Privacy notice
Last updated: 22 December 2025
1. Data Controller
Wonna Oy
(“Wonna”)
2. Contact Person for Data Protection Matters
For all matters related to the processing of personal data, please contact:
Laura Snellman-Junna
Email: laura@wonna.fi
The contact person is responsible for handling requests related to access, correction, and deletion of personal data.
3. What Personal Data We Process and for What Purposes
3.1 Customers and Marketing Contacts
We process personal data for the purposes of customer relationship management, sales, and marketing.
The processed data may include:
name
email address
company and role
communication history and contact details
other information related to the customer relationship
Customer and marketing data may be processed using the following tools:
HubSpot (CRM and marketing)
Slack (internal communication related to sales and customer work)
The legal basis for processing is:
legitimate interest (customer relationships and B2B communication)
consent (for marketing communication where applicable)
3.2 Contact via Website and Email
When you contact us via our website or by email, we process the personal data you provide, such as:
name
email address
message content
Messages are received and stored in the Google Workspace environment (Gmail).
The legal basis for processing is legitimate interest in responding to inquiries.
3.3 Recruitment
Personal data related to recruitment is processed for the purpose of managing the recruitment process.
The processed data may include:
name and contact details
CV and application
other communication related to recruitment
Recruitment data may be processed using the following tools:
Google Drive (for example, to assess individual suitability for the role, our working community, and customer needs)
Slack (internal communication related to the recruitment process)
In some cases, recruitment is carried out together with an external recruitment partner.
When a recruitment partner is used, the partner may process personal data using its own recruitment tools and systems. In such cases, the recruitment partner acts as an independent data controller and is responsible for its own data processing and privacy practices.
To date, recruitment partners’ tools have included services such as Teamtailor and LinkedIn recruitment solutions.
Candidates are assessed individually based on their suitability for the role, our working community, and customer needs. Candidates are not ranked or profiled beyond what is necessary for the recruitment process.
4. Data Processors and Third Parties
We use trusted third-party service providers to support our operations, including:
HubSpot (CRM and marketing)
Google (Gmail and Google Drive)
Slack (internal communication)
External recruitment partners may use their own tools and systems and are responsible for data protection within their services.
Some service providers may process data outside the EU/EEA. In such cases, appropriate safeguards are applied in accordance with EU data protection legislation, such as Standard Contractual Clauses.
5. Data Retention
Personal data is retained only for as long as necessary to:
fulfil the purposes for which it was collected
maintain customer relationships or recruitment processes
comply with legal obligations
Unnecessary data is deleted on a regular basis. Slack is not used for long-term storage of personal data.
6. Rights of the Data Subject
You have the right to:
access your personal data
request correction or deletion of your data
restrict or object to the processing of your data
withdraw consent where processing is based on consent
lodge a complaint with a supervisory authority
All requests should be addressed to the data protection contact person:
Laura Snellman-Junna, laura@wonna.fi
7. Cookies
More information about the cookies used on our website can be found in our Cookie Policy.
8. Changes to This Privacy Notice
We reserve the right to update this Privacy Notice. The most current version is always available on our website.