Privacy Notice

Vitec Raisoft Oy
August 21st 2026

1. Introduction

Vitec Raisoft Oy respects your privacy and is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR).

This Privacy Notice describes how we process personal data in connection with our business operations, including customer, supplier, and subcontractor relationships, the use of our services, and our website. It also explains the rights of data subjects and how those rights may be exercised.

2. Data Controller

Vitec Raisoft Oy
Business ID: 1615982-5
Vaasantie 6 C (I-Park), FI-67100 Kokkola, Finland
www.vitec-raisoft.com
Telephone: +358 207 789 567

3. Data Protection Officer

If you have any questions regarding the processing of personal data or wish to exercise your rights, you may contact our Data Protection Officer:

Marica Sundström
Tel.+358 40 481 4004
marica.sundstrom@vitecsoftware.com
tietosuojavastaava.raisoft@vitecsoftware.com

4. Personal Data Processed

We process personal data only to the extent necessary and in accordance with applicable legislation.

The personal data processed may include, for example:

  • Name
  • Postal address
  • Telephone number
  • Email address
  • Username
  • Job title

The specific personal data processed depends on your role in relation to us (for example, as a customer, supplier, business partner, representative of a customer, supplier or business partner, or job applicant). 

5. Purposes and Legal Bases for Processing

We process personal data for the following purposes and on the following legal bases:

5.1 Performance of a Contract (GDPR Article 6(1)(b))

  • Managing customer and contractual relationships
  • Delivering and maintaining services
  • Customer support and user administration
  • Managing supplier contractual relationships

5.2 Legitimate Interest (GDPR Article 6(1)(f))

  • Developing services and ensuring quality
  • Ensuring the security of websites and information systems
  • Direct marketing directed to representatives of existing customers and business partners based on our legitimate interest
  • Statistics and reporting

Data subjects always have the right to object to the processing of their personal data for direct marketing purposes.

When processing is based on legitimate interest, we ensure that the rights and freedoms of the data subject are not overridden.

5.3 Consent (GDPR Article 6(1)(a))

  • Sending newsletters and other electronic direct marketing communications where consent is required
  • Cookies and other non-essential tracking technologies

Consent is voluntary and may be withdrawn at any time. 

5.4 Legal Obligation (GDPR Article 6(1)(c))

  • Obligations arising from accounting, taxation, and other applicable legislation

6. Sources of Personal Data

We primarily collect personal data directly from the data subject, for example in connection with customer relationships, communications, or the use of our services.

In addition, we may receive information from customers, suppliers, subcontractors, and business partners.

6.1 Recruitment

Personal data related to recruitment is primarily collected directly from job applicants.

7. Protection of Personal Data

Personal data is processed confidentially and protected through appropriate technical and organisational measures.

These measures include access management, password protection, IP restrictions, and multi-factor authentication. Access to personal data is limited to individuals who require it for the performance of their duties.

8. Recipients of Personal Data

We do not routinely disclose personal data to external parties.

However, personal data may be disclosed:

  • To subcontractors and service providers thay process personal data on our behalf under written agreements
  • To competent authorities where required by law

Contact details of representatives of customer organisations may, where required under contractual arrangements, be disclosed to the international interRAI organisation.

9. Transfers of Personal Data Outside the EU/EEA

As a rule, personal data is not transferred outside the European Union or European Economic Area without appropriate safeguards.

If personal data is transferred outside the EU/EEA, we ensure that such transfers are based on safeguards in accordance with Articles 44–49 of the GDPR, such as an adequacy decision by the European Commission or the EU Standard Contractual Clauses.

We also comply with the conditions and requirements agreed upon in applicable customer agreements regarding the processing of personal data.

10. Retention Periods

Customers, suppliers, and business partners: Personal data is retained for as long as necessary to manage the contractual relationship, fulfil related rights and obligations, and comply with legal requirements (for example, accounting legislation).

Processing based on legitimate interest: Personal data is retained for as long as there is a valid legitimate interest for the processing.

11. Rights of the Data Subject

Data subjects have rights under applicable data protection legislation, including:

  • The right of access to personal data
  • The right to rectification of inaccurate personal data
  • The right to erasure of personal data
  • The right to restrict or object to processing
  • The right to data portability
  • The right to withdraw consent

Please note that not all rights apply in every situation.

12. Exercising Rights and Right to Lodge a Complaint

You may exercise your rights by contacting our Data Protection Officer.

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman.

13. Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling concerning data subjects within the meaning of Article 22 of the GDPR.

14. Contact Information

Vitec Raisoft Oy
Vaasantie 6 C
FI-67100 Kokkola, Finland
www.vitec-raisoft.com
Telephone: +358 207 789 567