Privacy Policy

Osumatech Oy, including its affiliates ("Osumatech", "we", "us", or "our"), is committed to safeguarding your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you interact with our websites (www.osumatech.ai, app.osumatech.ai, or other Osumatech-owned sites), services, or applications. By accessing or using our services, you consent to the practices described in this policy, in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR) and relevant US regulations.

Personal data refers to any information relating to an identified or identifiable individual, such as your name, email address, or IP address. This policy outlines your rights and our obligations regarding your personal data.

1. Data We Collect

We collect personal data in the following ways:

Information You Provide: When you register, contact us, or use our services, you may provide data such as your name, email address, phone number, or payment details. For job applicants, this may include CVs, work experience, or qualifications.
Automatically Collected Data: We collect navigational data when you visit our websites or apps, including your IP address, device type, browser type, operating system, geographical location, referral sources, and browsing behavior (e.g., pages viewed, time spent).
Third-Party Data: We may obtain publicly available data from platforms like LinkedIn or business partners, ensuring compliance with applicable laws. This may include professional profiles or contact details.
Demographic Data: We may collect non-identifying data, such as age range, interests, or preferences, to enhance our services.

Children's Data: Our services are not directed to individuals under 16. We do not knowingly collect data from children under 16. If you believe we have such data, contact us at privacy@osumatech.ai to request deletion.

2. How We Use Your Data

We process your personal data for the following purposes, based on legal grounds such as your consent, contractual necessity, or our legitimate interests:

To provide, maintain, and improve our websites, apps, and services, including personalizing your experience.
To process transactions, fulfill contracts, and deliver requested products or services.
To communicate with you, including responding to inquiries and sending service-related notices.
To send marketing communications, where you have explicitly consented, about our services or third-party offerings.
To assess job applications for current or future opportunities.
To analyze usage trends, conduct research, and improve site functionality or advertising effectiveness.
To comply with legal obligations, protect our rights, or prevent fraud.

We do not use your data for automated decision-making that produces legal or significant effects without human oversight.

3. Sharing Your Data

We do not sell, rent, or lease your personal data. We may share your data only in the following cases:

With Your Consent: When you explicitly agree to data sharing, e.g., for third-party marketing.
Service Providers: With trusted vendors (e.g., hosting, analytics, or payment processors) who process data on our behalf under strict confidentiality agreements.
Legal Requirements: When required by law, such as in response to a court order, subpoena, or regulatory request.
Business Transfers: In connection with a merger, acquisition, or sale of assets, ensuring continued protection of your data.
Safety and Rights: To protect Osumatech, our users, or the public from harm, fraud, or illegal activities.

We ensure any third-party recipients comply with applicable data protection laws.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. Cookies are small text files stored on your device. Types of cookies we use include:

Essential Cookies: Necessary for website functionality (e.g., session management).
Analytics Cookies: To understand user behavior and improve our services.
Marketing Cookies: To deliver relevant ads, with your consent.

You can manage cookie preferences via your browser settings or our cookie consent tool. Disabling cookies may affect site functionality. For details, see our Cookie Policy.

5. Social Media Features

Our websites may include social media features (e.g., LinkedIn share buttons). These features, provided by third parties, may collect your IP address or set cookies. Your interactions with them are governed by the respective third-party privacy policies, not this policy.

6. International Data Transfers

As a global company, we may transfer your data to countries outside the EU/EEA, including the US, for processing or storage. We ensure such transfers comply with GDPR through:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Adequacy decisions, where applicable.
Other safeguards to protect your data.

By using our services, you consent to these transfers, subject to our protective measures.

7. Data Security

We implement technical and organizational measures (e.g., encryption, access controls) to protect your data from unauthorized access, loss, or disclosure. However, no internet transmission is fully secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any account credentials.

8. Your Rights

Under GDPR and applicable laws, you have the following rights regarding your personal data:

Access: Request a copy of your data.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your data, subject to legal exceptions.
Restriction: Limit processing in certain circumstances.
Portability: Receive your data in a structured, machine-readable format.
Objection: Object to processing based on legitimate interests, including marketing.
Withdraw Consent: Revoke consent at any time, without affecting prior processing.

To exercise these rights, contact us at privacy@osumatech.ai. We will respond within one month, extendable by two months for complex requests. You may also lodge a complaint with a supervisory authority, such as the Finnish Data Protection Ombudsman (tietosuoja.fi).

9. Data Retention

We retain your data only as long as necessary for the purposes outlined in this policy, or as required by law. For example:

Customer data is kept for the duration of our relationship and up to 6 years thereafter, per Finnish accounting laws.
Marketing data is retained until you withdraw consent.
Job application data is kept for 2 years unless you request earlier deletion.

To request deletion, contact privacy@osumatech.ai.

10. Third-Party Links

Our websites may link to external sites. We are not responsible for their content or privacy practices. Review their policies before sharing data.

11. Changes to This Policy

We may update this policy to reflect legal or operational changes. Significant updates will be communicated via our website or email. Check this page periodically for the latest version. Your continued use of our services after changes indicates acceptance of the updated policy.

12. Contact Us

For questions, concerns, or to exercise your rights, contact our Data Protection Officer:

Email: privacy@osumatech.ai
Address: Osumatech Oy, 3539002-9, Finland

Unsubscribe: To opt out of marketing emails, use the “unsubscribe” link in our emails or email privacy@osumatech.ai.

This Privacy Policy was last updated on June 4, 2025.