Privacy Policy
1. Personal data controller
Edeten Oy
Adjutantinkatu 8 E 27
02650 Espoo
Finland
Contact information in matters related to personal data files:
Edeten Oy / Marja Kantonen
Adjutantinkatu 8 E 27, 02650 Espoo, Finland
+358 50 362 5202
marja.kantonen@edeten.fi
2. Data subjects
The data of customers and potential customers is included in the register.
3. Purpose of use of personal data
Grounds for keeping the register:
- Personal data is being processed based on an existing customer relationship
- Personal data is being processed based on consent (e.g. a list of newsletter subscribers)
Purpose for the register and the processing of personal data
Personal data is only being processed for predetermined purposes, which are:
- customer relationship management
- marketing
4. Personal data recorded in the register
The register contains the following information about existing and potential customers:
- name, business ID and contact information of customer
- name and contact information of the customer’s contact person
- invoicing information
- necessary information related to the customer relationship.
5. The data subject’s rights
The data subject has the following rights, and requests for their use should be sent to marja.kantonen@edeten.fi.
Right to access data
The data subject may check the personal data registered by Edeten Oy. The data subject has right for one cost of free request in a year.
Right to rectification
The data subject may request the rectification of inaccurate or incomplete personal data. The request for rectification should identify the inaccuracy and give the correct data.
Right to object
The data subject may object to the processing of personal data if the data subject feels that personal data has been processed unlawfully.
Right to forbid direct marketing
The data subject has the right to forbid the use of personal data for direct marketing.
Right to deletion
The data subject has the right to request the deletion of data if personal data processing is not necessary. Edeten Oy will handle the request for deletion and proceed to either delete the data or state a justified reason for not being able to delete the data.
It should be noted that the controller may have legal or other rights to not delete the requested data. The controller is obligated to preserve accounting materials for the duration (10 years) set out in the Accounting Act (Chapter 2, Section 10). For this reason, materials related to accounting cannot be deleted before that term has expired.
Withdrawing consent
If the processing of personal data is only based on the data subject’s consent and not for instance on a customer relationship or membership, the data subject may withdraw consent by requesting the deletion of data in the register.
The data subject may complain of the decision to the Data Protection Supervisor
The data subject has the right to demand Edeten Oy to restrict the processing of controversial data until the matter is solved.
Right to complain
The data subject has the right to complain to the Data Protection Supervisor if the data subject feels that Edeten Oy is violating the effective data protection regulation when processing personal data.
Contact information of the data protection supervisor: https://tietosuoja.fi/yhteystiedot
6. Regular information sources
Edeten Oy regularly obtains customer information from:
- from the customer as the customer relationship is born
- from the customer through and online form
- from a register maintained by authorities according to legal regulations (for example from the trade register maintained by Finnish Patent and Register Office)
- via Google Analytics tools related to the use of the web site.
7. Regular disclosure of data
Edeten Oy does not disclose information outside the company for marketing purposes without a specific consent of the customer.
Edeten Oy has made sure that all our service provided are complying with data protection legislation.
8. Duration of processing
- Personal data is usually processed for as long as the customer relationship exists, considering the restrictions based on the Accounting Act mentioned in the topic The data subject’s rights.
- The data collected for marketing purposes will be processed as long as the register exists or until the data subject requests to be deleted in the register.
9. Personal data processors
The personal data information is processed by the controller Edeten Oy / Marja Kantonen.
In addition, the service providers Edeten Oy is using, for example accountant, will use the data.
The personal data might also be processed by a third party in case the use of such service has been agreed on with the customer.
9. Protection of register
Register data is not maintained in a physical form. Electric information is protected by usernames and passwords, in addition to an anti-virus software.
10. Transferring data outside the EU
Personal data is not transferred outside Edeten Oy, unless required by the assignment and approved by the customer. Some of the external service or software providers might maintain data outside EU or the EEA.
11. Automatic decision-making and profiling
Edeten Oy is not using the data for automatic decision-making or profiling.