Privacy Policy

At TechClass, we are committed to protecting your privacy and ensuring that your personal data is processed fairly, lawfully, and transparently. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. It applies to all personal data processed by TechClass Ltd.

We process personal data in accordance with the General Data Protection Regulation (EU 2016/679 – GDPR), the Finnish Data Protection Act, and other applicable laws.

1. OBJECTIVE

TechClass Ltd, a limited liability company incorporated in Finland, Business ID 2837636-8 (“TechClass”), is committed to protecting data privacy and to comply with all applicable privacy and data protection laws and regulations.

The purpose of this privacy policy is to describe principles and measures by which TechClass strives to ensure high personal data protection. Further, this privacy policy describes what personal data is collected, how TechClass collects, stores, uses, and shares personal data, and how lawful processing of personal data is secured. Ensuring sufficient data protection of personal data is vital to the continued conduct of TechClass’ business and the provision of its services.

The privacy policy applies not only to employees of TechClass but also to its customers and cooperation partners. The privacy policy applies to the processing of personal data whether automatically, in writing or any other format.

In this privacy policy, the term “Personal Data” means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The term “processing” means, for example, collecting, storing, using, transferring and handing over personal data.

2. WHAT PERSONAL DATA IS PROCESSED

TechClass may process the personal data of its employees, customers, potential customers, instructors (lecturers, trainers, faculty), partners and other interest groups and, inter alia, following personal data may be processed:

• Identity-related information and contact details, such as name, company, job title, address, phone number, and e-mail address
• Study attainment data
• Gender
• The name, contact details and area of business or the enterprise
• Information relating to any transaction carried out between TechClass and the data subject, including information relating to ordering and purchases of TechClass’ services
• Information provided in the form of feedback
• Information concerning the usage of the internet
• Technical data and cookies that the registered have sent to the browser and information connected to this

Of customers, TechClass may also process:

• Date of birth, nationality/nationalities
• Personal identity number (henkilötunnus)
• Personal identification number such as passport number; required by the local authority of the international partners
• Biometric information (in connection to statutory exams when the exam situation is recorded on video)

Of instructors, TechClass may also process:

• Date of birth, personal identity number, nationality/nationalities

Of employees, TechClass may also process:

• Date of birth, personal identity number, nationality/nationalities, and information related to employment and employment contract

3. LEGAL BASIS FOR PROCESSING PERSONAL DATA

The legal grounds for processing personal data are based on:

• Agreement with the data subject (e.g. agreement on providing services);
• Consent provided by the data subject (e.g. marketing permission);
• Legal obligation (e.g. book-keeping/invoicing, registered studies);
• Legitimate interest (e.g. customer relationship management, related communication).

4. PURPOSES OF PROCESSING YOUR PERSONAL DATA

TechClass processes personal data in order to provide education and development services to its customers, to enable faculty’s services according to agreements and to enable employment related job performance of its employees according to the assigned job roles.

We may process your personal data, inter alia, for the following purposes:

1. for providing services to you and fulfilling your requests and communicating with you, for example, in order to provide information about our services;
2. to improve and develop our business and services;
3. to customize our services to you;
4. for marketing research purposes or to inform you about our new services or products or promotions we may offer;
5. for collecting data for statistical purposes;
6. managing or terminating an employment relationship during and after the employment relationship; or
7. for compliance with mandatory legal requirement(s) or in connection with law enforcement or other legal proceedings or when needed in order to defend our legitimate interests

In addition, date of birth is processed, inter alia, for the following purposes:

1. for registers of studies and for providing qualifications, certificates and diplomas
2. as an additional identification factor to ensure the customer’s identity
3. for statistical purposes relating to TechClass events and training programs
4. for statistical purposes relating to international ranking surveys and international accreditations (without connecting the individual person to the provided information)

In addition, personal identity number (henkilötunnus) is processed, inter alia, for the following purposes:

1. In National Funded Training Programs (such as Jotpa procurement trainings and NextGenerationEU funded training programs)

Furthermore, nationality/nationalities is processed, inter alia, for the following purposes:

1. for statistical purposes relating to TechClass events and training programs

5. PRINCIPLES FOR PROCESSING OF PERSONAL DATA

We are committed that our processing of personal data comply with all applicable privacy and data protection laws and regulations at any given time.

