TIETOSUOJASELOSTE

This is a combined register description and informational document for The WeLaB website users, customers and potential customers, in accordance with Personal Data Act (Finland, 22.4.1999/523) 10§ and 24§ and the EU General Data Protection Regulation (679/2016), Articles 12 and 13.

This combined register description and informational document (Description) describes how The WeLaB collects, uses and shares the information you have provided to us and the information we collect in the course of operating our business and our websites.

In this description when we refer to The WeLaB or “we”/“us”/“our” we mean sole proprietorships The WeLaB and Hanna Westerholm as described hereinbelow.

Data controller

The WeLaB
Vanha Talvitie 13A
00580 Helsinki
Finland
Registration number: 3128530-1

Hanna Westerholm
Luotsikatu 7 F 16
00160 Helsinki
Finland
Registration number: 2815902-1

Person in charge of the Register: Partner Riina Laiho
Contact person for the Register: Partner Hanna Westerholm, +358 50 505 1773, hello(at)thewelab.fi

Purpose and reason for processing personal data (Purpose of the Register)

Personal data stored in The WeLaB’s web service register is used for maintaining and developing customer relations, for marketing purposes, for programme enrollment and for collecting statistics as well as for providing and offering services. Personal data is processed within the limits permitted and required by the law.

As regards to The WeLaB’s customers, the data controller has a legitimate interest in processing personal data in order to enable customer service and maintain customer relationships. As regards to The WeLaB’s potential customers and website users, the data controller has a legitimate interest in processing personal data delivered via the website in order to handle contact requests, newsletter subscriptions and event enrollments.

Content of the Register

Data is collected in the Register as follows:

The WeLaB contact form and potential customers/website users:

Full name
Email address
Usage data
Other information the person may have supplied

Enrollment information to Future Leader LaB programme or other events organised by The WeLaB:

Name
Email address
Phone number
Usage data
Other information the person may have supplied

Personality profiling with the WorkPlace Big Five Profile™ tool for the customers for whom The WeLaB conducts personality profiling:

Name
Email address
Demographic background information: optional information such as age, gender, nationality, place of residence, job title
Profiling: selectable answers 107–143 to questions mapping personality

Measuring emotional intelligence with the EQ-i 2.0® tool for the customers for whom The WeLaB conducts measuring emotional intelligence:

Name
Email address
Demographic background information: optional information such as age, gender, nationality, job title
Measuring emotional intelligence: selectable answers to 133 questions measuring emotional intelligence

Regular sources of information

The personal data collected by the data controller includes only the aforementioned data that the person consents to give when using The WeLaB’s website and services or in person, on the phone, by email or via other online tools.

Protecting the Register and handing out or transferring data outside the EU or the European Economic Area

The data within the Register is handled with confidentiality. Network and equipments of the data controller, in which the Register is located in, is protected by firewalls, passwords and other technical means and the information is accessible only by the data controller.

As a general rule, the personal data is only used internally for the purpose for which it was collected. We reserve the right to disclose personal information to third parties who work for us to provide the services for which the personal information was initially collected. Furthermore, the data can be also handed out to authorities to comply with legal and regulatory obligations such as, but not limited to, investigations or prevention of fraud. We oblige third parties and service providers (such as Paradigm Personality Labs, LLC http://paradigmpersonality.com/privacy-policy/ and Multi-Health Systems, Inc. (MHS) https://www.mhs.com/Privacy-Policy) to keep personal information confidential and to ensure proper data protection.

The data that we collect from you may also be transferred to and processed in a country outside of the EU. Any such transfer of your personal data will be carried out in compliance with applicable laws. In some of our programmes, workshops and trainings, we provide personal information (name and email address of the person involved in the coaching) outside the EU to enable us to use the personality or emotional intelligence tool in accordance with the agreement with the client. The people involved in the training themselves answer the additional questions of the tool and decide to provide their other information. We use the following non-EU tools to support the personal development of those involved in our workshops/Future Leader LaB programme:

WorkPlace Big Five Profile™ personality profiling is conducted using the My Paradigm Dashboard, which is the property of Paradigm Personality Labs, LLC. Paradigm Personality Labs is a U.S.-based company, which means that personal data is transferred outside the European Union. Personal data is, however, protected in compliance with the Personal Data Act, as the My Paradigm service provider has joined the EU-U.S. Privacy Shield Framework (https://www.privacyshield.gov/list), the purpose of which is to ensure data protection when processing EU citizens’ data in the United States. Read more about the privacy protection in the MyParadigm System: http://paradigmpersonality.com/privacy-policy/). Personal data (name and email address) is erased from the MyParadigm System upon request. The request may be emailed to: hello(at)thewelab.fi.

