
Privacy Policy, Mental Race Oy.
Data Controller
Mental Race Oy
Business ID: 3440367-6
Lyhdelenkki 24, 40530 Jyväskylä, Finland
Contact Person for Matters Related to the Personal Data Register
Email: info@mentalrace.fi
Contact person: Josefiina Lahti
Name of the Register
Mental Race Oy’s Customer and Marketing Register
Contents of the Register
The following information may be stored and processed in the register (not all data is necessarily collected from every data subject):
Name, email address, phone number
Organization and position in the organization
Updates to the above-mentioned data
Information collected through cookies about the data subject’s visits and activities on the website
Information related to newsletter subscriptions, event participation, contact requests, and service orders
Data derived from the use of services, e.g. segmentation into user groups
Purpose and Legal Basis for Processing Personal Data
Personal data is used by Mental Race Oy for:
Customer communication and targeted marketing
Producing, offering, personalizing, and developing services
Informing and marketing services and events
Managing, maintaining, and developing customer relationships
Business planning and development
Market research and statistical purposes
The processing of personal data is based on the data subject’s consent, the data controller’s legitimate interest, or the preparation/fulfillment of a contract.
Sources of Data
Data is collected:
Directly from the data subject
Through third parties at events
Via cookies on Mental Race Oy’s website
From public sources
Retention Period of Personal Data
Data will only be retained as long as necessary for the purposes for which it was collected. As a general rule, data will be stored for no more than two (2) years from the last active interaction, unless legislation requires a longer retention period.
Principles of Register Protection
Data is protected through technical and organizational measures.
Access rights are restricted to employees who need the information for their tasks.
Access to systems requires personal usernames and passwords.
Backups and data disposal are carried out securely.
Disclosure of Data
Data will not be disclosed to third parties, except when required by law or an authority’s order, a court decision, or if necessary to protect the rights of the data controller or third parties.
Transfer of Personal Data Outside the EU/EEA
Personal data may be transferred outside the EU/EEA if service providers are located there. Such transfers will always be carried out securely and in compliance with applicable data protection laws.
Rights of the Data Subject
The data subject has the right to:
Access their own data
Request the correction or deletion of inaccurate data
Withdraw previously given consent
Object to the processing of personal data (e.g. direct marketing)
Request restriction of processing
File a complaint with a supervisory authority
Updates to the Privacy Policy
Mental Race Oy reserves the right to update this privacy policy as its business and applicable legislation evolve. Updates will be announced on the company’s website.
This privacy policy was last updated on 16 September 2025.