top of page

Privacy Policy

General

Data privacy and protection are essential to us at Manta. Therefore, we want to make sure your personal data is being handled in a safe, lawful, and respectful manner. In this privacy policy, we want to specify exactly how, when, and why our company (we) collect, manage, and process your data. The policy is based on Regulation (EU) 2016/679 (also known as the GDPR) and the Finnish Data Protection Act (1050/2018). 

Data Controller

Manta Research Group Ab Oy 

www.mantagroup.fi

Melkinlaituri 8 A 77, 00220 Helsinki

Business-ID: 3572988-9

Purposes and Legal Bases for Processing 

Manta processes personal data only when there is a lawful basis under the EU General Data Protection Regulation (GDPR 2016/679) and the Finnish Data Protection Act (1050/2018).


The purposes and corresponding legal bases for processing are as follows:

​

  • Provision of services and client assignments
    Personal data is processed to manage, perform, and document assignments and contractual relationships.
     

  • Communication and customer relationship management
    To respond to inquiries, maintain contact, and manage relationships with clients, partners, and stakeholders.
     

  • Marketing and information distribution
    To send newsletters, updates, invitations, or other relevant communications concerning Manta’s services and publications.
    You may withdraw your consent or object to marketing at any time.

​

  • Legal obligations
    To comply with statutory requirements under Finnish and EU law, such as accounting, taxation, anti-money-laundering (AML) duties, and data-protection obligations.
     

  • Website analytics and technical maintenance
    To ensure website functionality, monitor security, and improve user experience through analytics and cookies.
     

  • Protection of rights and security
    To prevent misuse, manage disputes, or defend legal claims.

Categories of Personal Data Collected

Manta collects and processes the following categories of personal data, depending on the nature of your interaction with us:

​

  • Identification and contact details
    Name, title, position, organization, address, phone number, and email address.

​

  • Client and contractual information
    Information related to assignments, projects, and service agreements, including correspondence, documentation, and billing details.

​

  • Communication data
    Messages and inquiries sent to us via email, contact forms, or other communication channels.

​

  • Website and technical data
    IP address, browser type, operating system, device information, and other technical identifiers collected through cookies or analytics tools.

​

  • Marketing and subscription data
    Newsletter subscriptions, preferences, participation in events, and consent to receive updates or marketing communications.

​

  • Financial and administrative data
    Invoicing information, payment records, and data necessary for accounting and statutory obligations.

​

  • Publicly available information
    Data obtained from public sources such as the Trade Register, company websites, or professional networking platforms, when relevant to our services

Sources of Data

Manta collects personal data primarily from the following sources:

​

  • Directly from the data subject
    Information provided by you when contacting us, subscribing to communications, entering into agreements, or otherwise interacting with Manta (for example, by email, online forms, or meetings).

​

  • Client assignments and contractual relationships
    Data generated or received in the course of providing our services, including correspondence, documentation, and other materials related to client work.

​​

  • Website and digital channels
    Data is collected automatically when you visit our website, such as technical identifiers (IP address, browser type, device information), and through cookies or analytics tools, in accordance with our Cookie Policy.

​

  • Publicly available sources
    Information obtained from public registers and databases (such as the Finnish Trade Register), official publications, professional networking sites, and other lawful public sources relevant to our services.

​

  • Partners and service providers
    When necessary, Manta may receive data from trusted partners or subcontractors who assist in delivering our services, always in accordance with data protection legislation and contractual safeguards.

Disclosure and Transfers of Data

Manta treats all personal data with confidentiality and discloses it only when necessary for legitimate business purposes or to comply with legal obligations. Personal data may be disclosed or transferred in the following situations:

​

  • Service providers and partners
    We may share personal data with trusted service providers who process data on our behalf, such as IT and cloud service providers, accounting or invoicing partners, and communication or marketing service providers. These parties act as data processors under written agreements and are bound by confidentiality and data protection obligations in accordance with the GDPR.

​

  • Authorities and legal obligations
    Data may be disclosed to competent authorities, courts, or other public entities when required by Finnish or EU law, regulation, or official request (for example, for accounting, taxation, or legal compliance).

​

  • Corporate and project cooperation
    In the context of collaborative research, consultancy, or multi-actor projects, relevant contact or professional information may be shared with participating partners strictly for the purpose of managing and executing the project, and always under appropriate contractual safeguards.

​

  • Transfers outside the EU/EEA
    As a rule, Manta stores and processes personal data within the European Union or European Economic Area.
    If data must be transferred outside the EU/EEA, we ensure that an adequate level of protection is maintained in accordance with the GDPR. This is typically done by using the European Commission’s Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.

Rights as the Data Subject

Under the EU General Data Protection Regulation (GDPR 2016/679) and the Finnish Data Protection Act (1050/2018), individuals whose personal data is processed by Manta have the following rights:

  • Right of access
    You have the right to obtain confirmation as to whether Manta processes your personal data and, if so, to receive a copy of that data along with information about its use.

​

  • Right to rectification
    You may request correction or completion of inaccurate, incomplete, or outdated personal data concerning you.

​

  • Right to erasure ("right to be forgotten")
    You may request that your personal data be deleted when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when processing is otherwise unlawful.

​

  • Right to restriction of processing
    You may request that the processing of your personal data be restricted, for example, while the accuracy of the data is being verified or when you have objected to processing.

​

  • Right to object
    You may object at any time to the processing of your personal data based on legitimate interest, including processing for direct marketing purposes.

​

  • Right to data portability
    When processing is based on consent or contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller where technically feasible.

​

  • Right to withdraw consent
    If processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

​

  • Right to lodge a complaint
    If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), which is the supervisory authority in Finland.
    Website: www.tietosuoja.fi

Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected, or as required by applicable laws and regulations.

  • Client and contractual data are typically retained for up to ten (10) years in accordance with statutory accounting and professional obligations.

​

  • Marketing and contact data are kept until consent is withdrawn or the data becomes outdated.

​

  • Technical and website data are retained according to cookie and analytics settings.

​

After the retention period, data is securely deleted or anonymized.

Data Security

Manta applies appropriate technical and organizational security measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. Data is stored on secure servers within the EU/EEA, access is restricted to authorized personnel, and communications are encrypted where applicable

Contact and Review

Manta may update this policy from time to time to reflect legal, operational, and technical changes. If you have any questions regarding this policy or the processing of your personal data, please contact us at: info@mantagroup.fi 

Last updated 16.10.2025

bottom of page