Privacy Policy

Fament Oy   |   Updated 21.8.2026

1. Data Controller

Fament Oy
Business ID 2789202-9
Eteläesplanadi 2, 00130 Helsinki

2. Contact Person for Register Matters

Teemu Rämö, CEO
contact@fament.fi

3. Name of the Register

Fament Oy's customer and marketing register.

4. Websites Related to the Register

fament.fi and its subpages, including the Finnish and English language versions.

5. Purpose and Legal Basis for Processing Personal Data

We process personal data for the following purposes:

• Responding to contact requests and making offers. Legal basis: preparation of a contract or legitimate interest.

• Managing and developing the customer relationship. Legal basis: contract.

• Sending newsletters and electronic direct marketing. Legal basis: consent.

• Compiling statistics on website use and targeting advertising. Legal basis: consent given in the cookie banner.

• Fulfilling statutory obligations, such as accounting. Legal basis: statutory obligation.

6. Data Content of the Register

Customers and contact persons

Name, email address, phone number, company and job title, content of the contact, communication history, and information related to assignments and invoicing.

Newsletter subscribers

Name, email address, and information about the start and cancellation of the subscription.

Information on the use of the website

Cookie-based information, such as browser, device, page path, traffic source, and duration of the visit.

7. Regular Sources of Data

Information is primarily obtained from the data subject themselves:

• Contact form on the website

• Newsletter subscription form

• Email, phone, and meetings

• Cookies and analytics on the website

• Public sources, such as company websites and LinkedIn

8. Services Used and Data Processors

We use the following service providers who process personal data on our behalf:

Service | Purpose of Use | Transfer Outside the EU or EEA

• Framer | Website publishing platform and technical implementation of contact forms | Yes

• Pipedrive | Customer Relationship Management (CRM). Contact form details are transferred here | Yes

• Microsoft 365 | Email, file storage (SharePoint), and internal communication | Yes

• Google Analytics | Website usage statistics | Yes

• Google Advertising | Ad targeting and measurement | Yes

• Meta (Facebook, Instagram) | Ad targeting and measurement | Yes

• ActiveCampaign | Sending newsletters and email marketing | Yes

• WebinarJam | Organizing webinars | Yes

A valid data processing agreement must be in place with each processor.

9. Disclosure of Data and Transfer Outside the EU or EEA

We do not sell or disclose personal data to third parties for marketing purposes. The data is only processed by the service providers listed above.

Some service providers process data in the United States. Transfers are based on standard contractual clauses approved by the Commission or the EU-US Data Privacy Framework.

10. Retention Period of Personal Data

• Customer and contact information: seven years in email archives and accounting.

• Newsletter subscriber information: until the subscriber cancels the subscription.

• Cookie data: according to the cookie-specific validity period.

11. Cookies and Analytics

The website uses cookies. Necessary cookies are always active. Cookies related to statistics and advertising are only activated when the visitor accepts them in the cookie banner.

We use Google Analytics to compile statistics on website use. The visitor can change their selection at any time in the website's cookie settings.

12. Rights of the Data Subject

You have the right to:

• know what data is being processed about you

• demand the correction of incorrect data

• request the deletion of your data

• restrict or object to the processing of your data

• receive the data you have provided in a portable format

• withdraw your consent at any time, for example regarding the newsletter

• file a complaint with the Data Protection Ombudsman's Office

Requests should be addressed to the contact person mentioned in section 2. We will respond to the request within one month. The right to erasure does not apply to data that we have a statutory obligation to retain, such as accounting records.

The supervisory authority is the Office of the Data Protection Ombudsman, tietosuoja.fi.

13. Principles of Data Protection

The data is only processed by Fament employees whose duties require it. Systems are protected by personal usernames and passwords, and multi-factor authentication is in use.

14. Changes to This Privacy Policy

We update the policy when processing activities or the services we use change. The date of the last update is indicated at the beginning of the policy.