Data Protection

The new EU General Data Protection Regulation (GDPR) grants individuals greater rights over the management of their personal data. Data controllers and processors must implement appropriate technical and organizational measures to protect personal data from unauthorized access, accidental or unlawful destruction, alteration, disclosure, transfer, or any other unlawful processing.

Funlus Oy has prepared for the General Data Protection Regulation (GDPR) during 2017–2021 by training staff, drafting a data protection report, incorporating a data protection appendix into contracts and terms of use, implementing security guidelines, applying technical safeguards, and establishing information practices. Your personal data (as a registered user) is processed in accordance with the regulation. By continuing to use the online service, you accept the following privacy policy and the use of cookies on the website.

Information about cookies

You can manage and disable cookies through your web browser settings and the website’s cookie settings.

Cookies are essential for the basic functionality of the funlus.fi online service (e.g., login). Their purpose is to enhance the user experience.

Voit päättää, ettet halua sinua ja tekemiäsi seurattavan tällä sivustolla. Niin toimimalla suojaat yksityisyyttäsi, mutta samalla estät sivuston omistajaa oppimasta toimistasi ja siten estät paremman käyttökokemuksen kehittämisen sinulle sekä muille sivuston käyttäjille.

Online Service Privacy Policy

1. Data Controller

Name: Funlus Oy
Address: Matintie 21 A krs 2, 73300 NILSIÄ
Other Contact Information

asiakaspalvelu@funlus.fi / +35850 585 6005

2. Data protection-related requests

Contact information for the registered person’s rights and requests:
asiakaspalvelu@funlus.fi / +35850 585 6005
REQUEST FOR REVIEW OF REGISTERED DATA -form

3. Register name

Online Service User Register

4. Purpose of Personal Data Processing

To ensure the proper use of the funlus.fi online service.

Collecting data to develop the online service with a customer-oriented approach.

Forwarding a quotation request/support incident report to the data controller. Forwarding an open application to the data controller. Chat functionality. Appointment booking for the customer.

5. Register Data Content

Online service users, job applicants, customers, employees

Website user data: IP (Internet Protocol) address, cookie data, device type, traffic source, visit time

– In a quotation request/contact request

– email, phone number, name, message, company, subject, attachments

– Open application

Name (*), Phone number, Email (*), Place of residence, Year of birth, Brief educational background, Brief work experience, Work samples, Type of employment (*), Type of work you are looking for, CV

Online store order details, products, quantities, order date, amounts

Chat conversations, name, email (IP addresses are not stored), and information provided by the customer in the chat conversation. For appointment bookings, additionally, the agreed time and contact details.

6. Regular sources of information

Information provided by the user of the website in the online service and during browsing.

7. Regular disclosures of information

Information is not disclosed outside the EU to companies that do not meet the equivalent requirements set by the GDPR. The data remains with the data controller and data processors. Read the full list of data processing details on the General Terms of Service page.

8. Transfer of data outside the EU or EEA

The company’s online service is hosted in an AWS data center in Frankfurt. User data from the website is stored on this server anonymously.

9. Protection

Access control to premises. Identification is required from authorized individuals. User data is anonymized and stored in a secure cloud environment. The data cannot be linked to natural persons without information from the Internet service provider. Secure connection in the online service (SSL). Dual authentication.

10. Risks

Risks related to personal data include, for example, data security breaches. Personal data stored in the register is protected against unauthorized access, accidental or unlawful destruction, alteration, disclosure, transfer, or other illegal processing.

11. Rights of the Data Subject

  • Right to access personal data
  • Right to rectification of data
  • Right to erasure of data
  • Right to restrict processing
  • Right to object
  • Right to data portability (where applicable)

A request to exercise the data subject’s rights must be made in writing to the data controller via email if it cannot be done through the self-service portal.

  • Newsletter subscribers manage their subscriptions directly from their email. Each message includes an option to unsubscribe and update personal information.
  • In the My Account section, you can manage information related to online store orders and download/view digital materials. Registration is not mandatory.

12. Retention period

Matomo Analytics does not store user-level data; anonymized user data is deleted after a three-year retention period.
Incident reports, contact requests, and open applications are stored for a maximum of two years and then removed from the records unless there is a legal or regulatory basis for processing. Online store orders are retained for seven years in accordance with accounting law.