Privacy Policy
Last Revised: 06 April, 2025
Read our Privacy Policy because awareness is the first step to security.
Welcome to IT First Aid!
IT First Aid cares deeply about the privacy of its visitors and users. To that end, this Privacy Policy (“Privacy Policy”) describes how IT First Aid collects, uses, and shares your Personal Information ("PI"), as well as an explanation of the data rights you may have regarding that Personal Information. This Privacy Policy applies to all IT First Aid users, including unregistered visitors and registered users (collectively, “Users,” “you,” or “your”), and to all IT First Aid services, including our websites (such as www.itfirstaid.eu and any of its subdomains, the “Website”) and related services (collectively, the “Services”). This Privacy Policy is not intended to override the terms of any contract you have with us, nor any rights you may have under other applicable data privacy laws.
Before accessing or using our Services, please read this policy and make sure you fully understand our practices regarding your Personal Information. If you read and fully understand this Privacy Policy, and remain opposed to our practices, you must immediately leave and discontinue all use of any of our Services. If you have any questions or concerns regarding this policy, please contact us here.
Who is the Data Controller?
The data controller is the entity responsible for deciding how and why your personal data is collected, used, and processed. They ensure that your personal information is handled in accordance with applicable data protection laws.
In this case, the data controller for the information you provide when using our Website and Services is IT First Aid, the owner of this Website and related Services. We are responsible for ensuring your privacy and protecting your personal data. If you have any questions about how your data is managed, please contact us using the details below:
Contact Details
IT First Aid
Sturenkatu 26 lt. 36, 00510 Helsinki, Finland
Privacy@itfirstaid.eu
We will be happy to assist you.
What ‘Personal Information’ do we collect?
To provide you with our services, we collect personal information related to an identified or identifiable individual ("Personal Information"). This information comes from what you provide directly, your use of our services, and other sources. Below are the types of personal information we collect:
Information You Provide to Us
When you register for our services, sign up for IT First Aid events, subscribe to our blogs or newsletters, use our services, book appointments, or contact us via any communication channel (e.g., IT First Aid contact form, support tickets, emails), you may provide us with basic personal information and information relating to the customer relationship. This includes:
-
Name
-
Email address
-
Phone number
-
Country
-
Company name
-
Address
-
Information included in your communications with us
Information We Collect When You Use Our Services
When you visit, download, or use any of our services, we may collect aggregated usage data, including:
-
Browsing and clickstream activity
-
Session heatmaps and scroll behavior
-
Non-identifiable details about your device, such as device type (Desktop, Mobile), operating system, internet browser, IP address, city, country, referring/exit pages, and date/time stamps
Information We Collect from Other Sources
We may receive personal information about you from third-party sources, such as:
-
Security and fraud detection providers – to help identify and prevent fraudulent activity
-
Social media platforms – if you log in or sign up using a social media account, we may receive personal details from that service (e.g., username, basic profile information)
-
Lead enhancement companies – to improve our service offerings
-
Advertising and marketing partners – to monitor, manage, and measure our ad campaigns
Cookies
IT First Aid tracks the behavior of the User with cookies. We use Wix Analytics, Google Analytics, and Facebook Pixel to analyze this data.
IT First Aid uses Facebook, Instagram, X (formerly Twitter), YouTube, and LinkedIn for online marketing. If a user visiting the IT First Aid website is logged into any of these platforms, this information may be used to show them targeted ads for IT First Aid’s services while they browse those platforms.
Consent for the use of the cookies mentioned above is requested when you first visit our website. You have the right to withdraw your consent at any time. To review, modify, or withdraw your consent, please click the Cookie Settings widget located at the bottom left corner of any page on our website. Please visit our Cookie Policy page to see descriptions of the different cookies we use.
More information about the privacy of Wix services is available here.
More information about the privacy of Google services is available here.
More information about the privacy of Facebook services is available here.
More information about the privacy of LinkedIn services is available here.
Purpose of processing personal data
We collect and process your personal information for the following purposes:
Marketing
-
Marketing communication
-
Performing opinion surveys
-
Arranging competitions
Customer management
-
Delivering services, and related invoices to you
-
Providing customer support for sold services
-
Contacting you for contract management and for maintaining customer relationship
-
Managing customer contact details
Business development
-
Maintaining, developing, analysing, and keeping statistics on customer relationships
-
Planning and developing our business operations
Legal grounds for the processing of personal data
Legitimate interest
We may rely on our legitimate interest to process your personal data for other marketing and business development purposes, provided that such interests are not overridden by your interests, fundamental rights, or freedoms.
Contract
We collect and use your personal information so we can complete your orders and offer you the services and support that come with IT First Aid solutions.
