Privacy Policy

Privacy Notice for Website and Platform

Last updated: 21 September 2026

This Privacy Notice concerns Happeo’s (“Happeo”, “we” or “us”) personal data processing in the context of the Happeo website happeo.com (“Website”) and Happeo’s social intranet platform accessible through the Website or a mobile application (“Happeo Platform”). Together, these are referred to as the “Services”.

The Privacy Notice describes how we process personal data concerning the visitors of the Website, the users of the Happeo Platform, the contact persons of our customers, potential customers, suppliers and other business partners when we offer and promote our Services to existing and potential customers and users, and maintain business relationships with customers and other business partners.

The word “you” refers to all the aforementioned individuals whose personal data is processed in accordance with this Privacy Notice.

We are committed to processing personal data in compliance with this Privacy Notice and applicable laws. This Privacy Notice contains information about what personal data we collect, what are the purposes of processing and what rights you have relating to any personal data that concerns you.

Our Services may contain links to other services or websites run by parties other than Happeo (“Third-Party Services”). Our provision of these links does not amount to our endorsement of these Third-Party Services, nor their content, owners, or practices. This Privacy Notice does not apply to Third-Party Services, which may be governed by their own terms and policies, as applicable. Happeo does not control or assume any responsibility for the content or practices of any Third-Party Services.

Please note that we provide the Happeo Platform under a contract with an organization (such as your employer), which acts as the data controller for the data which we are a data processor under this Privacy Notice. In such cases, additional privacy policies by our customer may apply to you.

The data controller’s contact details

The data controller regarding the processing of personal data pursuant to this Privacy Notice is:

Happeo Oy (Business ID: 2802188-2)
Address: Happeo c/o Epicenter, Mikonkatu 9, 00100 Helsinki, Finland
Email: dpo@happeo.com

Personal data processed

The personal data collected and processed by us in accordance with this Privacy Notice can be divided into the following categories:

• (A) Identity Data includes first and last name, title, company information and profile picture if inserted.
• (B) Contact Data includes email, telephone number and address.
• (C) Communication Data includes your correspondence with Happeo.
• (D) Platform Content Data includes communication on the Happeo Platform.
• (E) Analytics data includes IP address, geographical location, browser type, referral source, heat mapping length of visits, pages viewed and other use of and interaction with the Services.
• (F) Transaction Data includes invoicing and billing information and purchase history.
• (G) Technical Data includes logs, IP address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Services.
• (H) Marketing and Communications Data includes your preferences in receiving marketing communications from us and our partners and your communication preferences.
• (I) User Data includes your user ID to the Happeo Platform and access tokens as well as the ID of the external system (e.g. Google or Microsoft) your organization uses to connect to the Happeo Platform.
• (J) Feedback includes feedback you decide to give to us in connection with our user research projects or otherwise.

Some data may also come from provisioning sources if the customer organization chooses to sync data of users into Happeo. Such data may include, among others, custom attributes the content of which depends on the customer organization’s input.

The above data may also include information about you that is publicly available, such as information available on sites like LinkedIn, Twitter, Facebook and Google.

Information we may collect from you

Information you give us

You may give us information about you by filling forms available on the Website, using the Happeo Platform or by corresponding with us by phone, email or otherwise. This information includes, but is not limited to, contact details, support requests and other information you provide when using the Services. You are in control of what information we receive from you.

Information we collect through the Services

When you use the Services, we may collect information from you, such as your contact details, data that measures the performance of the Services and data required for marketing purposes.

Information we receive from other sources

With respect to potential customers and their contact persons, we receive personal data from external or public sources, as we constantly look for new companies whom we think may benefit from our Services. These sources include services such as Zoominfo, LeadIQ and Linkedin.

Cookies

We use cookies in our Services to provide you the Services and the best possible user experience. You can find more information about our cookie practices in our Cookie Policy.

