VERTIA OY PRIVACY POLICY

Privacy Policy in accordance with data protection legislation (EU General Data Protection Regulation 2016/679)

SALES REGISTER

1. Data Controller

Vertia Oy (hereinafter ”Vertia”)

Business ID: 2406942-4

3 A Nuijamiestentie, 00400 Helsinki

Phone: 044-7500-600

 

2. The person responsible for registry matters

Topi Jokinen

c/o Vertia

Email: topi.jokinen@vertia.fi

 

3. Name of the registry

Vertia's sales register based on consent and legitimate interest.

 

4. Purpose of Use of Personal Data

Personal data is processed for the purposes of marketing, sales, and communications regarding our services. These activities may be carried out electronically and in a targeted manner. Data subjects are notified of all such processing. Personal data is processed in accordance with applicable laws.

 

5. Basis for Data Collection and Processing

Personal data concerning the data subject is collected and updated directly from the data subject and from registers maintained by public authorities, within the limits permitted by law (e.g., ytj.fi). Data is also collected using the Google Analytics analytics tool.

 

The processing of personal data is also based on the controller’s legitimate interest in marketing and communicating its services to data subjects (legitimate interest).

 

6. Data Content of the Registry

The following may be processed in the registry of all registered the following information:

• first and last name
• contact information (mailing address, phone number, email address)
• the start and end dates and manner of the customer relationship and/or business relationship
• processing permits
• information regarding the use of electronic services and content
• information related to sales promotion
• information related to customer relationship management and communication (e.g., purchase and cancellation details for paid products and services, delivery information, feedback, complaints, and records of customer service interactions, such as emails and text messages)  

 

7. Standard sources of information

Personal data concerning the data subject is collected and updated directly from the data subject and from registers maintained by public authorities, within the limits permitted by law (e.g., ytj.fi).

 

8. Retention period for personal data

Personal data will be retained for as long as the consent remains valid or for a maximum of one year following the interaction between the data subject and the data controller.

 

9. Disclosure and Transfer of Data

As a general rule, data may only be disclosed for purposes that support the purpose of the customer registry. Data subjects will be notified of any data transfers.

 

Information may also be disclosed in accordance with requests made by competent authorities or other entities, based on applicable law, as well as for historical or scientific research purposes, provided that the information has been anonymized.

 

Data will not be transferred outside the territory of the Member States of the European Union or the European Economic Area, unless it is necessary for the purposes of processing personal data or for the technical implementation of data processing, in which case the transfer of data will comply with the requirements of personal data legislation. Some of the external service or software providers used by the company may store data outside the EU or the European Economic Area.

 

10. Use of Cookies

We use cookies on our website. A cookie is a small text file sent to and stored on the user’s computer that allows the website operator to recognize frequent visitors, facilitate user login, and compile aggregate data about visitors. This feedback helps us continuously improve the content of our website. Cookies do not harm users’ computers or files. We use them to provide our customers with information and services tailored to their individual needs.

If a user visiting our website does not want us to collect the aforementioned information via cookies, most web browsers allow you to disable cookies. This is usually done through the browser settings.

 

11. Security of the Registry

The data contained in the electronically processed registry is protected by firewalls, passwords, and other technical measures generally accepted in the information security industry.

 

Access to the data is restricted to those employees of the data controller who need the information to perform their duties. Only specific employees of the data controller and companies acting on its behalf and for its account have access to the data contained in the register, based on access rights granted by the data controller.

 

12. Automated Decision-Making

No automated individual decisions (Article 22 of the EU General Data Protection Regulation) are made.

 

13. Rights of the Data Subject

The data subject has the right to inspect the personal data stored in the personal data file that pertains to him or her. However, if the controller has reasonable grounds to doubt the identity of the natural person making the request, the controller may request additional information necessary to verify the data subject’s identity. If the data subject submits the request electronically, the information shall be provided in a commonly used electronic format. Responses to requests for access shall be provided no later than one month after the request is submitted.

The data subject has the right to request the correction or deletion of inaccurate or outdated data, or the transfer of data from one system to another. The data subject also has the right to restrict or object to the processing of their data.

 

The data subject has the right to withdraw their prior consent to the processing of their data or to lodge a complaint with the supervisory authority regarding matters related to the processing of their personal data.

The data subject also has the right to object to the use of their personal data for direct marketing purposes.

 

Contact information for the Data Protection Ombudsman:

 

Visiting address: Ratapihantie 9, 6th floor, 00520 Helsinki

Mailing Address: P.O. Box 800, 00521 Helsinki

Switchboard: 029 56 66700

Email: tietosuoja(at)om.fi

 

14. Changes to the Privacy Policy

Vertia is constantly developing its business and therefore reserves the right to amend this Privacy Policy by providing notice on its services. Changes may also be based on changes in legislation. Vertia recommends that data subjects review the contents of the Privacy Policy on a regular basis.

15. The Lifecycle of Personal Data