Data subjects are appropriately informed of the processing at the time when the personal data is initially gathered. For each data register maintained by TechClass an appropriate privacy notice has been prepared and it is held available for the data subjects.

We process personal data only to the extent appropriate and necessary in order to fulfil the purpose(s) for which it has been collected and to the extent permitted by applicable data protection regulations, contractual grounds or when processing is necessary to fill the needed purpose. TechClass is committed to discard obsolete and unnecessary personal data in an appropriate manner. We only retain personal data as long as it is necessary for the purpose of processing. As required by law or competent authority, personal data may be stored for longer.

We limit access to our data, data bases and systems containing personal data to authorized persons having a justified need to access such information. As also strictly defined through the internal guidelines of TechClass, our employees are entitled to process personal data only for the purpose for which the data is intended and to the extent it is necessary. The access rights granted to an employee depends on the employee’s role within TechClass.

The governance and organization of data protection matters within TechClass encompasses the entire organization, as each and every employee is committed through their own actions to maintaining and ensuring data protection.

6. SOURCE(S) FROM WHICH THE PERSONAL DATA ORIGINATE

Personal data and other information may be collected from various sources e.g. when data subjects provide information to TechClass, visit TechClass’ websites (including social media accounts), participate in research or campaigns, request services, sign up for newsletters, TechClass Learning Environment (TechClass LMS, TechLMS), download guides or otherwise interact with TechClass.

Personal data and other information may be updated also from TechClass’ other registers, partners’ registers or supervisory authorities’ and other authorities’ registers merely to the extent provided for by applicable law.

In the case the personal data consists of date of birth, personal identification number and/or nationality, the source of such personal data is always the data subject in question (customer, employee or instructor)

7. DATA RETENTION

TechClass retains personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable laws. Retention periods depend on the category of personal data and its purpose. Typically:

• User and customer data is retained for the duration of the relationship and up to 12 months after termination, unless longer retention is legally required.
• Study records and certification data may be stored for up to 5 years, in line with funding and audit requirements.
• Employment records are kept for the duration of employment and in accordance with Finnish labor law obligations.
• Cookie and analytics data is retained per browser and consent settings, usually up to 12 months.

Data is securely deleted or anonymized when no longer needed.

8. DISCLOSURE AND TRANSFER OF PERSONAL DATA

Personal data may be disclosed to or transferred to third parties merely to the extent provided for by applicable law. In general, TechClass uses the personal data only for its internal business purposes and does not transfer the personal data to any external parties without your explicit consent unless stated otherwise below.

We reserve the right to provide your personal data to third-parties who work for us for the purposes for which the personal data was initially collected, e.g. by assisting TechClass in facilitating and providing its services as well as fulfilling its obligations towards employees, authorities, customer and co-operation partners. Any third party having or gaining access to personal data will have access to and may use such data only to the extent it is necessary for the performance of the tasks and activities agreed upon with TechClass and subject to written agreements including appropriate conditions to ensure the confidentiality and sufficient data protection. Such third-parties are not allowed to use personal data for other purposes or to transfer personal data onwards to other parties.

As required by law or competent authority, personal data may also be disclosed and transferred to supervisory authorities and other authorities.

TechClass primarily stores and processes personal data within the EU/EEA. If data is transferred outside the EU/EEA (e.g., to international service providers or cloud platforms), such transfers are safeguarded using:

• European Commission-approved Standard Contractual Clauses (SCCs),
• Adequacy decisions, or
• Other lawful mechanisms under the GDPR.

9. COOKIES

TechClass may use cookies and other similar technologies on its websites to collect data concerning the user’s computer and other terminal devices. Cookies are very small text files that are stored on computer or other device when user visits websites. These records typically include IP-address, access times, the sites linked from, pages visited, the links and features used, the content viewed or requested, browser or application type, language and other such information. Cookies improve the user experience by enhancing browsing and customizing the website and by saving you from having to log in repeatedly, for example.

We use website analytics, such as Google Analytics and Microsoft Clarity and information collected by means of cookies, browser identification and other similar technologies to gather statistics about the users of the TechClass’ website with the aim to e.g. improve the contents of the website, develop our services, customize the contents of our services and marketing communications. Generally, the information we collect using these website analytics does not identify any person by name. If, however, user e.g. signs up on a newsletter on TechClass’ website or purchases services or comes to the website through a link from any TechClass marketing email, TechClass may link the information TechClass collects using marketing automation to other information that identifies person.