Purposes and legal bases of processing

Legitimate grounds for processing

We will only process your personal data when the law allows us to. Most commonly, we will process your personal data in the following circumstances:

• where you have provided your consent (GDPR Article 6(1)(a));
• where it is necessary to comply with legal obligations (GDPR Article 6(1)(c)); and
• where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (GDPR Article 6(1)(f)).

When choosing to process your personal data on the basis of our legitimate interests, we weigh our interests against your right to privacy and provide e.g., an easy-to-use opt-out from our marketing communications and process pseudonymised or non-personally identifiable data when possible.

We do not use your data to develop, improve or train generalized AI or ML models.

In some cases you may be requested to grant your consent for the processing of personal data. When the processing of personal data is based on consent, you may withdraw your consent at any time.

We have set out below a description of the ways in which we plan to process your personal data and the legal bases on which we rely to do so. We have also identified what our legitimate interests are, where appropriate.

Website & Marketing: Happeo as Controller

Platform

We collect some data from our customers as a data controller in order to manage our customer relationship and develop the Happeo Platform. For other data, our customer is the data controller and we process the data in order to perform our contractual obligations to provide the Happeo Platform and related services.

Platform: Happeo as Controller

Platform: Happeo as Processor

Personal data recipients

Personal data is mainly stored in an electronic format and only authorized personnel have access to the data.

Our Services integrate some services provided by third parties. We may share some of your information with these service providers in order for them to provide their services, including removing repetitive information from prospect lists, analyzing data, providing marketing assistance, conducting customer and/or user profiling, and providing support services and customer service. As such, the terms and privacy policies of these service providers may apply to you as well, in particular: Google Analytics, Hubspot, Planhat, Zoominfo, Google Optimize, Google Adwords, Capterra, Google Tag Manager, Google Recaptcha, LinkedIn, Twilio, Hotjar, Funnelytics, Clearbit, Amplifier, Grow, LeadIQ Segment, Productboard, Pendo, Maze, Figma, Miro, Dovetail, Jira and Zendesk. Furthermore, our customers have the option to integrate third-party tools into the Happeo Platform, in which case your information may be shared with those third parties.

To the extent third parties act on Happeo’s behalf as data processors, Happeo concludes data processing agreements with each service provider in order to ensure that your personal data is used, stored, and transferred securely and in accordance with European Union law, as applicable. This Privacy Notice does not apply to the services of such third parties which are governed by their own policies and terms.

We may also disclose your personal data to our affiliated companies which are companies owned or operated by us. In such cases, this Privacy Notice applies.

Furthermore, we may disclose or transfer personal data to fulfill legal obligations or when a supervisory authority requires disclosure. We may also disclose personal data if we are a subject to certain business activities such as a merger, an acquisition or a funding process.

Transfers outside the EEA

In order to provide our Services, we transfer personal data outside the European Economic Area if our service provider is located there.

If personal data is transferred outside the European Economic Area, we make sure that (i) the transferee is located in a country with an adequate level of data protection (as decided by the EU Commission from time to time), or (ii) the transfer occurs by using appropriate safeguards such as Standard Contractual Clauses published by the EU Commission.

Data storage period and security

We will not store personal data for a longer period than is necessary for its purpose or required by contract or law. The retention periods for personal data may vary based on its type and purpose. The retention periods may also be based on applicable laws (e.g. accounting and tax laws). You may contact us in order to get detailed knowledge about the retention times of the data we have about you.

Personal data is stored and secured in accordance with general industry standards and practices. We consider and keep personal data confidential. Subcontractors that we use for processing personal data are selected also based on their data security measures. For our own systems and data storage, we only use well-established service providers and robust software tools. Access to personal data is also protected with user-specific logins, passwords and user rights. Our premises are safe and secure.

User’s rights

Right to access

You have the right to know whether we are processing personal data concerning you and what data we process.

Right to withdraw consent

If we process personal data based on your consent, you can withdraw your consent at any time by contacting us. Withdrawing consent may lead to fewer possibilities to use our Services. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to rectify

You have the right to request that we correct any inaccurate or outdated personal data we have about you by contacting us.

