Privacy Policy
Privacy Policy
Updated 30 April 2026
Data Controller
Herformance Coaching Ltd
Ida Aalbergintie 6 C, 00400 Helsinki
3598150-7
Purpose and Legal Basis for Processing Personal Data
Herformance Coaching Ltd processes personal data on several different legal bases. The primary purpose of processing personal data is, however, maintaining and developing customer relationships, marketing, and providing services to customers.
​
Herformance Coaching Ltd processes personal data for purposes related to customer communication, responding to contact requests, entering into contracts, fulfilling contractual obligations, and complying with legal obligations.
​
The legal basis for processing personal data is primarily the data subject’s consent, a contractual relationship, or the legitimate interest of Herformance Coaching Ltd.
Personal Data Processed
The data stored in the register may include, for example:
​
-
name
-
address
-
phone number
-
email address
-
company name and business ID
-
services the data subject is interested in
Regular Sources of Data
Personal data is primarily collected directly from the data subject through messages sent via website forms, emails, phone calls, social media services, contracts, customer meetings, and other similar situations where the data subject provides their information.
​
Contact details of representatives of companies and other organizations may also be collected from public sources such as websites, directory services, and other companies.
Processors of Personal Data and Disclosure to Third Parties
Personal data is primarily processed by Herformance Coaching Ltd. Secondarily, personal data may be processed by subcontractors outside Herformance Coaching Ltd and other partners of Herformance Coaching Ltd.
​
External well-known information systems, such as Google Drive, may also be used in connection with service delivery. In such cases, we ensure that data is processed confidentially in accordance with data protection legislation.
​
Data is not regularly disclosed to other parties. Data may be published to the extent agreed with the customer.
Personal data may also be disclosed to competent authorities when required by law or when we are involved in legal proceedings or similar processes. If we are involved in a business or corporate transaction, personal data may also be disclosed in that context.
​
We always comply with data protection legislation when disclosing personal data.
Transfer of Personal Data Outside the EEA
Personal data is primarily processed within the European Economic Area (“EEA”). If personal data is processed outside the EEA and the European Commission has not issued an adequacy decision, the standard contractual clauses of the European Commission Decision 2021/3974/EU (as amended) will be followed.
​
Our subcontractors or servers may be located outside the EEA. If personal data is transferred outside the EEA, we ensure the legality of the transfer and adequate safeguards, for example by using the European Commission’s standard contractual clauses.
Protection and Retention of Personal Data
Due care is taken in processing the register, and data processed via information systems is appropriately protected. Register data is stored on internet servers, and appropriate physical and digital security measures are ensured.
​
The controller ensures that stored data, server access rights, and other information critical to the security of personal data are handled confidentially and only by employees whose duties require it.
​
Access to the data is restricted to the shareholders of Herformance Coaching Ltd. Data is transmitted over an SSL-secured connection.
​
We retain personal data only as long and to the extent necessary to fulfill the purposes defined in this privacy policy, or as required by contract or legislation. Retention periods vary depending on the purpose and situation, and further information can be requested. We also periodically update registered data on our own initiative.
Data Subject Rights
We comply with the rights granted to data subjects under data protection legislation. However, the application of rights depends on the purpose of processing in each individual case.
​
The data subject has:
​
Right of access
- The right to obtain confirmation of whether personal data concerning them is processed and access to that data, including a copy and information defined in data protection legislation.
​
Right to withdraw consent
- If processing is based on consent, the data subject has the right to withdraw that consent.
​
Right to rectification
- The right to request correction of inaccurate or incorrect personal data and to complete incomplete data.
​
Right to erasure (“right to be forgotten”)
- The right to have personal data deleted in accordance with data protection legislation.
​
Right to restriction of processing
- The right to request restriction of processing in accordance with data protection legislation.
​
Right to data portability
- The right to transfer personal data to another controller, where technically feasible, when processing is based on consent or contract, is automated, and concerns data provided by the data subject without adversely affecting third-party rights.
​
Right to object and automated decision-making
- The right to object to processing based on legitimate interests. However, Herformance Coaching Ltd may refuse the request if processing is necessary for its legitimate interests or those of third parties.
​
- The data subject also has the right not to be subject to decisions based solely on automated processing, such as profiling. However, Herformance Coaching Ltd may refuse requests in accordance with applicable exceptions in data protection legislation.
​
The data subject always has the right to object to processing for direct marketing purposes.
Cookies
The website uses necessary and functional cookies that help the site operate properly. A cookie is a small text file sent to and stored on the user’s device.
Cookies are used for purposes related to website functionality, analytics, marketing, and development. More information about Squarespace cookies can be found here.
Cookies can be disabled entirely through browser settings. However, this is not recommended, as some cookies are necessary for proper site functionality.
Exercising Rights
The data subject may submit requests regarding their rights via email to the contact person mentioned above. The request must include name, address, and phone number. Identity will be verified using a copy of an identity document (e.g., passport or driver’s license).
​
We will respond within a reasonable time. If we cannot comply with the request, the refusal and its grounds will be communicated.
​
The data subject may also contact the competent data protection authority if they believe the processing violates data protection legislation.