Consent on any other than the necessary cookies enabling website functionality must be particular, and for this reason TechClass’ website uses active consent management (Cookie Information). Through consent management the cookies can be allowed or rejected in the following purposes: functional, statistics and marketing. The same consent covers multiple similar services by the Data Controller in different domains: marketing and service websites techclass.com, start.techclass.com, partners.techclass.com, techclass.link, and learning management system learn.techclass.com. In addition, the cookies can be generally managed in the browser settings.

The use of cookies can be adjusted in your browser settings. If you do not want us to use any cookies, you need to change your browser settings on your computer or other device you are using for accessing TechClass’ website. Otherwise we assume you are willing to receive all cookies on the TechClass site.

Cookie lifespan may vary based on type and purpose. Functional cookies typically expire at session end, while marketing and analytics cookies may be stored from a few days to up to 12 months, depending on consent settings.

10. OTHER SITES

We may have links to third-party websites or resources that are not owned or controlled by TechClass and they have their own privacy policies. You note and agree that we do not control or review their privacy policies nor are we responsible for their policies in regard of data privacy and protection of personal data. You agree that clicking these links or using the third-party sites or services is at your own risk. Therefore you are recommended to familiarize yourself with their privacy policies before accessing or using any third party links, sites and applications.

TechClass has adopted third-party services to carry out advertising and marketing.

11. RIGHTS OF DATA SUBJECT

11.1. Right of access

Data subject has the right to obtain a confirmation from the personal data controller (TechClass) as to whether or not personal data concerning him or her are being processed in the register, and, where that is the case, access to the personal data.

11.2. Right of correction

Data subject has the right to request that corrections be made to his or her personal data where necessary to correct an error or omission in the personal data. Such correction shall, subject to any applicable law, be made as soon as practicable if there are reasonable grounds for the request.

11.3. Right to restriction of processing

Data subject has the right to obtain from the controller restriction of processing personal data, if the controller is required to restrict the processing of personal data under applicable law. However, the right shall not apply if there are other legal grounds that permit processing.

11.4. Right to erasure (‘right to be forgotten’)

Subject to applicable legislation, data subject has the right to request the rectification of inaccurate or incomplete personal data and to request the erasure of personal data concerning them. However, the right shall not apply if there is other legal ground that permits controller processing of personal data.

11.5. Right to data portability

Data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller.

11.6. Right to lodge complaint

Data subjects have the right to lodge a complaint with the relevant supervisory authority in the event they have concerns or remarks regarding TechClass’ processing activities. As TechClass Ltd operates in Finland, the lead supervisory authority is the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), which oversees all data protection matters in accordance with the General Data Protection Regulation (GDPR).

11.7. Other rights

Should the processing of personal data be based on the data subject’s consent, the data subject may at any time revoke consent by contacting TechClass.

Data subjects have the right to object to the processing of their personal data for direct marketing purposes, or for other purposes where the legal basis is legitimate interest, unless we have overriding legitimate grounds to continue processing.

***

Our contact details are provided below. Note that, in order to be able to answer your privacy-related questions we may need to identify you before processing any requests. TechClass may not necessarily be able to fully meet the data subject’s request, if there is legal grounds that prevents TechClass from adhering to the data subject’s request. In this case, the data subject will be duly notified thereof.

Furthermore, please note that, if you wish to delete personal data or cease the processing of your personal data, we may not be able to continue providing the services for you.

12. THE CONTROLLER OF YOUR PERSONAL DATA

Your personal data is controlled by TechClass Ltd (Business ID 2837636-8), Sinikantie 2 B, 01400 Vantaa, Finland.
In any queries or questions relating to this privacy policy, or if you wish to give us feedback on our website, you can also contact us via e-mail at privacy@techclass.com.

13. AUTOMATED DECISION-MAKING AND PROFILING

In general, TechClass is not using personal data for automated decision-making and profiling. In case automated decision-making or profiling is used the data subject has the right to object to it at any time.

14. CHANGES TO THIS PRIVACY POLICY

TechClass reserves the right to modify this privacy policy from time to time. Because of this, TechClass encourages you to regularly review the latest version of privacy policy. The date of the latest update will be presented at the beginning of the privacy policy.