Privacy Notice

Your privacy is important to us. This privacy notice describes how Snowfox Oy ("Snowfox", "we", "us") collects and processes personal data about website visitors and marketing contacts in accordance with the EU General Data Protection Regulation (GDPR).

This notice covers personal data processed for our own purposes (website, marketing, recruitment). Personal data processed on behalf of our customers is governed by separate Data Processing Agreements.

1. Why and what personal data do we process?

We process personal data for two main purposes:

• Recruitment: Names, contact information, and resume data submitted by job applicants.
• Marketing: Basic contact information (name, work email, company, job title), device identifiers, and interaction data collected via our website and marketing communications.

2. Legal basis for processing

We process personal data on the following legal bases under GDPR Article 6:

• Legitimate interest — for marketing to existing contacts and prospects where we have a reasonable expectation of relevance.
• Explicit consent — for newsletter subscriptions and marketing where consent is required by applicable law.
• Contract performance — for processing necessary to respond to enquiries or enter into a contract.

3. Where do we get personal data?

We collect personal data directly from you via website forms, quiz submissions, contact forms, and newsletter sign-ups. We may also receive data from third-party sources including event organisers and partner referrals, where appropriate consent or legitimate interest applies.

4. How do we use cookies?

We use cookies and similar tracking technologies to operate and improve our website, analyse traffic, and support our marketing activities. You can manage your cookie preferences via our cookie banner. For a full list of cookies we use, please see our Cookie Policy.

The table below is generated automatically by our consent manager and lists every cookie currently in use, kept up to date as the site changes:

5. Who do we share personal data with?

We do not sell personal data. We may share data with trusted third-party processors including our CRM (Pipedrive), email marketing platform, analytics providers, and cloud infrastructure (Google Cloud). All processors are bound by data processing agreements and GDPR-compliant safeguards.

Where data is transferred outside the EU/EEA, we ensure adequate safeguards are in place (e.g. Standard Contractual Clauses).

6. Data retention

Data type	Retention period
Recruitment data	12 months from application, unless consent is given for longer
CRM / marketing contacts	24 months from last interaction
Accounting records	6 years (legal requirement)
Website analytics	26 months (Google Analytics default)

7. Your rights

Under GDPR, you have the following rights in relation to your personal data:

• Right of access — to obtain a copy of your personal data
• Right to rectification — to correct inaccurate data
• Right to erasure — to have your data deleted in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to restriction — to restrict how we process your data
• Right to object — to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent
• Right to lodge a complaint with a supervisory authority

8. How to exercise your rights

To exercise any of the above rights, please contact us at privacy@snowfox.ai. We will respond within one month. For complex requests, we may extend this to two months and will notify you accordingly.

9. Children's data

Our website and services are not directed at children under 16 years of age. We do not knowingly collect personal data from children.

10. Data controller contact

Snowfox Oy
Kaisaniemenkatu 1 B, 6th floor
00100 Helsinki, Finland
Business ID: 2937591-4
Email: privacy@snowfox.ai

Last updated: January 2026