Skip to content
    en

    Privacy notice

    1 WHAT IS THE PURPOSE OF THIS DATA PRIVACY NOTICE? 

    In this data privacy notice, we describe the processing of personal data for business-to-business direct electronic marketing and personalised sales activities.

    1.1 WHAT IS THE DIFFERENCE BETWEEN DIRECT ELECTRONIC MARKETING AND PERSONALIZED SALES ACTIVITIES?

    By direct electronic marketing, we refer to non-customised marketing messages sent typically by email. By personalised sales activities, we refer to customised one-to-one messages and calls from our sales personnel.

    2 WHO IS THE CONTROLLER?

    Labquality Ltd. Kumpulantie 15 00520 Helsinki, Finland
    Business ID 0110079-1

    2.1 THE CHANGE OF NAME OF THE CONTROLLER

    The company name will change from Aurevia Ltd. to Labquality Ltd., effective 1.1.2026. The business ID remains the same.

     3 WHO IS THE CONTACT PERSON FOR PERSONAL DATA PROCESSING?

    Kirsi Marin, HR Director
    kirsi.marin@labquality.com

    4 WHAT IS THE PURPOSE OF PROCESSING?

    There are two purposes for processing described in this data privacy notice: 
    •    Personalised sales activities
    •    Direct electronic marketing.  

    5 SCOPE

    This data privacy notice addresses the processing of contact data exclusively for the two processing purposes described above (section 4). Labquality is also processing contact personal data for other processing purposes, such as invoicing and contacting about current and past deliveries. These processing purposes are described in our other data privacy policies.

    Should there be any conflict between this data privacy notice and the other notices regarding processing purposes described above (section 4), this data privacy policy is applied.

    6 WHAT IS THE LEGAL BASIS FOR PROCESSING?

    The determination of the legal basis is based on GDPR (Art 6) and national legislation concerning direct electronic marketing.

    Finland 
    Consent for direct electronic marketing and legitimate interest for personalised sales activities. Labquality Ltd. will initiate the change of legal basis for direct electronic marketing in Q1/2025 from consent to legitimate interest. The data subjects will be informed by email one month before the change becomes effective.

    Poland 
    Consent for direct electronic marketing and legitimate interest for personalised sales activities. Reference: the Electronic Communications Act.

    Other European countries 
    Consent for direct electronic marketing and legitimate interest for personalised sales contacts.

    7 WHAT INFORMATION IS PROCESSED?

    Data subject basic information:

    • name
    • phone number
    • email address
    • address
    • title
    • country of residence
    • affiliated organisation

    There is also supplementary information, such as applicable legal basis per country and marketing contact status.

    7.1 WHY IS COUNTRY INFORMATION INCLUDED?

    Country information is included for us to be able to comply with country-specific national legislation.

    8 WHAT ARE THE SOURCES OF INFORMATION?

    Data on marketing and sales contacts is collected from several sources:

    • The contact has proactively contacted Labquality (info mail, webpage, direct contact, phone call).
    • The contact has made public the need for services provided by Labquality or its competitors.
    • The contact has met our staff member (live or virtual) in a conference or other relevant business setting.
    • The contact has been referred by a member of his/ her organisation.
    • The contact is in a position that is expected to be directly relevant to the services provided by Labquality.
    • The contact information is presented in a context that is relevant for Labquality services (public tenders, public funding decisions, information on websites, etc.).

    9 ARE YOU DISCLOSING THE INFORMATION TO 3RD PARTIES?

    We use the Hubspot CRM system as a contact information database (controller-to-processor transfer). We are transferring data outside of the EU to the USA. The legal basis of transfer is the EU-USA adequacy decision. HubSpot is a registered member of the Data Privacy Framework program.

    10 HOW DO YOU PROTECT MY DATA?

    For more information about the HubSpot CRM system data security features, please visit https://hubspot.com. Our users have individualised accounts in the HubSpot CRM system, and the actions of the users are logged.

    11 HOW LONG WILL YOU STORE THE DATA?

    We store your data for 10 years from:

    • date of addition of your contact data to the database OR
    • last date of purchase,

    whichever is later. For EQA customers, 10 years of retention is justified by the ISO 15189 standard (ensuring access to the EQA reports).

    12 IS THERE AUTOMATED PROFILING?

    No.

    13 WHAT ARE THE RIGHTS OF THE DATA SUBJECTS?

    The data subjects have the following rights:

    • right to know what data is being processed
    • right to get data corrected
    • right to get data ported
    • right to restrict processing
    • right to complain to authorities
    • right to get data deleted
    • right to cancel consent

    If you wish to exercise your rights, please contact us and we will assess your request in the context of the legal basis applied and relevant national supplementary legislation.

    13.1 WHO TO CONTACT?

    Please contact our HR Director at kirsi.marin@labquality.com

    14 HOW DO YOU INFORM ABOUT UPDATES?

    Minor updates are published as a new version of this data privacy notice without additional communication. Major updates are communicated to you with a separate data protection message on our website or by email.

    14.1 WHAT ARE MAJOR UPDATES?

    • controller to controller disclosures
    • change of legal basis of processing

    15 WHO IS THE APPLICABLE DATA PROTECTION AUTHORITY?

    The Office of the Data Protection Ombudsman, Finland

    Street address: 
    Lintulahdenkuja 4, 00530 Helsinki, Finland 

    Postal address: 
    PL 800, 00531 Helsinki, Finland

    Switchboard: +358 29 566 6700

    Registry: +358 29 566 6768

     E-mail (registry): tietosuoja(at)om.fi