Pääomamarkkinaviestinnän ja strategisen viestinnän asiantuntija
At IR Partners, we are committed to protecting the privacy of our clients, partners, other stakeholders and recipients of our communications. We process personal data appropriately and only to the extent necessary for our operations.
We update this Privacy Policy when necessary and indicate the date of the latest update in the Policy. If the changes are significant, we may also communicate them by other means, such as by email or through a notice on our website. We recommend that you visit our website regularly to stay informed of any changes.
This Privacy Policy was last updated on 7 September 2026.
IR Partners Oy
Y-tunnus 3295312-1
Tammasaarenlaituri 3, 00180 Helsinki
For matters concerning the Privacy Policy, please contact:
Saija Serpola, saija.serpola@irpartners.fi, p. +358 50 434 1424
IR Partners Oy’s client, stakeholder and marketing register.
The register may contain personal data relating to representatives of IR Partners’ current and prospective clients, partners and other stakeholders, as well as recipients of client communications and other communications. The register may also include individuals who have contacted IR Partners through a form on our website and individuals who participate in events or surveys organised by IR Partners.
The purposes for processing personal data and the applicable legal bases under the EU General Data Protection Regulation (GDPR) are as follows:
| Purpose of processing | Legal basis for processing |
| Managing, maintaining and developing client and stakeholder relationships | IR Partners’ legitimate interest in managing and developing its business and its client and stakeholder relationships. |
| Managing contracts, assignments, proposals and other obligations relating to client relationships | Performance of a contract or taking steps before entering a contract where the data subject is a party to the contract. Where the contract has been concluded with an organisation represented by the data subject, the processing is primarily based on IR Partners’ legitimate interest in managing the contractual and client relationship. |
| Customer service and responding to enquiries | Performance of a contract, taking steps before entering a contract, or IR Partners’ legitimate interest in handling enquiries, depending on the circumstances. |
| Sending client communications, invitations and other current communications | IR Partners’ legitimate interest in communicating with its existing clients and stakeholders, or the data subject’s consent where required by law. |
| Marketing services to current and prospective clients and other stakeholders | IR Partners’ legitimate interest in marketing its services to companies and other organisations, or the data subject’s consent where required by law. |
| Maintaining direct marketing objections, withdrawals, consents and other communication preferences | IR Partners’ legitimate interest and, where applicable, legal obligation to ensure that the data subject’s choices and objections to direct marketing are respected. |
| Organising events, surveys and other stakeholder activities | IR Partners’ legitimate interest in organising events and surveys related to its activities, or performance of a contract, depending on the circumstances. |
| Processing information concerning special diets and allergies for the purpose of organising events | The data subject’s explicit consent. |
| Analysing and developing services, communications and the client experience | IR Partners’ legitimate interest in developing its business, services and communications. |
| Invoicing and payment monitoring | Performance of a contract where the data subject is a party to the contract. Where invoicing relates to a contract concluded with an organisation represented by the data subject, the processing is based on IR Partners’ legitimate interest in managing invoicing and monitoring payments. |
| Accounting and compliance with other statutory obligations | Legal obligation, including obligations arising from accounting and tax legislation. |
| Exercising the rights of IR Partners and data subjects and establishing, exercising and defending legal claims | IR Partners’ legitimate interest in protecting its rights and, where applicable, compliance with legal obligations. |
IR Partners’ legitimate interests are based on its business operations and the need to manage and develop client and stakeholder relationships, communicate about its services and current topics, and to market its services to representatives of companies and other organisations.
IR Partners has assessed the use of legitimate interests as a legal basis for processing personal data and considers that the processing is necessary for conducting its business and does not override the rights, freedoms or privacy of data subjects.
Electronic direct marketing may be sent without prior consent to an individual working for a company or other organisation where the services being marketed are materially related to the individual’s duties or area of responsibility. In other circumstances, electronic direct marketing is based on the recipient’s prior consent. The data subject may object to receiving electronic marketing communications at any time by using the link provided in the communication or by contacting the data controller. Following such an objection, personal data will no longer be used for direct marketing purposes.
