Privacy notice: business outreach
Last updated: 2026-11-03
Who we are
TMI Olga Kuznetsova, trading as KOD Production (Business ID 3357341-1, Espoo, Finland), is the controller of personal data processed for business outreach. Contact: [email protected].
What we process
If we contacted you about our services, we process your name, job title, employer, business email address, LinkedIn profile URL, the public business information that made us reach out (for example a job posting or a funding announcement, with its source and date), a note on why our offer relates to your role, the language you use publicly for business, and our correspondence with you. If we send you a link to a demo, we record whether and when that link was opened, whether the video was played and whether the prototype was opened, to know whether to follow up.
Where we got it
From public sources (your company’s website, public job boards, news about your company, your public professional profile) and from the business data provider Apollo. Our first email to you names the specific source of your email address and the reason we contacted you.
Why and on what basis
We process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR / UK GDPR). That interest is offering our B2B services (setting up and running outbound sales systems, and 3D product configurators for web shops) to people whose role relates to them, at companies that have publicly shown a related need, such as hiring for sales roles, raising funding, appointing a sales leader, or selling a product range with many variants online. We have assessed that this interest does not override your rights; you can request a summary of that assessment.
Your choice: right to object
You can object at any time, free of charge: reply “no” or “unsubscribe” to any of our emails. We will stop contacting you immediately and permanently. If you ask on behalf of your company, we will stop contacting anyone at your company.
How long we keep it
If you do not reply, we delete your data 12 months after our last message. If we collected your details but did not contact you, we delete them within 30 days. If you ask us not to contact you, we keep only a one-way hash of your email address so that we can respect your request (you can ask us to delete that too).
Who processes it for us
Service providers for hosting, email delivery, CRM, business data and AI-assisted text processing, under data processing agreements. Some are located outside the EEA (in the US); transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses. You can request a copy of the safeguards at [email protected].
Automated decisions
We prioritise companies (not individuals) by public business signals. We make no decisions about you that have legal or similarly significant effects.
Your rights
Access, rectification, erasure, restriction and objection. Write to [email protected]; we answer within one month. You may also lodge a complaint with the Data Protection Ombudsman of Finland (tietosuoja.fi), with the supervisory authority of your country, or, in the UK, with the ICO (ico.org.uk).
AI
We use AI tools to research public business information and draft messages. A person reviews and sends them. If you ask whether a message was AI-assisted, we will tell you.