Privacy Statement

Description of personal data processing activities. Prepared on 4 February 2026.

2. Purpose and Legal Basis of Personal Data Processing

The primary basis for the processing of personal data is the customer relationship agreement between Aawee Oy and the customer, or another relevant connection based, for example, on the consent given by the data subject.

Aawee Oy may process personal data for the following purposes:

• Managing and maintaining the customer relationship or other relevant connection between Aawee Oy and the customer.
• Personal data may also be processed by Aawee Oy in connection with other necessary measures related to customer relationship management.
• Enabling, developing and monitoring marketing.
• Planning, offering, producing and delivering Aawee Oy’s products and services.
• In addition, personal data is processed for invoicing, orders, contacts, recruitment and reporting purposes.

3. Personal Data Processed

The categories of persons whose data may be processed include current or former customers of Aawee Oy, as well as persons who have otherwise been in contact with Aawee Oy.

The data stored about data subjects may include the following:

• Basic information such as first and last name, employer details and job title information.
• Contact details such as address, email address and phone number.
• Information related to communication between Aawee Oy and the customer, as well as any content produced by the customer and recorded from such contacts.
• Data collected by technical monitoring systems, such as log data, network traffic identification data and recordings from camera surveillance systems.
• Recruitment-related information such as the contents of a CV and job application.

4. Retention Period of Personal Data

Aawee Oy stores personal data in its registers only for the required period and until the existing basis for storing the personal data ceases to exist. Retention periods comply with the legislation in force at any given time.

5. Regular Sources of Information

Data is obtained primarily from public sources, from the data subject, from technical systems intended for automatic monitoring and supervision, and from events related to customer relationships and communication.

Aawee Oy collects personal data mainly from the customer, for example when the customer makes a purchase from Aawee Oy or registers through different service channels. Data may also be collected in the controller’s electronic services by means of cookies and other similar technologies. In addition, Aawee Oy may collect and update personal data from authorities and commonly used address registers.

6. Disclosure of Data and Transfers Outside the EU/EEA

Personal data is not disclosed outside the parties involved in producing, developing or maintaining services and communications on behalf of Aawee Oy, except within the limits of an agreement, separate consent and/or the applicable data protection legislation in force at the time.

As a rule, customer data is not disclosed or transferred outside the European Economic Area.

7. Principles of Personal Data Protection

Aawee Oy has implemented the necessary technical and organizational measures to protect personal data at all stages of processing against accidental or unlawful loss, disclosure, alteration, destruction, misuse or unauthorized access.

All possible manual materials of Aawee Oy are stored in locked locations accessible only to designated persons authorized to access them due to their duties.

Only persons who, based on their job duties, have the right to process personal data are authorized to use systems or digital materials containing personal data. All persons processing personal data are bound by confidentiality and by the confidential handling of personal data.

Personal data processed digitally is located on servers in protected and locked facilities. In addition, personal data is protected by appropriate firewalls, passwords and other technical controls.

8. Rights of the Data Subject

Right to object to the processing of personal data

The data subject has the right, based on a personal specific situation, to object to processing measures concerning their personal data carried out by Aawee Oy, insofar as the basis for the processing is the customer relationship between Aawee Oy and the data subject.

The data subject may submit a request to object in accordance with the contact details provided in this document. In connection with the request, the data subject must specify the particular situation on the basis of which they object to the processing. Aawee Oy may refuse to comply with the request to object on grounds provided by law.

Right of access to data

The data subject has the right to inspect what data concerning them has been stored in Aawee Oy’s personal data register. A request for inspection must be made in writing to the address mentioned in the contact details. The right of access may be denied on grounds provided by law.

Right to request rectification or erasure of data

A request to correct inaccurate, unnecessary, incomplete or outdated data must be addressed to the controller. The data subject also has the right to request that Aawee Oy restrict the processing of their personal data, for example in a situation where the data subject is waiting for Aawee Oy’s response to a request concerning rectification or erasure of their data.

Right of the data subject to transfer data from one system to another

To the extent that the data subject has personally provided data to the customer register and such data is processed on the basis of the data subject’s consent or assignment, the data subject has the right to receive such data, as a rule, in a machine-readable format and the right to transfer this data to another controller.

Right to lodge a complaint with a supervisory authority

The data subject has the right to lodge a complaint with the competent supervisory authority if Aawee Oy has not complied with the applicable data protection regulations in its activities.

9. Contacts and Changes

In all questions concerning this document and situations related to the exercise of the data subject’s rights, contact should be made using the email address or phone number mentioned in section 1.

Aawee Oy may, if necessary, ask the data subject to clarify their request, and the identity of the data subject will be verified before any measures are taken.

We continuously develop our services, so we reserve the right to amend the information contained in this document with separate notice. Changes may also be based on changes in legislation. We recommend reviewing the contents of this document regularly.