Privacy policy
EU General Data Protection Regulation (679/2016)
Sections 10 and 24 of the Personal Data Act (523/1999)
Updated 11/18/2020
Registrar
Vuokatinmaa Oy
Jäötiönrinteenpolku 3
88610 VUOKATTI
08 633 22 112| sales@vuokatinmaa.com
Contact person in matters concerning the register
Petri Heikkinen
Jäätiönrinteenpolku 3
88610 VUOKATTI
08 633 22 112 | sales@vuokatinmaa.com
Name of the register
VUOKATINMAA OY customer register
- Customer register based on customer relationship or other relevant connection
Purpose and legal basis of the processing of personal data
Personal data is processed for the management of customer and other business-related relationships, the provision of services, business development and planning, as well as marketing, opinion and market research and customer communications, which can also be carried out electronically and in a targeted manner.
Personal data is processed on the basis of the data subject's consent, the delivery of Vuokatinmaa Oy's legitimate interests or the implementation / preparation of an agreement to which the data subject is a party.
Information content of the register
The register may process the following information on data subjects:
Vuokatinmaa Oy's customer information
Organization: company name, address information, billing information, e-mail, telephone, business ID, web address, start and end time of the customer relationship, services related to the organization
Contact person: name, e-mail, telephone
Company, first names, last name, e-mail, telephone, personal identification number
Information about a person can also be collected through websites with his or her consent, for example, about the person's visit to the company's website and the actions he or she performs, such as downloading documents, viewing pages and filling out forms.
Regular sources of information
Information is obtained when the customer joins the customer relationship and about the services ordered / participated by the customer during the customer relationship.
Information about individuals is also collected orally or in writing in connection with contact. In connection with events and fairs, participant information is collected.
Personal data can also be collected and updated from the registers of Vuokatinmaa Oy's partners and from companies providing services concerning personal data.
Information about a person may also be collected through websites with his or her consent.
Regular disclosures
Personal data may be provided within the framework permitted by legislation and / or for the provision of services within Vuokatinmaa Oy to other subsidiaries and partners.
In addition, information may be disclosed to authorities in statutory cases.
Data transfer outside the EU or the EEA
Data will not be transferred outside the EU and the EEA.
Registry security principles
Personal information will be kept confidential. Everyone who handles the information in the register has signed a non-disclosure agreement.
Information processed by computer
The computer network and the equipment on which the registry is located are protected by firewalls, passwords and other generally accepted technical means..
Manual material
Documents containing customers' personal data are kept on premises to which unauthorized access is denied.
Retention period of personal data
The data collected in the register shall be kept only for as long and to the extent necessary in relation to the original or compatible purposes for which the personal data were collected. The legal basis of the information in the register and the need for processing shall be assessed at least every five (5) years.
The controller shall assess the need for data retention in accordance with its regular code of conduct. In addition, the controller shall take all reasonable steps to ensure that personal data which are inaccurate, incorrect or out of date, in relation to the purposes of the processing, are deleted or rectified without delay.
Rights of the data subject
Requests for the exercise of the data subject's rights will be addressed to the contact person mentioned in this leaflet.
Right to review and correct information
The data subject has the right to receive confirmation that personal data concerning him or her are being processed and, if so, the right to receive a copy of his or her personal data.
The data subject has the right to demand that Vuokatinmaa Oy correct inaccurate and erroneous information concerning the data subject without undue delay, as well as the right to have the incomplete information supplement
Right to delete information
The data subject has the right to delete the data without undue delay provided that:Personal data are no longer needed for the purposes for which they were collected or otherwise processed;
The data subject withdraws the consent on which the processing is based and there is no other legal basis for the processing;
Personal data has been processed unlawfully;
Right to restrict proceedings and right to object
The data subject shall have the right to have the processing restricted by the controller if:
The data subject disputes the accuracy of the personal dat
The processing is illegal and the registrant opposes the deletion of the data
The controller no longer needs such personal data for the purposes of processing
The data subject has objected to the processing of personal data pursuant to Article 21 (1)
The data subject has the right to object to the processing of data concerning him/her at any time.
Right to withdraw consent
The data subject has the right to withdraw his or her consent to the processing of personal data without prejudice to the lawfulness of the processing carried out on the basis of this consent.
The right to transfer data from one system to another
The data subject shall have the right to obtain information concerning her/him in a structured, commonly used and machine-readable form and to transfer that information to another controller.
Right to appeal to the supervisory authority
The data subject has the right to lodge a complaint with the supervisory authority if the data subject considers that the processing of personal data concerning him or her violates the applicable data protection rules.
More info
If the data subject wishes to obtain further information on the processing of her personal data, she/he may contact the contact person mentioned in point 2.
