------
------
The personal data of ------’s customers and business partners is processed for business operations, communication, customer relationship management, and service delivery.
Personal data is processed on the basis of a contractual relationship.
The register may contain information related to services ordered by the customer, the delivery of those services, invoicing, and communication. Personal data processed may include:
Name
Email address
Phone number
Postal address
Billing information
Information is collected from customers via email, telephone, forms, meetings, and publicly available information from the Finnish Business Information System (YTJ).
Personal data will not be transferred outside the European Union (EU) or the European Economic Area (EEA), nor disclosed to international organisations.
Electronic data is stored on servers protected by password authentication. Information collected through website systems is accessible only through password-protected login.
Personal data may only be processed by persons who require access to the information for the performance of their work or business duties.
Providers of electronic services and systems (including work tracking systems, accounting systems, and tax-related systems) are responsible for ensuring appropriate data security and lawful data retention.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.
Accounting legislation also requires the company to maintain business records and retain accounting materials for the period required by applicable law.
A data subject may unsubscribe from newsletters at any time using the unsubscribe link included in the newsletter.
The data subject has the right to:
Access the personal data processed about them
Request correction of inaccurate personal data
Request erasure of personal data
Restrict the processing of personal data
Receive their personal data in a transferable format (data portability)
Lodge a complaint with the competent supervisory authority
Requests concerning personal data should be sent by email to ------ or by post to:
------
------