Privacy Notice for Webinars and Events

Controller

Reputation and Trust Analytics Oy (1099844-1) 
Keilaranta 1
02150 Espoo
Finland

Reputation and Trust Analytics Sweden AB (559464-1895)
Kungsgatan 9
SE-111 43 Stockholm 
Sweden

Division of responsibilities between the companies: Reputation and Trust Analytics Oy is responsible for events in Finland, and Reputation and Trust Analytics Sweden AB is responsible for events in Sweden.

Contact person responsible for the register

Eila Lahti, Data Collection Manager, DPO
eila.lahti@reptrust.com

Legal basis and purpose of processing personal data

Personal data is processed for the planning, organization, administration, communication, and implementation of events organized by Reputation and Trust Analytics (such as webinars, seminars, training sessions, and other events). 

The processing of personal data is based on Article 6(1)(a) and (f) of the General Data Protection Regulation (EU 2016/679), namely: 

  • the consent given by the data subject; and  
  • the legitimate interest of the data controller in organizing, developing, and marketing event activities.  

Personal data is processed only for predefined purposes, including:

  • organizing the event and related arrangements;  
  • participant communication and providing information about the event;  
  • managing registrations;  
  • accommodating special requirements related to the event;  
  • collecting feedback and developing events;  
  • post-event communication;  
  • marketing similar events. 

Sources of Personal Data and Data Content

Personal data is primarily collected from the data subject themselves in connection with event registration via an online form. Data may also be supplemented or updated based on information provided by email, telephone, or other communications.

The register may contain the following information:

  • name;  
  • email address;  
  • telephone number (where necessary);  
  • organisation name;  
  • job title / position;  
  • possible special requirements related to arranging the event;  
  • registration and participation details;  
  • communication and correspondence related to the event.  

When registering, individuals may also choose to subscribe to newsletters or marketing communications.

Implementation and Recording of Events


Events may be organized either online (for example, via the Microsoft Teams platform) or as physical in-person events. 

Online events may be recorded for the internal use of Reputation and Trust Analytics, such as post-event communication, training purposes, and quality assurance. Recordings may also include chat discussions. 

Participants will be informed in advance about the recording and, where necessary, also during the event itself. 

Microsoft acts as a processor of personal data in relation to the technical implementation of online events. When a meeting recording is started, Microsoft Teams displays a notification to all participants using the Teams desktop, web, and mobile applications, as well as to participants joining by phone. 

Data Processing and Disclosure


Access to the data is restricted to the persons employed by Reputation and Trust Analytics and its subcontractors whose tasks require processing the data. 

Personal data may also be processed in systems used by Reputation and Trust Analytics, such as customer relationship management and event management systems. The companies use a shared technical platform (HubSpot). 

Personal data will not be disclosed to third parties for marketing purposes without a separate legal basis or consent. 

Personal data is generally not transferred outside the European Union or the European Economic Area. For transfers of personal data, we use data transfer mechanisms approved by the European Commission, such as the EU–US Data Privacy Framework (DPF) and, where necessary, Standard Contractual Clauses (SCCs).

Data retention period


Personal data is retained for as long as necessary for organizing the event, carrying out post-event communication, and developing operations. 

With regard to newsletters and marketing communications, personal data is retained until the data subject unsubscribes or objects to the processing. 

Event recordings are retained for a maximum of twelve months, unless a longer retention period is justified for training, documentation, or business purposes.

Rights of the Data Subject

The data subject has the right to:

  • access personal data concerning them;  
  • request the rectification or erasure of personal data;  
  • request restriction of processing or object to the processing;  
  • transfer personal data from one system to another;  
  • withdraw consent at any time where the processing is based on consent;
  • lodge a complaint with a supervisory authority if they consider that data protection legislation has been violated.    

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

This privacy notice was last updated on 22 June 2026.