Privacy Policy
Last Updated: September 2025
Our Commitment to Privacy
Agile North is committed to protecting your personal information and respecting your privacy. This policy explains how we collect, use, store, and protect your data when you interact with our training programs and website. We handle all personal information in accordance with Finnish data protection laws and the European General Data Protection Regulation (GDPR).
This policy applies to all information collected through our website, during course enrollment, throughout training participation, and in our ongoing communications with participants and alumni.
Information We Collect
Contact Information
- Full name as provided during registration or inquiry
- Email address for correspondence and course materials
- Phone number for important program communications
- Mailing address if requesting physical course materials
Professional Information
- Current employer and job title for context in training exercises
- Professional background relevant to course selection
- Areas of interest within project management practice
- Career objectives to support appropriate guidance
Course Participation Data
- Attendance records and session participation
- Assessment results and feedback submissions
- Questions and contributions during training sessions
- Project work and case study analyses prepared during courses
Website Usage Information
- IP address and general location information
- Browser type, device information, and operating system
- Pages visited and time spent on different sections
- Referral sources and navigation patterns
- Cookie data as described in our Cookie Policy
How We Use Your Information
Course Administration
We use your contact and professional information to manage course enrollment, communicate important program updates, provide course materials, and facilitate your learning experience. This includes sending session reminders, sharing resources, and coordinating logistics for training activities.
Educational Services
Your participation data helps us provide appropriate instruction, offer relevant feedback, and support your professional development. We use assessment information to track progress, identify areas needing additional support, and prepare certification documentation where applicable.
Communication
We send program-related communications including enrollment confirmations, session schedules, course materials, and graduation certificates. With your consent, we may also send information about new courses, workshops, and professional development opportunities that may interest you.
Website Improvement
Usage data helps us understand how visitors interact with our website, identify technical issues, improve navigation and content organization, and optimize the user experience. This analysis uses aggregated, anonymous data that does not identify individual users.
Legal Compliance
We maintain records as required by Finnish tax regulations, educational standards, and other applicable legal requirements. This includes financial records, certification documentation, and other materials necessary for regulatory compliance.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
Contractual Necessity
Processing is necessary to provide the training services you have enrolled in, including course delivery, assessment, and certification.
Consent
For marketing communications and optional data collection, we rely on your explicit consent, which you may withdraw at any time.
Legitimate Interest
We process certain data based on legitimate business interests including improving our services, maintaining website security, and conducting business operations, always balanced against your privacy rights.
Legal Obligation
Some data processing is required to comply with Finnish tax laws, educational regulations, and other legal requirements.
Data Protection Measures
We implement appropriate technical and organizational measures to protect your personal information:
- Secure encrypted connections for data transmission (SSL/TLS)
- Access controls limiting who can view personal information
- Regular security assessments and system updates
- Staff training on data protection obligations
- Secure backup procedures for data recovery
- Incident response procedures for potential security breaches
In the event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours as required by GDPR.
Data Retention
We retain your personal information only as long as necessary for the purposes described in this policy:
- Contact form submissions: 3 years from submission
- Course enrollment records: 5 years after course completion
- Financial records: 7 years as required by Finnish law
- Certification documentation: Permanently for verification purposes
- Marketing data: Until consent is withdrawn
- Website analytics: 24 months in aggregated form
Data Sharing and Third Parties
We do not sell your personal information. We share data only in limited circumstances:
Service Providers
We work with trusted service providers for email communications, website hosting, and payment processing. These providers access personal data only as necessary to perform their services and are bound by confidentiality agreements.
Certification Bodies
For participants pursuing professional credentials, we share relevant information with certification organizations as necessary for credential processing and verification.
Legal Requirements
We may disclose information when required by law, legal process, or government request, or when necessary to protect rights, property, or safety.
Your Privacy Rights
Under GDPR and Finnish data protection law, you have the following rights:
Right to Access
You can request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used format within one month of your request.
Right to Rectification
You can request correction of inaccurate or incomplete personal information. We will update records promptly upon verification of correct information.
Right to Erasure
You can request deletion of your personal data, subject to legal retention requirements for financial and certification records.
Right to Data Portability
You can receive your personal data in a portable format and request transfer to another organization where technically feasible.
Right to Object
You can object to processing based on legitimate interests or for marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds.
Right to Withdraw Consent
Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Finnish Data Protection Ombudsman or your local supervisory authority if you believe we have not handled your data appropriately.
International Data Transfers
Your personal data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place through standard contractual clauses, adequacy decisions, or other legally approved mechanisms to protect your information.
Children's Privacy
Our services are designed for adults and professionals. We do not knowingly collect information from individuals under 18 years of age. If we become aware that we have inadvertently collected such information, we will delete it promptly.
Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices, legal requirements, or service offerings. We will notify you of material changes by email or through prominent notice on our website. The date at the top of this policy indicates when it was last updated.
Contact Us
If you have questions about this privacy policy, wish to exercise your rights, or have concerns about how we handle your personal information, please contact us:
Agile North
Lönnrotinkatu 18, 00120 Helsinki
Email: privacy@domain.com
Phone: +358 9 3156 9274
We will respond to your inquiry within 30 days. For urgent privacy concerns, please indicate this in your communication.