relationship management, communications, AI services, and cloud and IT services.
Processors acting on our behalf handle the data in accordance with our instructions and applicable agreements. Some data suppliers may act as independent controllers. We do not sell personal data or disclose it to others for their own marketing. Data may be disclosed to public authorities where required by law.
Prospects’ personal data may be processed outside the EU or EEA through the services we use. For such transfers, we use a transfer mechanism applicable to the service under the GDPR, such as a European Commission adequacy decision (for example, where a recipient is certified under the EU–US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses. Further information about the transfer mechanisms and safeguards used is available at tietosuoja@strongest.fi.
Prospects’ personal data is mainly processed electronically. If information is handled on paper, documents are kept out of the reach of unauthorized people and access is limited to those who need the information for their work. Documents that are no longer needed are securely destroyed.
Access to personal data is limited to people who need it for their work. Access requires user authentication. Appropriate technical and organizational security measures are used to protect the systems and devices that process the data.
Automated tools may be used to find, enrich and verify information, target prospecting, and personalize communications to a limited extent. We do not make decisions concerning a person based solely on automated processing that have legal or similarly significant effects on them.
The data subject has the right to know whether we process personal data concerning them and to access and receive a copy of that data. Requests can be sent to tietosuoja@strongest.fi. If we have reasonable grounds to doubt the requester’s identity, we may ask for additional information needed to verify it.
The right to data portability does not apply to processing based on legitimate interest.
The data subject has the right to request the correction of inaccurate personal data concerning them and the completion of incomplete data. Requests can be sent to tietosuoja@strongest.fi. It is helpful to specify which information is inaccurate or missing. Where possible and reasonable, we will inform those to whom the data was disclosed of the correction.
The data subject has the right to request restriction of the processing of their personal data in the circumstances set out in the GDPR, for example while we verify the accuracy of data they have contested. Requests can be sent to tietosuoja@strongest.fi.
The data subject has the right to object to the processing of their personal data for direct marketing at any time by contacting tietosuoja@strongest.fi.
After an objection, we no longer process their personal data for direct marketing. To comply with the objection, we may retain on a restricted suppression list only the minimum information necessary to prevent further contact and re-sourcing of the data.
If a data subject believes that their personal data has been processed in violation of the GDPR, they have the right to lodge a complaint with a supervisory authority.
Complaints may also be submitted in the EU Member State where the data subject has their habitual residence or place of work.
Supervisory Authority in Finland
Office of the Data Protection Ombudsman
Visiting address:
Lintulahdenkuja 4
00530 Helsinki
Finland
Postal address:
PO Box 800
00531 Helsinki
Finland
Telephone: +358 29 566 6700
Registry: +358 29 566 6768
Email: tietosuoja@om.fi
Website: www.tietosuoja.fi
The data subject has the right to request the deletion of their personal data where the conditions laid down in the GDPR are met. After a deletion request, we may nevertheless retain the minimum suppression information necessary to prevent further marketing contact, as well as data for which there is another lawful ground for retention. Requests can be sent to tietosuoja@strongest.fi.