EQ-i 2.0® emotional intelligence measuring is conducted using the MHS Talent Assessment Portal, which is the property of Multi-Health Systems, Inc. (MHS). MHS is a Canada-based company, which means that personal data is transferred outside the European Union. Personal data is, however, protected in compliance with the Personal Data Act, as firstly the European Commission has recognized Canada (commercial organizations) as providing an adequate level of data protection and secondly, as when the data in connection with measuring emotional intelligence is being transmitted and stored on private servers in the United States, MHS’s cloud-service provider Rackspace US, Inc. has joined the EU-U.S. Privacy Shield Framework (https://www.privacyshield.gov/list), the purpose of which is to ensure data protection when processing EU citizens’ data in the United States. Read more about the MHS privacy protection: https://www.mhs.com/Privacy-Policy and https://www.mhs.com/Security-policy. Personal data (name and email address) is erased from the MHS Talent Assessment Portal upon request. The request may be emailed to: hello(at)thewelab.fi.

If material is printed from the register, which is stored in databases, the material is stored in a locked room, and only the data controller is authorised to use it. When the material is no longer needed, it will be destroyed.

Use of cookies

To improve and evaluate the use of our website, we use various technologies (such as Google Analytics, based on cookies) to collect and store information when you visit our website. In this context, Analytics compiles routine reports on website traffic. Based on cookies, data is collected on user behaviour on the website, for example, about the type of device you use to access the websites, your IP address and your geographic location, the operating system and version, your browser type, the content you view and features you access on our websites, the web pages and the search terms you enter on our website. The WeLaB utilises the data extracted with cookies to compile statistics on the use of the services. In addition, cookies may be used to target and measure marketing. More information on data protection and security in relation to Google Analytics as well as on the Google privacy policy.

Duration of processing data

The duration of processing personal data is open-ended; data is processed for as long as it is needed in order to handle a customer relationship (current or potential), event marketing, personality profiling, measuring emotional intelligence or other specified purpose for which the data is stored. We store the data in the register in the form received from the data subject, and we correct and erase the data in accordance with the data subject’s request. The recipient can opt out of the newsletter mailing list via a link that is included in every newsletter we send.

Rights of data subject

The data subject’s rights are listed in the following. If the data subject wishes to exercise the rights, a request may be sent to hello(at)thewelab.fi.

Right to access

The data subject has a right to request the registered personal data concerning him or her and to obtain a copy of the data at any time. If the data is inaccurate or incomplete, please send a request to The WeLab for correcting or completing the data.

Right to object

The data subject has a right to object to processing of personal data, if he or she feels that the data have been unlawfully processed.

Right to prevent direct marketing

The data subject has a right to prevent their personal data being processed for direct marketing. We never sell or share personal data to external parties for them to target direct marketing to the data subject.

Right to erasure

The data subjects have a right to request the erasure of the data concerning them, if they feel the data processing is not necessary. We will review the request, after which we will either erase the data or give a justified reason for why the data cannot be erased.

Users can opt out of the mailing list. A link to do this is included in every newsletter.

In accordance with the Accounting Act (Chapter 2, Section 10), the data controller is obliged to retain accounting records for ten years. For this reason, accounting records cannot be erased before the expiry of the period.

The data subject may lodge a complaint on the decision to the data protection ombudsman: instructions for lodging a complaint.

The data subject has a right to request us to restrict the processing of contested data until the issue is solved.

Right to complain

If a data subject feels that our processing of personal data breaches the in force legislation on data privacy, he or she has a right to lodge a complaint to the data protection ombudsman (instructions for lodging a complaint).

We may revise this Description at any time by amending this page. You are advised to check this page from time to time to take notice of any changes we make, as they are binding on you.

Description created: 4.8.2020
Edited for Future Leader LaB: 27.4.2021