Who has access (i.e. personal data processors)
We use external service providers to support us with services such as marketing and email delivery. We ensure that all third parties are bound by contracts that adequately address data protection and confidentiality obligations.
Transfer of personal data to third countries
We use international cloud services in the processing of personal data and data may be transferred outside the EU/EEA in connection with those services.
If we do transfer personal data outside the EU or EEA, we will guarantee a sufficient level of data protection by, among other things, agreeing on matters related to confidentiality and processing as required by the legislation, e.g. by using model clauses adopted by the European Commission.
How long your information is stored
The retention period of your personal data depends on the information concerned and its purpose of use. We retain personal data for at least as long as they are needed for the execution of the purposes informed in this privacy policy. We regularly evaluate the necessity of data storage taking into account the applicable legislation. Additionally, we take reasonable measures to ensure that Personal Data that is incompatible, outdated or incorrect is not stored, but rectified or removed without delay.
How is your personal data protected
IT First Aid uses various technical and organisational security measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage, in accordance with our internal security procedures governing the storage, access, and disposal of personal data. Only employees who need to process your personal data for the purposes mentioned above are authorised to access the system containing personal data. Each employee has a personal username and password, as well as multi-factor authentication (MFA), to access the system. The Personal Data is collected in databases that are protected by firewalls, passwords and other technical means.
Payment processing and security
To ensure a secure and smooth payment process for bookings and transactions, we use Wix's integrated payment solutions. This includes Wix Payments and other trusted third-party payment processors (such as PayPal, Apple Pay, Google Pay etc.).
When you make a purchase or booking on our website, your payment information (such as credit card details) is securely processed by Wix and its integrated payment processors. Wix is fully responsible for handling your payment information in a secure and PCI DSS-compliant manner. They use secure encryption methods, including TLS encryption and tokenization, to ensure that your data is protected during transmission and storage.
Wix and its integrated payment processing partners are PCI DSS (Payment Card Industry Data Security Standard) compliant. Wix holds PCI DSS Level 1: Merchant & Service Provider, a standard which provides protection of the privacy and confidentiality of card data used to complete online transactions. Every site built on Wix is automatically PCI compliant by default with the highest Payment Card Industry Data Security Standards. This means that Wix certifications extend to our website (itfirstaid.eu) and its checkout process.
We (IT First Aid) do not store, process, or have access to your sensitive payment details. All payment information is securely handled by Wix and its payment processors, ensuring that we do not have access to, or any responsibility for, your credit card numbers or other financial data. We only receive limited information about your transaction, such as the name of the service purchased, the date and time of the transaction, and basic payment details like the cardholder's name and the last four digits of your card.
As a result, you are not required to worry about security or compliance issues related to your payment information when making purchases or bookings on our site. Wix ensures that your sensitive payment data is kept safe and private.
While Wix is responsible for processing payments securely, we encourage you to review their Privacy Policy for more information on how they handle your personal data. We are committed to providing a transparent and secure experience for our customers, and we are happy to address any questions you may have about how your data is used.
More information about Wix's security measures is available here.
Your rights
If you wish to use your rights, please contact our DPO via email. However, please note that not all of these rights can be exercised in all situations, depending on factors such as the basis for the processing of personal data.
Right of access
You have the right to inspect your personal data we have stored in our register.
Right to request the rectification of data
You have a right to request the rectification of inaccurate or incomplete personal data.
Right to request the erasure of data
You have a right to request the erasure of your personal data in certain cases (such as if the data is outdated or incorrect, or if the data processing is based on your consent).
Right to request the restriction of the processing of personal data and the right to object to the processing of personal data
You have a right to request the restriction of and to object to the processing of your personal data.
Right to withdraw consent regarding the processing of personal data
If the processing of personal data is based on your consent, you can at any time withdraw your consent regarding the processing of personal data.
Right to prohibit using personal data for the purposes of direct marketing
You have a right to prohibit using your personal data for the purposes of direct marketing and marketing or opinion surveys. Such prohibition may be given, for example, by unsubscribing from the mailing list according to the instructions provided in our marketing e-mails or by submitting a written request to the contact person of the register.
Right to prohibit profiling
You have a right at any time to prohibit using your personal data for the purposes of profiling.
Right to data portability
You may, subject to certain conditions prescribed by law, have the right to acquire your personal information in a machine-readable form and the right to transmit this data to another controller.
Right to lodge a complaint to the supervisory authority
You have the right to lodge a complaint concerning failures in the processing of personal data to the supervisory authority (Data Protection Ombudsman).
IT First Aid does not sell any Personal Data to third parties. Information of what data is processed and how it is processed among our online services is disclosed in this privacy policy.