Right to prohibit direct marketing

You have the right to request that your personal data is not processed for direct marketing purposes.

Right to unsubscribe from marketing communications

You may unsubscribe from receiving our marketing communications at any time by clicking the "unsubscribe" link located on the bottom of our emails or by contacting us.

Right to object

If we process your personal data based on Happeo’s or a third party’s legitimate interest, you have the right to object to the processing of your data, to the extent that there is no such significant other reason that would override your rights or the processing is not necessary for handling legal claims. Please notice that in this situation you might not be able to use our Services any longer.

Right to erasure

In certain situations you have the right to request the erasure of your data. These include, for example, when the processing is based on your consent and you have withdrawn your consent and when you have objected to the processing of your personal data and there are no overriding legitimate grounds for the processing.

Right to restriction of processing

You may request us to restrict processing of personal data for example when your data erasure, rectification or objection requests are pending and/or when we do not have legitimate grounds to process your data. This may lead to fewer possibilities to use our Services.

Right to data portability

If we process your personal data based on your consent or in order to fulfill a contract, you have the right to request transfer of the data you have provided to us to another service provider in a commonly used electronic format.

How to use the rights

You can exercise your rights by sending us an email to dpo@happeo.com. In such a case, we are required to verify your identity. If you consider that the processing of your personal data is not lawful, you can also make a notification to a supervisory authority.

In Finland, the competent supervisory authority is the Office of the Data Protection Ombudsman: https://tietosuoja.fi/en/notification-to-the-data-protection-ombudsman

Privacy notice updates

We may update this Privacy Notice when our operations change or develop. Also changes in law may make it necessary to update this Privacy Notice. The changes become valid once we have published them in the form of an updated privacy notice. Therefore, please visit this page and read this Privacy Notice from time to time.

Privacy Notice for Job Applicants

Happeo respects your privacy and is committed to protecting your personal data. This privacy notice will inform you as to how we collect, process and share your personal data when you apply for a job with us, and will tell you about your privacy rights.

1. Who is the data controller?
2. Information we collect and how we collect it
3. The purposes and the lawful basis
4. Sharing of information collected
5. Transfer to third countries
6. Data retention
7. How to exercise your data protection rights
8. Changes to this privacy notice

1. Who is the data controller?

The data controller for the processing described in this notice is:

Happeo Oy
Happeo B.V.
Happeo Inc.
Happeo Software Services S.R.L.
Happeo S.à r.l.

All of the controllers mentioned above are described together as “Happeo Group” and individual controllers as “Happeo”.

If you have questions regarding this Privacy Notice, please contact us by email at dpo@happeo.com.

2. Information we collect and how we collect it

In the following we will tell you which types of personal data we may collect about you and how we collect it. Section 3 lays out the purposes for which we process your personal data and the lawful basis we rely on.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• (A) Identity and Contact Data includes first name, last name, birth date (only if added by you) and photo identification, email, telephone number and address.
• (B) Recruitment Data includes the information collected in the process of recruiting you, such as information you have included in your application and CV; including documentation and information about your education, previous work experience, qualifications, language skills, any photos, video or other recorded material which you at your own discretion choose to make available to us.
• (C) References includes information obtained from previous employees at our request.
• (D) Work Permits includes information on your passport, citizenship, residence and work permit.
• (E) Test Data include the results of your aptitude, skills or personality tests.
• (F) Qualification Records includes authorisations and certifications, professional experience, qualifications and training records.

The information is collected directly from you through your application, CV or other materials made available to us before or during interviews. The information collected is uploaded to our applicant tracking system.

3. Purposes and legal bases of processing

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To take steps, prior to potentially entering into an employment contract with you, at your request — a process initiated by your submission of a job application to us cf. GDPR Article 6 (1) (b).
• Where it is necessary for the purposes of carrying out the obligations and exercising specific rights of you or us in the field of employment cf. GDPR Art 9 (2) (b).
• Where we need to comply with a legal or regulatory obligation cf. GDPR Article 6 (1) (c) or if necessary for the establishment, exercise or defence of a legal claim cf. GDPR Art 9 (2) (f).
• Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests cf. GDPR Article 6 (1) (f).

