Sunniva privacy notice

5 November 2026

This notice covers the Sunniva service's own business marketing, the prospect research and contacts carried out for our customers' assignments, the customer service we handle on our customers' behalf, and the technical use of the website.

Controller and contact details

Tabuloid Tmi, business ID 2082986-0. Questions and requests concerning data protection can be sent to sunniva@sunniva.fi.

Whose data we process

We process the data of the recipients of Sunniva's marketing messages, the contact persons of our customers' potential business customers, persons who send us messages, and visitors to the sunniva.fi website. The data concerns work-related and business contacts. In addition, on behalf of our customers, we process the data of persons who contact their customer service when the customer company has directed those contacts to be handled by Sunniva.

What data we process and where we obtain it

We may process a person's name, job title, company, work e-mail address, work phone number, the address of the public source page and the date of retrieval. We also process the messages we have sent, the replies we have received, the time of contact and a record of whether the person or company has declined further contact. If we make a follow-up call, we process the time, duration and content of the call in text form. When we handle customer service on behalf of our customer, we process the information the caller provides, such as their name, phone number and the matter at hand, as well as the time and content of the contact; calls are recorded, and a written summary of the recording is prepared for our customer. The caller is informed of this at the start of the contact. The server may store ordinary log data about the use of the website, such as the IP address, the time of the request and the page requested.

We obtain contact details from the person themselves and from public sources, such as company websites, public business registers (for example the Finnish Business Information System YTJ or the Swedish Bolagsverket) and press releases. We do not collect prospect data from services that require a login. Together with prospect data we store the source and the date of retrieval.

What we use the data for and on what basis

We use the data of company contact persons for targeted business marketing of the Sunniva service and for finding and evaluating prospects for our customers' assignments. The basis for this processing is our legitimate interest in marketing our service and in carrying out prospecting offered to companies (Article 6(1)(f) of the General Data Protection Regulation). We target our activity on the basis of public information related to the person's work role and weigh our legitimate interest against the rights of the data subjects.

We use the data in messages sent to us to respond to the contact and to manage the customer relationship on the basis of legitimate interest. If the person is themselves a party to a contract, the basis for processing in that respect may also be the preparation or performance of the contract. We use server log data to maintain the operation and security of the website on the basis of legitimate interest.

Sunniva is an AI worker. We use AI tools to research public prospect data, to draft sales messages and to make follow-up calls in our customers' assignments. At the start of a call Sunniva states that it is an AI. Sunniva does not make decisions about persons that would have legal effects or similarly significant effects.

When Sunniva handles customer service on behalf of our customer company, the customer company is the controller of the callers' data and we process the data on its behalf and according to its instructions. We use the data only to handle the contact, to prepare the summary for our customer and to assure the quality of the service and the invoicing. Requests concerning the caller's rights may be addressed to the customer company or to us, and we forward them where necessary.

Who we disclose data to

We disclose to the customer only the data of a prospect it has approved, in order to carry out the agreed prospecting work. When we disclose the data of an approved prospect to our customer, the customer is responsible for its own contacts as a controller. The providers of our website, e-mail, database, telephony, speech recognition and AI-assisted processing may process data on our behalf. In customer service we disclose the details of a contact only to the customer company on whose behalf the contact was handled.

Transfers outside the EU and EEA

Some of the service providers we use process personal data outside the EU and EEA, including in the United States. We make sure that such transfers meet the requirements of Chapter V of the General Data Protection Regulation. A transfer may be based on a European Commission adequacy decision, if the recipient falls within the scope of the decision, or on standard contractual clauses approved by the Commission. You can ask about transfers and the safeguards used at sunniva@sunniva.fi.

How long we keep data

As a rule we keep personal data for no more than 12 months from the last contact or, if no contact has been made, from the collection of the data. We keep data longer only where there is a lawful and documented reason, such as managing an ongoing customer relationship or a statutory obligation. We delete unnecessary and inaccurate data earlier. We keep the recordings and transcripts of contacts handled on behalf of our customers only as long as preparing the summary, assuring the quality of the service and the invoicing and statutory obligations require, and in any case not unnecessarily long. We keep the information needed to honour an objection to contact for as long as we carry out similar marketing, so that we do not contact the person or company again against their objection.

Your rights

You may request access to your data, rectification of inaccurate data or erasure of data, and you may request restriction of processing. You may object to processing based on legitimate interest. You may at any time object to the use of your personal data for direct marketing; after that we no longer process it for direct marketing. You can object by replying "No thanks" or "Nej tack" to a message or by writing to sunniva@sunniva.fi. We keep the record needed to honour the objection.

You may lodge a complaint with the Office of the Data Protection Ombudsman of Finland. Instructions are available at tietosuoja.fi.

Cookies on the site

Sunniva.fi uses no cookies, analytics scripts, external page resources or contact form. Contacting us opens the user's own e-mail application. The server's technical log data is processed as described above.