Personal data is not used for automated decision-making or profiling that produces legal effects concerning the data subject or similarly significantly affects them.
The personal data stored in the register may include:
Information concerning the use of the website and cookies is described in a separate Cookie Policy.
We primarily obtain personal data directly from you, for example:
We may also collect and update personal data for the purposes described in this Privacy Policy from the organisation represented by the data subject and from public and generally available sources, such as newspapers and other news sources, company websites, company and trade registers, contact information service providers and professional social media networks.
We may also receive personal data from public authorities and other third parties to the extent permitted by applicable law.
Where personal data is obtained from a source other than the data subject, IR Partners will provide information concerning the processing of personal data no later than one month after obtaining the data or, if earlier, at the time of the first communication with the data subject. This information may, for example, be provided by including a link to this Privacy Policy in the communication.
Providing personal data is necessary where the data is required to enter or perform a contract, provide a requested service or comply with a legal obligation. Without the necessary personal data, IR Partners may be unable to enter a contract, provide the requested service or respond to an enquiry. Providing other personal data is voluntary.
Personal data is not regularly disclosed to other parties. However, personal data may be disclosed:
Personal data may be processed on behalf of IR Partners by, among others, providers of email and office software services, customer relationship management (CRM) systems, website maintenance and hosting services, IT support services and other partners acting as processors of personal data.
Service providers process personal data on behalf of IR Partners and only in accordance with IR Partners’ instructions. IR Partners ensures that agreements required under applicable data protection legislation are in place with processors of personal data.
As a general rule, personal data is not transferred outside the European Union or the European Economic Area. However, some of the service providers used by IR Partners may process or store personal data outside the EU or EEA.
Where personal data is transferred outside the EU or EEA, safeguards required under applicable data protection legislation are used. A transfer may, for example, be based on an adequacy decision adopted by the European Commission or on standard contractual clauses approved by the European Commission.
Further information about the safeguards used for transfers of personal data, as well as a copy of those safeguards, may be requested from the contact person specified under “Data Controller”.
Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy or to comply with legal obligations. Data relating to client relationships and contracts is retained for the duration of the client or contractual relationship and thereafter where necessary, for example, for accounting purposes or in connection with legal claims.
Marketing and communications data is retained for as long as the individual has a relevant connection with IR Partners’ activities, unless the individual objects to direct marketing or withdraws their consent. Information concerning an objection to direct marketing may be retained to ensure that the objection is respected. Information concerning special diets and allergies provided for events is deleted as soon as reasonably possible after the event has ended. The necessity of retaining personal data is assessed regularly, and data that is no longer necessary or has become outdated is deleted.
Personal data is protected through appropriate technical and organisational measures. Personal data is processed only by those IR Partners employees and service providers who require access to it to perform their duties or provide the relevant service.
You have the right to access your personal data and request the rectification of inaccurate data, restriction of processing or erasure of your data where there is no lawful basis for retaining it. In certain circumstances, you also have the right to receive personal data that you have provided in a machine-readable format and to transmit that data to another data controller.
You may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Where processing is based on IR Partners’ legitimate interests, you may object to the processing on grounds relating to your situation. You may always object to direct marketing without providing any grounds. You can unsubscribe from marketing communications in the manner specified in the communication or by notifying the data controller.
You may submit a request concerning your rights by email to saija.serpola@irpartners.fi or by post to the address of the data controller. IR Partners may ask you to verify your identity where necessary and will generally respond to your request within one month.
If you consider that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman.
Our website uses cookies. Strictly necessary cookies are used to ensure the proper functioning of the website. The use of other cookies is based on the user’s consent.
More detailed information about the cookies used, their purposes, service providers and retention periods is available in our Cookie Policy. You may give or withdraw your consent and change your cookie preferences at any time using the Cookie Settings function.