Privacy notice

Controller and contact details

The controller of the personal data is Trust BNK Group Oy. The company has offices in Kuopio and Porvoo, Finland.

Please send enquiries about data protection and about the rights of the data subject to tuki@trust360.fi. We respond without undue delay and no later than one month from receiving the request.

• Controller: Trust BNK Group Oy
• Business ID: 3546116-5
• Offices: Kuopio and Porvoo, Finland
• Data protection matters: tuki@trust360.fi
• Sales and quote requests: myynti@trust360.fi
• Recruitment: rekry@trust360.fi

What personal data we process

We process only the data needed to respond to your enquiry. The site does not collect personal data in the background, and visitor behaviour is not tracked with analytics tools.

• Contact form: name, company, work email address, phone number, subject of the enquiry and the content of the message.
• Quote request forms: the data listed above plus estimated invoice volume and the services selected as areas of interest.
• Demo booking request: name, work email address and the chosen day and time.
• Open job applications: the information supplied by the applicant by email, such as name, contact details, CV and cover letter.
• Technical data on the form submission: the timestamp of the submission and the consent given on the form.

Where the data comes from

All data we process is obtained from the data subject: from a form on the site or directly from a message sent by email. We do not buy contact details from marketing registers and we do not enrich form data from external sources.

The forms on the site are intended for representatives of companies and organisations, so we ask you to provide a work email address and a work phone number as contact details. Forms should not be used to submit sensitive data, or the data of other people without their knowledge.

Purposes and legal bases of processing

Personal data is processed only for the purposes described below. The data is not used for automated decision-making or profiling.

• Responding to enquiries, quote requests and demo bookings, and taking the pre-contractual steps requested. Legal basis: Article 6(1)(b) of the General Data Protection Regulation.
• Sales contact and preparation of a customer relationship on the basis of the enquiry. Legal basis: the legitimate interest of the controller (Article 6(1)(f)). The legitimate interest rests on the fact that the data subject has themselves requested contact as a representative of their organisation.
• Recruitment and the handling of open job applications. Legal basis: pre-contractual steps and the legitimate interest of the controller in carrying out recruitment.
• The forms also ask for separate consent to the processing of contact details. Consent can be withdrawn at any time at tuki@trust360.fi; withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Retention periods

Data is deleted once there is no longer a basis for retaining it. Compliance with the retention periods is reviewed regularly.

• Enquiries, quote requests and demo bookings: 24 months from the most recent contact.
• Open job applications: 12 months from the receipt of the application, unless the applicant consents to a longer retention period.
• Enquiries that lead to a customer relationship: the data moves under the retention periods set out in the customer agreement.

Recipients and processors of the data

Personal data is handled by employees of Trust BNK Group Oy whose duties require it. We also use service providers that process the data on our behalf as processors.

Personal data is not sold, rented or disclosed to third parties for their own marketing purposes. Data may be disclosed to an authority where the law so requires.

• A cloud hosting provider in the EU stores the website and the submissions from the forms.

Transfers outside the EU and the EEA

Personal data collected through the site is stored and processed within the European Union and the European Economic Area.

Personal data is not transferred outside the EU or the EEA. Should a need for a transfer arise later, we will secure a basis for it under Chapter V of the General Data Protection Regulation and update this notice before the transfer begins.

Security of the data

Personal data is protected by technical and organisational measures scaled to the risk involved in the processing.

We instruct our staff on the handling of personal data, and the obligations concerning it are set out in employment contracts and internal guidelines.

Rights of the data subject

The data subject has the rights to their own personal data set out in the General Data Protection Regulation. A request to exercise these rights should be sent to tuki@trust360.fi. We may ask the person making the request for further information in order to verify their identity.

If a data subject considers that the processing of their personal data breaches data protection legislation, they have the right to lodge a complaint with a supervisory authority. In Finland the supervisory authority is the Office of the Data Protection Ombudsman (tietosuoja.fi).

• The right of access to one's own data.
• The right to rectification of the data.
• The right to erasure of the data.
• The right to restriction of processing.
• The right to object to processing based on legitimate interest.
• The right to data portability.
• The right to withdraw a consent given, at any time.

Changes to this notice

We update this notice if the processing of personal data, the service providers used or the legislation change. The version in force is always available on this page.

This notice was updated on 29 Sep 2026.