Under the General Data Protection Regulation, the data controller has a duty to clearly inform data subjects of issues concerning their data. This statement fulfils the obligation to inform data subjects1. Controller
Oulun Konttivuokraus Oy
Contact information concerning the register:
Data protection officerOulun Konttivuokraus Oy
+358 505890 732
2. Data subjects
- Potential customers
- Website users
3. Grounds for and purpose of keeping the register
Personal data processing is based on a legitimate interest based on the person’s customer relationship with the company. We do not collect data on persons under the age of 18 without the consent of their parent or guardian. We do not collect sensitive personal information. The information collected only contains information about the person and the organisation they represent and which is necessary for dealing with customer-related matters and marketing.
Purpose of the processing of personal data and the register
Personal data will only be processed for pre-specified purposes, which are as follows:
- Customer relationship management
- Telling about our services
Website users and potential customers
Personal data processing is based on a legitimate interest. We do not collect sensitive information about individuals. The processing covers visitors to our website as well as offers or newsletter orders.
4. Personal data to be stored in the register
The following information can be stored in the register:
- Email address
- Telephone number
- Person’s company and company information
- IP address
5. Rights of the data subject
The data subject has the following rights, the exercise of which must be requested in writing. The request must be signed and sent to: Oulun Konttivuokraus Oy, Poikkimaantie 4, 90400 Oulu, Finland
Right of inspection
The data subject can check the personal data we have stored related to them.
Right of rectification
The data subject may request the rectification of incorrect or incomplete information concerning the data subject. The controller will make the requested changes within 21 working days of the notification.
Right to object
The data subject may object to the processing of their personal data if they feel that the personal data has been processed unlawfully.
Prohibition of direct marketing
The data subject has the right to prohibit the use of their personal data for direct marketing. The data subject may prohibit use of their personal data by unsubscribing from the register via a link contained in all of our marketing emails.
In online advertising, we use the services of Google, Microsoft and Facebook. Use is based on the cookies described in a separate section of this privacy statement.
Right of erasure
The data subject has the right to request the erasure of their personal data if processing of it is not necessary. We will process the request for erasure, after which we will either erase the data or provide a valid reason why it cannot be erased.
It should be noted that the controller may have a statutory obligation or some right not to erase the requested information. The controller is obligated to retain accounting material in accordance with the period (10 years) specified in the Accounting Act (Chapter 2, Section 10). Therefore, material related to accounting cannot be erased before the period has expired.
Withdrawal of consent
If the processing of personal data concerning the data subject is only based on consent and not, for example, on the basis of a customer relationship or membership, the data subject may withdraw their consent.
The data subject may appeal against a decision to the data protection ombudsman
The data subject has the right to demand that we limit the processing of the disputed data until the matter can be resolved.
Right of appeal
The data subject has the right to lodge a complaint with the data protection ombudsman if they feel that we are violating the applicable data protection legislation when processing personal data.
Contact information of the data protection ombudsman: https://tietosuoja.fi/en/contact-information
5. Regular sources of data
Customer information is obtained on a regular basis during the customer relationship, when customers use our website or in connection with other personal or electronic interactions.
6. Regular disclosure of personal data
As a rule, personal data is not disclosed for marketing purposes outside Oulun Konttivuokraus Oy.
We provide information to designated partners for invoicing, accounting and marketing purposes. Companies are committed to complying with the requirements of the General Data Protection Regulation.
We have ensured that all of our service providers comply with the data protection laws. We regularly use the following service providers:
- Microsoft, email
- Google, email
- Amazon Web Services
In order for us to deliver products to our customers, we must share certain information we collect about the data subject, for example, to logistics companies. The logistics company must be able to contact you to arrange delivery of a product. This means that in some cases you will need to give your phone number, name and delivery address to a third party.
7. Duration of processing
- As a general rule, personal data is processed for as long as the customer relationship is valid
- The data subject can unsubscribe from our marketing list via the link in all of our marketing emails
8. Processors of personal data
The customer register is handled by employees of Oulun Konttivuokraus Oy.
The controller and their employees process personal data. We may also partially outsource the processing of personal data to a third party when necessary. In such cases, we guarantee through contractual arrangements that the personal data will be processed in accordance with the applicable data protection legislation and otherwise in an appropriate manner.
9. Data transfer outside the European Union
Data is regularly transferred outside the European Union or the European Economic Area. When data is transferred outside the EU and the EEA, we ensure an adequate level of protection of personal data, for example by agreeing on issues related to the confidentiality and processing of personal data as required by law.
In all situations, we aim to use servers located in the EU as the data storage location. In addition, we strive to ensure that all our services are affiliated with the Privacy Shield programme. Further information: https://www.privacyshield.gov/welcome
10. Websites, cookies, analytics
Cookies and analytics
More information about cookies: https://www.google.com/analytics/#?modal_active=none
Information obtained by Google about your use of this site is transmitted to and stored on Google’s servers, which may be located outside the EU. In the latter case, the servers are subject to the data protection laws of the region in question. To learn more about Google Analytics and Google’s privacy practices, go to: https://policies.google.com/privacy?hl=en_US
The site uses Google AdWords, an analytics service provided by Google. In doing so, it places a cookie called a “conversion cookie” for interaction tracking (“conversion tracking”) on the site visitor’s hard drive. These cookies expire in 30 days and are not used for personal identification. If you visit certain pages on our website, we may, in collaboration with Google, detect that these statistics provide information on the total number of users who have clicked on an advertisement displayed by Google and have thus been redirected to that page.
You can prevent cookies from being stored by adjusting the settings in your internet browser. However, note that by doing so you may not be able to take full advantage of all the features of the site. You can also prevent the collection of information about your use of the site (including your device’s IP address) and the transmission and processing of that information by Google by downloading and installing the browser extension available at the following link: tools.google.com/dlpage/gaoptout/eula.html?hl= fi
Other advertising software
11. Approval of the registry statement
The registry description has been approved continuously, and was checked on 14 June 2018.