We have set out below, a description of all the ways we may use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are, where appropriate.

The use of artificial intelligence (AI) in the recruitment process. We may use AI in our recruitment process to help our recruiters review a high volume of applications more efficiently, for example, by categorising or ranking applications against role-specific criteria such as relevant qualifications, experience, or certifications. AI-generated categorisation is a recommendation only. A human recruiter reviews the outcome and makes the actual decision on whether your application advances. You have the right to object to this processing and to request more information about the logic involved. See “How to exercise your data protection rights” below.

4. Sharing of information collected

We may disclose your personal data within the Happeo Group where required for the above specified purposes. We base this processing on our legitimate interest to transmit personal data within the Happeo Group for internal administrative purposes, such as for the purposes of using centralized IT systems and alignment of Group HR Administration, business operations and strategies.

We may also disclose personal data to third parties in the following circumstances:

• when it is necessary for the purposes listed in section 3;
• when required by law;
• in connection with a merger, acquisition, or sale of all or substantially all of our business, stock, or assets;
• when we believe in good faith that disclosure is necessary to establish or exercise our legal rights or defend against legal claims, protect your safety or the safety of others, investigate fraud, or respond to a government request.

We share information, including personal data, with our trusted third-party service providers that provide services to us and process your data on our behalf and under our instruction, e.g. hosting of data and maintenance of IT-systems, hosting and maintaining recruitment portals and platforms, using AI in the recruitment process as well as certain recruitment services and test providers. These third-party service providers may have access to or process your personal data for the purpose of providing these services for us. We have entered into agreements including confidentiality and data processing clauses with our third-party service providers.

We may also share information with third parties that act as independent controllers regarding the collected personal data. This includes recruitment agencies, headhunters, test providers and other institutions that independently decide the purposes and means of processing.

5. Transfer to third countries

Some of our third-party service providers are established outside the EEA so their processing of your personal data will involve a transfer of data outside the EEA. In such cases, we make sure that (i) the transferee is located in a country with an adequate level of data protection (as decided by the EU Commission from time to time), or (ii) the transfer occurs by using appropriate safeguards such as Standard Contractual Clauses published by the EU Commission.

If you require further information on our current data processors established outside the EEA and the safety measures in place to allow for the transfer of personal data, you can request it from us. Please send your request to us by email at dpo@happeo.com.

6. Data retention

We retain the personal information we collect where we have an ongoing legitimate need or obligation to do so. Where we are no longer obliged to keep your records and do not have an ongoing need to process your personal information, we will either delete or anonymize it.

In relation to applicants who are not offered employment we will delete all data within 6 months from the decision not to offer employment, except where e.g. there is still an active conversation with the applicant. We will retain applicant data for longer periods if the applicant has consented.

For applicants who are hired, personal data will be retained in accordance with our Privacy Notice for Employees.

Data may be retained for a longer period if we are legally obliged to do so, or if retention is necessary to establish, exercise or defend legal claims. For specific retention times, please contact us at dpo@happeo.com.

7. How to exercise your data protection rights

You have certain choices available to you when it comes to your personal data. Below is a summary of those choices, how to exercise them and any limitations.

Under certain circumstances, you have the right to:

Right to access

You have the right to know whether we are processing personal data concerning you and what data we process.

Right to rectify

You have the right to request that we correct any inaccurate or outdated personal data we have about you by contacting us.

Right to object

If we process your personal data based on Happeo’s or a third party’s legitimate interest, you have the right to object to the processing of your data, to the extent that there is no such significant other reason that would override your rights or the processing is not necessary for handling legal claims.

Right to erasure

In certain situations you have the right to request the erasure of your data. These include, for example, when you have objected to the processing of your personal data and there are no overriding legitimate grounds for the processing.

