Privacy statement

Contact form register

1 Controller Oulun Konttivuokraus Oy
Poikkimaantie 4
90400 Oulu

2 Registry contact person and data protection officer
Jesse Mattson
+358 505 890 732

4 Registry name
Konttivuokraus Oy’s website contact form register.

5 Public nature of the register
The information in the contact form is not public. It is collected only for the internal operations of Oulun Konttivuokraus Oy.

6 Purpose of processing personal data

Personal data is collected for a specific, explicit and legitimate purpose. Personal information is collected for contact purposes, for example for the sale of our company’s products, services and the company’s marketing communications, as well as for processing customer feedback.

7 Information content of the register

The register contains the following information about the customer: name, company/community, email address and telephone number. In addition, we ask the customer to indicate the subject of the message and their subject of interest.

8 Regular sources of information

The register only collects information from the data subjects themselves via the website.

9 Regular disclosures

The information is not regularly disclosed to third parties, except if the person orders a product or service and their information is transferred to the customer register.

10 Data transfer to a third country or international organisation

Data will not be transferred to any third country or international organisation, except if the person orders the product or service and the person’s information is transferred to the customer register.

11 Registry security principles

Premises where personal data are processed are protected by appropriate structural protection and burglar alarm systems as well as through adequate supervision. Documents and recordings are kept in locked rooms to which outsiders have no access. Only designated persons have access to them.

12 Right of inspection

The data subject has the right to check what information about them is stored in the register. In addition, after a sufficiently precise and individualised request for such an inspection, the data subject has the right to be informed of the information concerning them that is contained in the records. The request for inspection must be signed and sent in writing to the following postal address: Oulun Konttivuokraus Oy, Poikkimaantie 4, 90400 Oulu.

13 Right to request rectification and erasure of data

The controller must correct any errors in the register concerning the information about the data subject when these have been pointed out by the data subject. The controller is also obligated to check the relevance and up-to-dateness of the information in the register through independent action. The data subject may also require the controller to remove information about themselves from the register. The data protection officer will lead the execution of the measure.

14 Other rights related to the processing of personal data

The data subject has the right to demand a restriction on the processing of their personal data. The data subject also has the right to obtain personal data concerning them which the data subject has provided to the controller in a structured, commonly used and machine-readable form, and has the right to transfer such data to another controller. In addition, the data subject has the right to object to data processing, automatic decision-making and profiling concerning themselves.

15 Data erasure and retention period

The data of the data subject will be erased from the register contact form when it is no longer necessary for the specified purpose, and no later than five years after the end of the need for contact with the data subject. Access rights to the registry become invalid when the controller considers that the user of the system registry no longer needs access to registry data or the right to use such data for a work-related reason.

Oulun Konttivuokraus Oy also erases customer data from the register if the person concerned demands the erasure of the data concerning them based on legislation. However, such data will not be erased if the law requires otherwise or if a competent authority has initiated a process that requires the retention of the data, or if another party has applied to a Finnish court for a protection decision for the data.

16 Approving the registry description

The registry description has been approved continuously, and was checked on 14 June 2018

Customer and marketing register

Under the General Data Protection Regulation, the data controller has a duty to clearly inform data subjects of issues concerning their data. This statement fulfils the obligation to inform data subjects

1. Controller
Oulun Konttivuokraus Oy
Y-tunnus: 1876507-9
Contact information:

Poikkimaantie 4
90400 Oulu,Suomi
Contact information concerning the register:

Jesse Mattson
Data protection officerOulun Konttivuokraus Oy
Poikkimaantie 4
90400 Oulu
+358 505890 732

2. Data subjects

  • Customers
  • Potential customers
  • Website users

3. Grounds for and purpose of keeping the register

Personal data processing is based on a legitimate interest based on the person’s customer relationship with the company. We do not collect data on persons under the age of 18 without the consent of their parent or guardian. We do not collect sensitive personal information. The information collected only contains information about the person and the organisation they represent and which is necessary for dealing with customer-related matters and marketing.

Purpose of the processing of personal data and the register
Personal data will only be processed for pre-specified purposes, which are as follows:

  • Customer relationship management
  • Telling about our services
  • Marketing

Website users and potential customers
Personal data processing is based on a legitimate interest. We do not collect sensitive information about individuals. The processing covers visitors to our website as well as offers or newsletter orders.

4. Personal data to be stored in the register
The following information can be stored in the register:

Contact information

  • Name
  • Address
  • Email address
  • Telephone number
  • Person’s company and company information
  • IP address

5. Rights of the data subject
The data subject has the following rights, the exercise of which must be requested in writing. The request must be signed and sent to: Oulun Konttivuokraus Oy, Poikkimaantie 4, 90400 Oulu, Finland

Right of inspection
The data subject can check the personal data we have stored related to them.

Right of rectification
The data subject may request the rectification of incorrect or incomplete information concerning the data subject. The controller will make the requested changes within 21 working days of the notification.

