What is the purpose for collecting and processing my personal data?
We only collect, store and process personal data concerning you for predetermined purposes. The main purposes are:
- collecting name information
- collecting postal address and e-mail address information
- collecting telephone number information
- implementing our contractual obligations
- fulfilling legal requirements and demands
- communicating with clients and responding to contact requests
- developing our business operations
- targeting our services to you.
Which of my personal data are collected and from which sources?
We primarily collect your personal data directly from you when contacting you and later as you use our services. We also collect data on our website traffic using the Google Analytics service for the purpose of analysing and developing our website. For more information, see: https://marketingplatform.google.com/about/analytics/
We typically obtain the following data from you:
- first name
- last name
- e-mail address
- postal address
- telephone number
- IP address or some other identifier
- data collected by cookies
Data collected from public sources:
What are the grounds for the processing of personal data?
We ensure that we will always meet the legal conditions for processing your personal data. We may process your personal data based on a number of different criteria. One of the reasons for processing your personal data is implementing an agreement and fulfilling our legal obligations. We also process your personal data by virtue of our legitimate interest, which includes providing our services, and engaging in and developing our business operations. We may also process some personal data based on your consent.
Who will process my personal data and will my data be disclosed to third parties?
As a rule, our staff members will process your personal data as part of their work. We may also outsource certain part of the processing of personal data, such as the storing and processing of personal data in the data systems available to us in relation to the methods of payment, storage and delivery. In this case, we use means such as contracts to ensure that the confidentiality of your data will be preserved and that the processing of the data will also otherwise comply with relevant legislation. We may also disclose data based on a law or a request by the competent authority. We may also transfer your data if we are party to an acquisition or an asset deal.
Will my data be transferred outside the European Union?
In principle, your data will not be transferred outside the EU. Any disclosure of data outside the EU would be concerned with situations where the servers of the systems used by our company were located outside the EU. If this was the case, we would ensure that the processing, transfer and storing of your personal data would comply with relevant legal requirements and include sufficient safeguard mechanisms.
How long will my personal data be stored?
We will not store your personal data for longer than what is necessary for the purpose of using the data, implementation of an agreement, or compliance with valid legislation.
How will my data be stored and protected?
Your data are stored on the servers of Innon Oy and our service providers, which are protected in accordance with the common practices used by the industry. The personal data we collect and process are kept confidential and they will not be revealed to anyone other than those who need to process the data as part of their jobs or, confidentially and to a limited extent, to our clients based on a service contract. Access to your personal data is secured with user IDs, passwords and user rights.
Is providing data compulsory? What are the consequences of not providing access to data?
What are my rights and opportunities for exerting influence?
Withdrawal of consent
If our processing of your personal data is based on your consent, you may withdraw your consent at any time by letting us know about your decision, for example by contacting us e-mail at firstname.lastname@example.org.
Access to data
You have the right to obtain confirmation whether we are processing your personal data and to find out which of your personal data we are processing. You also have the right to obtain supplementary information on the grounds for processing your personal data.
Right to rectification
You have the right to obtain from us the rectification of inaccurate or obsolete or otherwise incomplete data concerning you.
Right to object the processing
If we are processing your personal data for reasons of public interest or our legitimate interest, you have the right to object to the processing of personal data concerning you unless there are compelling legitimate grounds for the processing which override your rights or for the exercise of legal claims. Please note that this would probably result in our inability to provide you with our services.
Right to restriction of processing
Under certain circumstances, you have the right to request that we restrict the processing of your personal data.
Right to data portability
If we have been processing your personal data based on your consent or for the performance of a contract, you have the right to receive the personal data you have provided to us in a commonly used format to transmit those data to another controller.
How can I exercise my rights?
You can exercise the aforementioned rights, for instance, by contacting us by e-mail at email@example.com. In this context, we will request you to tell us your name, address and phone number, and to attach a copy of your passport, driving licence or some other certificate of identity to your message to verify your identity. If you feel that the processing of your personal data is not lawful, you may also lodge a complaint with the competent supervisory authority.
Who may I contact in matters concerning data protection?
Innon Oy, Kidekatu 15, 70840 Kuopio, Finland, firstname.lastname@example.org, Data Protection Officer Arto Mattila.