Privacy Policy
This policy governs personal data handled by Agileday Oy regarding customer representatives, vendors, business partners, and website visitors at www.agileday.com.
This Privacy Policy applies to the processing carried out by Agileday as a data controller. It does not apply to processing where Agileday acts as a processor for customers' data.
1. Contact Details
Agileday Oy
Business ID: 3295176-7
info@agileday.com
2. Categories and Sources of Personal Data
Agileday collects the following categories of personal data:
- Identification and contact data (name, company, email)
- Communications data (emails, messaging)
- User data (IP address, logs)
- Marketing data (newsletter subscriptions)
- Customer relationship data (subscriptions, payments)
- Analytics data (pages visited, device type, browser version)
Data originates from users, employers, public sources, or is generated during communications and website usage.
3. Purposes and Legitimate Grounds
Customer Management & Marketing
Transactional emails require opt-in and relate to account activities. Direct marketing emails are sent based on your consent or our legitimate interest and include unsubscribe options. Users can manage preferences in their account.
Platform Provision
Data processing supports contractual obligations, functionality, technical support, and security.
Legal Compliance
Processing fulfills accounting and regulatory requirements.
Claims & Legal Processes
Data handles fraud prevention and security matters.
Quality Improvement
Aggregated, non-identifiable data improves services; other tracking with personal data requires consent.
Company Identification
We identify the organization a website visit comes from, based on the IP address, on the basis of our legitimate interest. See section 9.
4. International Transfers
Data primarily resides in the European Economic Area. Service providers in various locations may access data outside the EEA. Protection mechanisms include Standard Contractual Clauses and other appropriate safeguards, including case-by-case transfer risk assessments and the use of technical safeguards such as encryption and pseudonymization.
5. Personal Data Recipients
Agileday shares data with:
- Authorized service providers (storage, sales, marketing, support)
- Third parties for legal compliance and fraud prevention
- Merger or acquisition parties with continued confidentiality assurance
- Third parties with explicit user consent
6. Storage Period
Agileday does not store personal data longer than is legally permitted and necessary for the purposes described above.
7. Your Rights
Users possess the following rights:
- Right to access personal data held
- Right to withdraw consent without affecting past lawful processing
- Right to rectify incorrect or incomplete data
- Right to erasure (deletion) unless legitimate grounds apply
- Right to object to certain processing
- Right to restriction of processing
- Right to data portability in structured, common formats
Requests can be submitted to info@agileday.com. We may request the provision of additional information necessary to confirm your identity and reserve the right to reject unreasonably repetitive or manifestly unfounded requests.
8. Direct Marketing
Users may prohibit direct marketing, market research, and profiling by contacting info@agileday.com or using unsubscribe options in messages.
9. Cookies
Where the law requires it — in the EEA, the United Kingdom, Switzerland and certain US states — we ask for your consent before setting any non-essential cookies, and apart from company identification (described below the list) nothing non-essential runs until you accept. Elsewhere, non-essential cookies are enabled by default. Wherever you are, you can change or withdraw your choice at any time via Cookie settings in the site footer, and we treat a Global Privacy Control signal from your browser as a refusal of non-essential cookies. Company identification is not affected by either choice; see below the list for how to object.
- Necessary — required for the site to work, and set without consent. This includes storing your cookie choice itself.
- Performance — usage analytics that show us which pages are useful. We use PostHog, hosted in the EU, and Google Analytics. Session recording is off and form fields are excluded.
- Functional — remembers preferences and enables embedded features. The booking calendar on our contact page is provided by Calendly and loads only once you accept this category.
- Advertising — measures the effectiveness of our campaigns on Google Ads and LinkedIn, for example whether an ad led to a contact request. Data may be shared with Google LLC; see how Google uses this information.
Company identification. On every page we use Leadoo to identify the organization a visit comes from, based on the IP address, so our sales team can see which companies are interested in Agileday. This runs regardless of your cookie choice, on the basis of our legitimate interest (GDPR Art. 6(1)(f)). We use it to see company-level information (company name, industry, size and location) and the pages visited; we do not use it to identify you as a person. The IP address is personal data; we process it only to look up the organization and Leadoo does not store it. Leadoo stores a session identifier and the identified company in your browser's local and session storage. You can object at any time by emailing info@agileday.com.
If you decline performance cookies or don't make a choice, we still count page visits in aggregate with PostHog, without setting cookies or storing anything on your device. PostHog derives a temporary anonymous identifier on its EU servers that changes daily and cannot be used to recognize you across days. Your IP address is not stored.
10. Lodging a Complaint
For data protection concerns, complaints can be filed with supervisory authorities. In Finland, contact the Data Protection Ombudsman.