Privacy Policy
Last updated: April 2026
1. Introduction
ExecutGroup Oy ("we", "us", "our") is a company registered in Finland (Business ID: 3496968-8), with its principal office at Lapinlahdenkatu 16, 00180 Helsinki, Finland.
We provide diagnostic software, pairwise comparison tools, and executive decision-support services (the "Service"). This Privacy Policy explains how we collect, store, process, and protect your personal data when you visit our website (www.executgroup.com) or participate in our diagnostic assessments.
We process all personal data in strict compliance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the Finnish Data Protection Act (1050/2018).
2. Data Controller
| Data Controller | ExecutGroup Oy |
| Business ID (Y-tunnus) | 3496968-8 |
| Registered Office | Lapinlahdenkatu 16, 00180 Helsinki, Finland |
| Contact Email | [email protected] |
| Supervisory Authority | Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), Finland |
3. Personal Data We Collect
Depending on how you interact with ExecutGroup, we collect the following categories of data:
- Inquiry & Contact Information: Full name, business email address, company name, and message details submitted through our contact forms.
- Diagnostic Participation Data: Anonymized or pseudonymous pairwise duel choices and evaluation ratings submitted during corporate assessments. Unless explicitly requested by the corporate customer, individual survey responses are aggregated to protect employee confidentiality.
- Technical & Security Metadata: IP address, device type, browser user-agent, timestamp, and security tokens to prevent fraudulent automated submissions and DDoS threats.
- Essential Cookies: Session and CSRF security tokens essential for site navigation and secure transmission of forms. We do not use third-party behavioral tracking or ad retargeting cookies.
4. Legal Grounds for Processing (GDPR Article 6)
Consent (Art. 6(1)(a))
When you voluntarily submit inquiries or request documentation through our contact channels.
Contract (Art. 6(1)(b))
To fulfill diagnostic project deliveries, platform access, and customer agreements.
Legitimate Interest (Art. 6(1)(f))
To secure infrastructure, prevent spam, and maintain aggregated statistical benchmarks.
5. Data Storage & Sovereignty
All ExecutGroup systems and databases are hosted on dedicated European cloud servers located within the European Economic Area (EEA) (Helsinki, Finland and Frankfurt, Germany).
We do not transfer personal data outside the EEA. Data is encrypted in transit using Transport Layer Security (TLS 1.3) and encrypted at rest with industry-standard AES-256 encryption.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Contact inquiries: Retained for up to 24 months from last interaction or until an erasure request is received.
- Customer project data: Retained for the duration of the commercial agreement plus statutory Finnish accounting retention requirements (6 years).
- Server security logs: Rotated and automatically purged every 90 days.
7. Your Rights
Under GDPR, you retain the following enforceable rights regarding your personal data:
- Right of Access (Art. 15): Request confirmation and copies of your personal data.
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete information.
- Right to Erasure (Art. 17): Request deletion of your data ("Right to be Forgotten").
- Right to Restriction (Art. 18): Restrict the processing of your data under specific conditions.
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interest.
To exercise any of these rights, email us directly at [email protected]. We respond to all verified requests within 30 days without charge.
8. Contact Us & Supervisory Authority
If you have inquiries regarding our data protection policies, please contact:
If you believe our processing of your personal data infringes data protection laws, you have the right to lodge a formal complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).