Right to restriction of processing

You may request us to restrict processing of personal data for example when your data erasure, rectification or objection requests are pending and/or when we do not have legitimate grounds to process your data.

If you wish to exercise any of the data protection rights that are available to you then please send your request to us by email at dpo@happeo.com and we will action your request in accordance with applicable data protection laws.

You have the right to complain to your local data protection authority if you are unhappy with our data protection practices.

• In Finland you can lodge a complaint with the Office of the Data Protection Ombudsman at https://tietosuoja.fi/en/notification-to-the-data-protection-ombudsman.
• In the Netherlands you can lodge a complaint with the Office of the Data Protection Ombudsman at https://autoriteitpersoonsgegevens.nl/.
• In Romania you can lodge a complaint with the Office of the Data Protection Ombudsman at http://www.dataprotection.ro/.
• In Luxembourg you can lodge a complaint with the National Commission for Data Protection at https://cnpd.public.lu/en/particuliers/faire-valoir/formulaire-plainte.html.

8. Changes to this privacy notice

This privacy notice may be updated from time to time to reflect changing legal, regulatory, or operational requirements. The changes become valid once we have published them in the form of an updated privacy notice. Therefore, please visit this page and read this Privacy Notice from time to time.

Cookie Policy

This Cookie Policy was last updated on 2024/12/12.

This Cookie Policy applies to use of cookies at www.happeo.com provided by Happeo Oy (hereinafter referred to as "Happeo", "we" or "us"). You may access and change your cookie preferences at any time by clicking Cookie Settings.

1. What are cookies?

A cookie is a very small text document, which often includes an anonymous unique identifier. Cookies are created when your browser loads a particular website. The website sends information to the browser which then creates a text file. Every time the user goes back to the same website, the browser retrieves and sends this file to the website's server.

To the extent personal data is processed via these cookies, processing of personal data is carried out in accordance with our Privacy Notice.

2. What cookies do we use and what information do they collect?

Necessary cookies

These cookies are required to enable core functionality. Without these cookies, services you have asked for, such as logging in or filling in forms, cannot be provided. If you disable these cookies certain parts of the website will not function for you.

Necessary cookies we use:

Analytics cookies

These cookies help us improve or optimise the experience we provide. They allow us to measure how our website visitors interact with our website and we use this information to improve the user experience and performance of the website.

These cookies are used to collect technical information such as the last visited website, the number of pages visited, whether or not email communications are opened, which parts of our website or email communication are clicked on and the length of time between clicks.

Analytics cookies we use:

Functional cookies

We may use cookies that are not essential but enable various helpful features on our websites.

For example, these cookies collect information about your interaction with services provided on the website and may be used on our website to remember your preferences, your interests and the presentation of the website (such as the font size).

Functional cookies we use:

Advertising cookies

We use these cookies to collect information about your browsing habits in order to make advertising more relevant to you and your interests. They are also used to limit the number of times you see an advert as well as help measure the effectiveness of an advertising campaign. We may share this information with other parties who help manage online advertising – please see the "Third Parties" section below for more details.

Advertising cookies we use:

3. What third parties do we use?

Your use of our website may result in some cookies being stored that are not controlled by us. This may occur when the part of the website you are visiting makes use of a third-party analytics or marketing automation or includes content displayed from a third-party website. You should review the privacy and cookie policies of these third-party services to find out how these third parties use cookies.

Below you can find a table describing what third-party cookies are used on our website and for what purposes they are used and how long the cookie is retained.

We use the following third parties:

4. How can you change your cookie settings?

You can change your cookie preferences at any time by clicking on the link Cookie Settings. You can then ‘activate’ or ‘deactivate’ cookies used for different purposes. You may need to refresh your page for your settings to take effect.

Alternatively, most web browsers allow some control of most cookies through the browser settings.

List of Authorized Sub-processors

The list of authorized sub-processors can be found at https://www.happeo.com/subprocessors.