Privacy Policy

According to the General Data Protection Regulation, the controller has an obligation to inform the data subject in a clear manner. This statement fulfills the information obligation.

1. Controller

Company name

Contact information:
 Address
 Postal code of the place of business

Contact information for the controller in matters concerning

Name of the company / person
address
postal code location
telephone number
email

If applicable, contact information for a potential data protection officer:

Data protection officer

Name of the company / person
address
postal code location
telephone number
email

2. Data subjects

The register includes the company's customers, potential customers and partners who have sent their contact information via the form.

3. Purpose of use of personal data

The basis for keeping the register is the contact information stored via the contact form. Individuals give their consent when sending a contact request.  

Purpose of processing personal data and use of the register

Personal data is processed only for predefined purposes, which are as follows:

• verification of messages

4. Personal data stored in the register

The customer register contains the following information:

Contact information

• name
• email
• telephone number

5. Rights of the data subject

The data subject has the following rights, requests for the exercise of which must be made to: contact details

Right of inspection

The data subject can check the personal data we have stored.

Right to rectification

The data subject can request that incorrect or incomplete information concerning him/her be corrected.

Right to object

The data subject can object to the processing of personal data if he/she feels that personal data has been processed unlawfully.

Direct marketing ban

The data subject has the right to prohibit the use of data for direct marketing.

Right to erasure

The data subject has the right to request the deletion of data if the processing of the data is not necessary. We will process the deletion request, after which we will either delete the data or provide a justified reason why the data cannot be deleted.

It should be noted that The controller may have a statutory or other right not to delete the requested information. The controller is obliged to retain accounting records for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting records cannot be deleted before the expiry of the specified period.

Withdrawal of consent

If the processing of personal data concerning the data subject is based solely on consent, and not e.g. customer or membership, the data subject may withdraw consent.

The data subject may appeal the decision to the Data Protection Ombudsman

The data subject has the right to demand that we restrict the processing of the disputed data until the matter is resolved.

Right to appeal

The data subject has the right to lodge a complaint with the Data Protection Ombudsman if he or she feels that we violate the applicable data protection legislation when processing personal data.

Contact details of the Data Protection Commissioner:  www.tietosuoja.fi/fi/index/yhteystiedot.html

6. Regular data sources

Customer data is regularly obtained:

• from the customer or potential customer themselves when completing this form contact information on the contact form.

7. Regular disclosure of information

Information is generally not disclosed for marketing purposes outside of Yritys Oy.

8. Duration of processing

Personal information is generally processed for XXX. Enter the time here. You are responsible for deleting the information after that time.

9. Processors of personal data

The controller and its employees process personal data. We may also partially outsource the processing of personal data to a third party, in which case we guarantee in the contractual arrangement that the personal data will be processed in accordance with the applicable data protection legislation and otherwise appropriately.

10. Transfer of data outside the EU

Personal data will not be transferred outside the EU. Outside the EU or the European Economic Area.

11. Automated decision-making and profiling

We do not use data for automated decision-making or profiling.