Data protection

Data controller

------

Contact person for data protection matters

------

Purpose of processing personal data

The personal data of ------’s customers and business partners is processed for business operations, communication, customer relationship management, and service delivery.

Legal basis for processing

Personal data is processed on the basis of a contractual relationship.

Categories of personal data

The register may contain information related to services ordered by the customer, the delivery of those services, invoicing, and communication. Personal data processed may include:

  • Name

  • Email address

  • Phone number

  • Postal address

  • Billing information

Sources of information

Information is collected from customers via email, telephone, forms, meetings, and publicly available information from the Finnish Business Information System (YTJ).

Disclosure and transfer of data

Personal data will not be transferred outside the European Union (EU) or the European Economic Area (EEA), nor disclosed to international organisations.

Principles of data protection

Electronic data is stored on servers protected by password authentication. Information collected through website systems is accessible only through password-protected login.

Personal data may only be processed by persons who require access to the information for the performance of their work or business duties.

Providers of electronic services and systems (including work tracking systems, accounting systems, and tax-related systems) are responsible for ensuring appropriate data security and lawful data retention.

Retention of personal data

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.

Accounting legislation also requires the company to maintain business records and retain accounting materials for the period required by applicable law.

Rights of the data subject

A data subject may unsubscribe from newsletters at any time using the unsubscribe link included in the newsletter.

The data subject has the right to:

  • Access the personal data processed about them

  • Request correction of inaccurate personal data

  • Request erasure of personal data

  • Restrict the processing of personal data

  • Receive their personal data in a transferable format (data portability)

  • Lodge a complaint with the competent supervisory authority

Requests concerning personal data should be sent by email to ------ or by post to:

------
------