Updated September 23, 2026

This policy explains how Cherry Group Oy processes personal data when you interact with us, use our website cherry.fi, or apply to join our network as an interim manager.

1. Data Controller

Cherry Group Oy Business ID: 3234528-1 Salomonkatu 17 B 32, 00100 Helsinki, Finland

Data protection matters: hello@cherry.fi, +358 40 070 5050

2. Whose data we process

  • Contact persons for client companies and potential clients
  • Interim managers and executive candidates who have contacted us or with whom we collaborate
  • Subscribers to our newsletter
  • Visitors to our website

3. What data we process

Contacts and customer relationships: name, company, email, phone number, message content, scheduled meetings, and information related to the customer relationship and assignments.

Executive candidates and interim managers: in addition to the above, CVs and other attachments provided, work and education history, areas of expertise, availability, and assessments and notes related to assignments.

Newsletter: email address and subscription details.

Website usage: device and browser information, IP address, actions taken on the site, cookie identifiers, and information on how you arrived at the site. Some of this data is collected only if you have accepted cookies.

4. Purposes and legal bases for processing

PurposeLegal basis
Responding to inquiries and preparing offersLegitimate interest or pre-contractual steps
Managing customer relationships and assignmentsContract
Evaluating executive candidates and presenting them to clientsLegitimate interest; disclosure to the client occurs after we agree with you
Sending the newsletterConsent
Site analytics and developmentConsent (cookies)
Marketing and targeted advertisingConsent (cookies)
Identifying companies visiting the site at company levelLegitimate interest; cookie use with consent
Accounting and other statutory obligationsLegal obligation

Our legitimate interest is based on B2B operations: processing the data of corporate client contact persons and executive candidates is essential for delivering our services.

5. Data sources

Mainly from you directly, for example via contact forms, email, telephone, or in meetings. We may obtain information about executive candidates from other sources, such as referees, only with your consent. Additionally, we may use public professional profiles, such as LinkedIn, for candidate mapping. Website usage data is collected via cookies and similar technologies as described in our cookie policy.

Providing data is voluntary. However, without contact details, we cannot respond to your inquiry, and without a CV or similar information, we cannot evaluate you as an executive candidate.

6. Data disclosures and processors

We do not sell personal data. We disclose executive candidate data to client companies only in connection with an assignment and after agreeing on this with the candidate.

We use trusted service providers who process data on our behalf:

  • HubSpot: customer relationship management, forms, newsletter, and appointment scheduling
  • Google (Analytics, Ads, Tag Manager, YouTube): analytics, advertising, and videos
  • Meta (Facebook, Instagram): targeted advertising and measurement
  • LinkedIn: targeted advertising and measurement
  • Hotjar: website usability analysis
  • Leadfeeder (Dealfront): identification of companies visiting the site

Additionally, data may be processed by our email, IT, and accounting service providers, as well as by authorities when required by law.

7. Data transfers outside the EU and EEA

Some of our service providers (e.g., Google, Meta, LinkedIn, and HubSpot) are based in the United States or have operations outside the EU and EEA. Transfers are based on the EU-U.S. Data Privacy Framework or standard contractual clauses approved by the European Commission.

8. Retention periods

We retain personal data only for as long as necessary for the purposes described in this policy:

  • Contacts that do not lead to a customer relationship: maximum of 2 years from the last contact
  • Customer relationship data: for the duration of the relationship and thereafter as long as necessary for legal claims or accounting obligations
  • Executive candidate data: for as long as you are part of our network, maximum of 3 years from the last contact, unless you request the deletion of your data earlier
  • Newsletter: until you cancel your subscription
  • Cookies: the retention period for cookies is specified in our cookie policy

9. Cookies

We use cookies and similar technologies, such as scripts and web beacons, on the site. They are divided into four groups:

  • Functional: necessary for the site’s operation, such as language selection and saving your cookie preferences. These are set without consent.
  • Preferences: remember choices you have made on the site.
  • Statistics: tell us how the site is used (Google Analytics, Hotjar).
  • Marketing: targeted advertising and measurement, corporate-level visitor identification (Google Ads, Meta, LinkedIn, HubSpot, Leadfeeder), and embedded videos (YouTube).

Preference, statistics, and marketing cookies are enabled only with your consent. You provide or deny consent in the cookie banner, and you can change or withdraw it at any time under ‘Manage your consent settings’ on the cookie policy page. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Specific cookie information, such as names, purposes, and retention periods, can be found in our cookie policy.

10. Your rights

You have the right to:

  • access your data
  • request the rectification of incorrect data
  • request the deletion of your data
  • request the restriction of processing
  • object to processing based on legitimate interest
  • transfer your data from one system to another when processing is based on consent or a contract
  • withdraw your consent at any time, for example via the unsubscribe link in the newsletter or through cookie settings

Send requests to hello@cherry.fi. We will respond within one month.

If you believe your data is being processed unlawfully, you can file a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

11. Automated decision-making

We do not make decisions concerning you based solely on automated processing that would have legal or similarly significant effects on you.

12. Data security

Data is accessed only by individuals who need it for their work. Systems are protected by usernames and passwords, and our service providers use industry-standard technical and organizational security measures.

13. Changes

We may update this policy as our operations or legislation change. The current version is always available on this page.