Privacy Policy

Date:31 May 2022

Please ensure that you have read the Airaimpact privacy policy.

Airaimpact questionnaire register focuses on organizations and not private individuals. Therefore we process only very limited personal data. The data controller with respect to personal data is Airawise Oy, Business-ID 2945033-9, Terätie 16 B, 01650 Vantaa, Finland a Finnish limited liability company. 

The personal data processed is:

• Email address. The email address you enter may contain personal data. If it is a personal address or contains a person’s name, it likely is personal data and we treat it as such. In general we will assume all email addresses being personal data, as that guarantees best protection for personal data.
• Name of a person and basic contact details. In some cases, e.g. when carrying out pilot projects, we may collect names and contact details, such as email and telephone numbers, in order to facilitate the carrying out of the project.
• The name of the company. While the name of the company is mostly not personal data, it may in some cases, for example when associated with a personal email, be personal data.
• Site usage data, including time, rough location and device configuration data. your browser transmits this data to us when you use the service. This data may be associated with you, if you use the service with a personal email address, and therefore can be personal data. 
• Other data. We may also collect non-personal data. By non-personal data, we mean all other information we collect that does not enable you to be identified either on its own or in combination with other data we hold. Other data is not subject to this privacy policy, as it is not personal data.

We process personal data for the following purposes: 

We process personal data for providing you the service and communicating with you regarding the service and its eventual features. This includes us communicating with you or your partner network, where you or your partner have requested us to do so. Also, we may analyze the data to understand the reliability of data you or others have provided to us, including to detect fraud. We may also use the data for developing the service. We may also provide you with personalized marketing or recommendations relating to your use of our services, unless you let us know that you do not wish to receive such marketing.

The legal grounds for data processing

The lawful grounds for processing your personal data is based on our customer relationships, and because processing your personal data is necessary in order to provide our services. The processing may also be necessary for the purposes of our legitimate interests or the legitimate interests of a third-party.

Data storage and data transfers

Alchemer LLC

The data is stored with Airawise Oy’s subcontractor, Alchemer LLC, a Colorado USA based company, with their privacy policy available at https://www.alchemer.com/privacy/. 

As a safeguard, to the extent information is transferred outside of the European Union, Airawise Oy has entered into model contract clauses set by the European Commission with Alchemer LLC.

User rights

You may have the right to obtain a confirmation that we are processing your personal data and the right to know what information we have collected about you. You may also have the right to have incorrect, incomplete, inaccurate, unnecessary or outdated data removed or rectified and, under certain conditions, to restrict or object the use of personal data according to applicable legislation.

The Finnish Office of the Data Protection Ombudsman is the applicable data protection authority. Eventual complaints could be addressed to: https://tietosuoja.fi/en/contact-information 

Data security

Key suppliers: https://www.alchemer.com/security/
https://www.google.com/about/datacenters/data-security/

Airawise is further committed to host its own databases at ISO27001 and GDPR compliant datacenters. Airawise further maintains its user and access management in line with ISO27001. As a startup Airawise does not immediately seek full ISO27001 compliance and certification, but it aspires to comply with the standard. 

We have ensured the security of the stored data appropriately considering the type of personal data stored. 

When choosing our data processing partners, we have taken a view on security considerations. Our subcontractor, Alchemy states in their privacy policy that  “We have extensive security measures in place to protect your Information, and we are committed to the protection of your data. Unique user names and passwords must be entered each time a person logs on. We work with a third-party Tier 1 data center service provider, AWS, to host our Site, Services, and Software in a secure production environment that uses a firewall and other technology to reasonably prevent access from outside intruders.”

As to our own processes, we have considered our own processes with respect to data handling, IT device best practices and password management from the perspective of data security. 

Updates and changes to this privacy policy

We want to ensure that this Privacy Policy properly reflects the way we handle your data and therefore we need to reserve the right to make changes to it at our sole discretion whenever it is necessary. Although we will use reasonable efforts to notify you of all substantial changes to this Privacy Policy, you should also do your best to review this document on a regular basis. Notwithstanding the foregoing, we will obtain your consent to such changes where required to do so by applicable data protection laws.