Register description for users of the vuokrakontti.fi website and the company's customers
According to the GDPR, the controller has the obligation to inform data subjects in a clear manner. This notice fulfils that obligation.
1. The controller
Suomen Vuokrakontti Oy
Business ID 0494123-8
Yrityspuistontontie 2
05200 RAJAMÄKI
Contact details for matters concerning the register
Suomen Vuokrakontti Oy
Yrityspuistontontie 2
05200 RAJAMÄKI
09 72588700
traffic@vuokrakontti.fi
2. Registered persons
Our register includes our customers, those who have filled in their details in connection with a request for a quote, those who have subscribed to our newsletter, our suppliers and our stakeholders.
3. Purpose of the use of personal data
Grounds for keeping the register:
- Personal data processed on the basis of the data subject’s customer relationship
- Processing of personal data on the basis of consent
- For business-to-business (B2B) marketing, personal data is processed on the basis of legitimate interest, which means that we do business with companies as before. (Article 6(1)(f) of the EU General Data Protection Regulation, “GDPR”).
Purpose of the processing of personal data and use of the register
Personal data will only be processed for predefined purposes, which are:
- Customer relationship management
- Information about our services
- To persons and/or companies who have expressed an interest
- For corporate customers, who are clearly our potential customers
4. Personal data stored in the register
The customer and marketing register contains the following information:
Contact
- Name
- Address
- phone number
- marketing communications licences
Customer information
- information on products/services purchased
- Information relevant to the delivery, such as a different delivery address from the contact details
- Other information that the customer may provide to us in connection with the order
- Documents related to orders are stored electronically in customer-specific project folders in accordance with the requirements of our quality system.
5. Rights of the data subject
The data subject has the following rights, the exercise of which should be requested at the following address:
Suomen Vuokrakontti Oy
Yrityspuistontontie 2
05200 RAJAMÄKI
09 72588700
traffic@vuokrakontti.fi
Right of access
The data subject can check the personal data we have stored.
Right to rectification
The data subject may request the rectification of inaccurate or incomplete data concerning him or her.
Right to object
The data subject may object to the processing of personal data if he or she feels that the personal data have been processed unlawfully.
Direct marketing ban
The data subject has the right to object to the use of the data for direct marketing.
Right of withdrawal
The data subject has the right to request the erasure of data if the processing is not necessary. We will process the request for erasure, after which we will either delete the data or provide a reasoned justification why the data cannot be deleted.
Please note that the controller may have a legal or other right not to delete the requested data. The controller is obliged to keep the accounting records for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting records cannot be deleted before the expiry of this period.
Withdrawal of consent
If the processing of personal data concerning the data subject is based solely on consent and not, for example, on customer relationship, the data subject may withdraw his or her consent.
The data subject can appeal the decision to the Data Protection Ombudsman
The data subject has the right to request that we restrict the processing of the disputed data until the matter is resolved.
Right of appeal
The data subject has the right to lodge a complaint with the Data Protection Ombudsman if he or she feels that we are in breach of the applicable data protection legislation when we process personal data.
Contact the Data Protection Ombudsman: https://www.tietosuoja.fi/fi/index/yhteystiedot.html
6. Regular sources of information
Customer data is obtained on a regular basis:
- From the customer himself at the start of the relationship
- From the customer via the online form
- Our marketing register may also use other data sources for the implementation of mailings to business customers.
7. Regular disclosures of data
As a rule, the data will not be disclosed for marketing purposes outside Suomen Vuokrakontti Oy.
All our subcontractors are committed to complying with the requirements of the GDPR. We share data with our subcontractors, for example to enable the transport of products and to carry out financial management tasks.
We regularly use the following service providers:
- Account service Rantalainen Oy
- Blue Cargo Oy
- SMS Testing Oy / Data Group Porvoo
- Flashnode Oy
8. Duration of processing
As a general rule, personal data are processed for as long as the customer relationship is in force and in accordance with the restrictions mentioned in the “right of erasure” section (Chapter 2, Section 10 of the Accounting Act). The data subject can unsubscribe from our marketing list by himself/herself via the link in each marketing e-mail we send.
9. Processors and data security
The customer register is processed by the employees of Suomen Vuokrakontti Oy.
The controller and its employees process personal data. We may also outsource part of the processing of personal data to a third party, in which case we will ensure through contractual arrangements that the personal data is processed in accordance with applicable data protection legislation and otherwise appropriately.
We are committed to ensuring the security of your data through good data management and careful processing of personal data. We use appropriate technical and physical measures to protect your information.
10. Transfer of data outside the EU
Personal data will not be transferred outside the EU or the European Economic Area, except for the purpose of sending the newsletter. The newsletter is sent using Mailchimp software. Mailchimp (Intuit Inc.) is committed to complying with the terms of the EU-US Data Privacy Framework and thus operates in compliance with the GDPR regulation. https://www.dataprivacyframework.gov/list
11. Cookies and analytics
Our website uses cookies, like almost all other websites. Cookies are small text files that are stored in your browser and enable you to use, for example, a quote calculator. The cookies we use are mainly so-called session cookies. They are automatically deleted when you leave the website. We use the Usercentrics Cookiebot cookie management tool to manage cookies, which allows you to manage cookies yourself when you visit our website.
We use Google Analytics for site analytics. Analytics data is sent to Google servers in the United States, but no actual personal data is sent in this context, and the information you provide on our site or the analytics data is not linked to each other. Google LLC is committed to complying with the terms of the EU-US Data Privacy Framework and therefore operates in accordance with the GDPR regulation. https://www.dataprivacyframework.gov/list
Information from cookies used for marketing targeting is transmitted to Google and LinkedIn. Google LLC is committed to complying with the terms of the EU-US Data Privacy Framework and therefore operates in accordance with the GDPR regulation https://www.dataprivacyframework.gov/list, and LinkedIn is committed to operating in accordance with the GDPR for data transfers outside the EU https://privacy.linkedin.com/gdpr.
12. Automated decision-making and profiling
We do not use the information for automated decision-making or profiling.
13. Amendments to the Privacy Statement
If we make changes to this Privacy Policy, the changes will be updated on our website with the date of the change. If we make material changes to our privacy policy, we will inform you in advance by sending a message to the email address on our records.