Home›GDPR and your rights
GDPR and your rights
The GDPR gives you real, enforceable rights over your own information. This page explains each one in plain terms and tells you exactly how to use it. You do not need a reason and you do not need a lawyer.
Last updated 12 October 2026
- Who you are dealing with
- The rights you have
- How to exercise them
- If we say no
- Complaining to a regulator
- What we will not do
Who you are dealing with
FinnishLine Growth Oy (Business ID 3209925-2), Helsinki, Finland, is the controller for personal data collected through this website. Its Indian sister company, FinnishLine Edugrowth Private Limited (CIN U85500PB2023PTC060092), Mohali, Punjab, processes the same data when counselling students in South Asia.
The rights you have
| Right | What it means in practice |
|---|---|
| Access | Ask what we hold about you. We send you a copy of it. |
| Rectification | Tell us something is wrong and we correct it. |
| Erasure | Ask us to delete your data. We do, unless a law requires us to keep a specific record — and then we tell you which one. |
| Restriction | Ask us to stop using your data while a dispute about it is resolved. |
| Portability | Get the data you gave us in a machine-readable format, or have us send it to someone else. |
| Objection | Object to any processing we base on legitimate interest. We stop unless we can show compelling grounds that override your rights. |
| Withdraw consent | Where we relied on your consent, withdraw it at any time. It does not undo what was lawful before you withdrew. |
| Complain | Go to a supervisory authority. Details below. You can do this without contacting us first. |
How to exercise them
Email contact@finnishline.co with “Data protection” in the subject line. Tell us which right you are using and give us enough detail to find your records — the email address you used, and your reference number if you have one.
We may ask you to confirm your identity, but only as much as we need to be sure we are not handing your data to someone else.
We respond within one month. If a request is genuinely complex we may extend that by two further months, and if we do we will tell you why within the first month. There is no charge.
If we say no
We have to tell you why, and we have to tell you that you can complain to a supervisory authority and seek a judicial remedy. We will not refuse quietly.
Complaining to a regulator
You can complain to the data protection authority in the EU or EEA country where you live, where you work, or where you think the problem happened. For us that is Finland:
- Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), Finland — tietosuoja.fi/en/home
If you are in India, FinnishLine Edugrowth Private Limited is subject to Indian data protection law and you may raise concerns with us directly at the same address.
What we will not do
We will not make you accept marketing to get an answer. We will not charge you for exercising a right. We will not treat you worse for having used one. If any of that happens, it is a mistake and we want to hear about it.
Questions about anything on this page? contact@finnishline.co