Right to object
The data subject may object to the processing of their personal data if they feel that the personal data has been processed unlawfully.

Prohibition of direct marketing
The data subject has the right to prohibit the use of their personal data for direct marketing. The data subject may prohibit use of their personal data by unsubscribing from the register via a link contained in all of our marketing emails.
In online advertising, we use the services of Google, Microsoft and Facebook. Use is based on the cookies described in a separate section of this privacy statement.

Right of erasure
The data subject has the right to request the erasure of their personal data if processing of it is not necessary. We will process the request for erasure, after which we will either erase the data or provide a valid reason why it cannot be erased.

It should be noted that the controller may have a statutory obligation or some right not to erase the requested information. The controller is obligated to retain accounting material in accordance with the period (10 years) specified in the Accounting Act (Chapter 2, Section 10). Therefore, material related to accounting cannot be erased before the period has expired.

Withdrawal of consent
If the processing of personal data concerning the data subject is only based on consent and not, for example, on the basis of a customer relationship or membership, the data subject may withdraw their consent.

The data subject may appeal against a decision to the data protection ombudsman
The data subject has the right to demand that we limit the processing of the disputed data until the matter can be resolved.

Right of appeal
The data subject has the right to lodge a complaint with the data protection ombudsman if they feel that we are violating the applicable data protection legislation when processing personal data.

Contact information of the data protection ombudsman:

5. Regular sources of data
Customer information is obtained on a regular basis during the customer relationship, when customers use our website or in connection with other personal or electronic interactions.

6. Regular disclosure of personal data
As a rule, personal data is not disclosed for marketing purposes outside Oulun Konttivuokraus Oy.

We provide information to designated partners for invoicing, accounting and marketing purposes. Companies are committed to complying with the requirements of the General Data Protection Regulation.

We have ensured that all of our service providers comply with the data protection laws. We regularly use the following service providers:

  • ActiveCampaign
  • MailChimp
  • RopoKapital
  • Microsoft, email
  • Google, email
  • Amazon Web Services

In order for us to deliver products to our customers, we must share certain information we collect about the data subject, for example, to logistics companies. The logistics company must be able to contact you to arrange delivery of a product. This means that in some cases you will need to give your phone number, name and delivery address to a third party.

7. Duration of processing

  • As a general rule, personal data is processed for as long as the customer relationship is valid
  • The data subject can unsubscribe from our marketing list via the link in all of our marketing emails

8. Processors of personal data
The customer register is handled by employees of Oulun Konttivuokraus Oy.

The controller and their employees process personal data. We may also partially outsource the processing of personal data to a third party when necessary. In such cases, we guarantee through contractual arrangements that the personal data will be processed in accordance with the applicable data protection legislation and otherwise in an appropriate manner.

9. Data transfer outside the European Union
Data is regularly transferred outside the European Union or the European Economic Area. When data is transferred outside the EU and the EEA, we ensure an adequate level of protection of personal data, for example by agreeing on issues related to the confidentiality and processing of personal data as required by law.

In all situations, we aim to use servers located in the EU as the data storage location. In addition, we strive to ensure that all our services are affiliated with the Privacy Shield programme. Further information:

10. Websites, cookies, analytics

The sites use tracking codes and cookies for remarketing and to track and improve marketing and advertising performance. The goal is to display better ads through targeting. By continuing to use the website, you consent to our use of cookies as described above.

Cookies and analytics
This site uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies, which are text files stored on the website visitor’s computer that make it possible to analyse visitors’ use of the site. The purpose of tracking with cookies is to better target marketing and create the right ads for each particular website visitor. In addition, tracking allows us to improve our site and statistics related to visitors.

More information about cookies:

The site uses Google Consent Mode v2 tracking. More information about Consent Mode:

Information obtained by Google about your use of this site is transmitted to and stored on Google’s servers, which may be located outside the EU. In the latter case, the servers are subject to the data protection laws of the region in question. To learn more about Google Analytics and Google’s privacy practices, go to:

The site uses Google AdWords, an analytics service provided by Google. In doing so, it places a cookie called a “conversion cookie” for interaction tracking (“conversion tracking”) on the site visitor’s hard drive. These cookies expire in 30 days and are not used for personal identification. If you visit certain pages on our website, we may, in collaboration with Google, detect that these statistics provide information on the total number of users who have clicked on an advertisement displayed by Google and have thus been redirected to that page.

You can prevent cookies from being stored by adjusting the settings in your internet browser. However, note that by doing so you may not be able to take full advantage of all the features of the site. You can also prevent the collection of information about your use of the site (including your device’s IP address) and the transmission and processing of that information by Google by downloading and installing the browser extension available at the following link: fi

Other advertising software

  • Facebook
  • LinkedIn
  • Hotjar

11. Approval of the registry statement

The registry description has been approved continuously, and was checked on 14 June 2018.