GDPR-compliant Privacy Policy
Data controller and contact details
Suomen Sijoitusmetsät Oy (registered auxiliary business name Omalla Maalla LKV)
Business ID 2546378-1
Telitie 1A
80100 Joensuu
https://www.sijoitusmetsat.fi/
Contact person for matters concerning the register
Veronika Knigina
Assistant
045 610 4968
veronika.knigina@sijoitusmetsat.fi
Name of the register
Customer register of Suomen Sijoitusmetsät Oy.
General information
This Privacy Policy is updated regularly to reflect applicable legislation and changes in data processing requirements. The latest version of the Privacy Policy is available from our office or electronically on our website.
1. How and on what grounds personal data is used
Suomen Sijoitusmetsät Oy collects only the personal data necessary to provide and manage its services, handle invoicing and communicate with customers.
The processing of personal data is based on a relevant relationship between the parties, namely the management of the customer relationship, or on a service agreement between the parties. Personal data may also be processed to comply with statutory obligations.
2. What personal data is collected
In connection with a service agreement, we collect the personal data necessary to identify the customer, provide the services, handle invoicing and communicate with the customer.
The personal data collected from customers includes, among other things, the customer’s first and last name, personal identity code, address, telephone number, email address, information concerning customer interactions, feedback, the name of the company or organisation, and Business ID.
If a service agreement has not yet been concluded, the personal data we may collect from prospective customers for the purposes of customer communication includes, among other things, the customer’s first and last name, telephone number, email address and information concerning customer interactions.
We primarily obtain this personal data directly from the customer. Personal data may also be collected from reliable sources in accordance with applicable law.
3. How personal data is processed
As a general rule, the data contained in the register is processed by members of our office staff.
Personal data is not disclosed to third parties without consent unless disclosure is required by law, for example to public authorities. Suomen Sijoitusmetsät Oy’s accounting and auditing service providers, information system maintenance providers, and parties required to provide services ordered by the customer may have access to personal data when performing their services. Appropriate agreements have been concluded with these service providers to ensure the proper processing of personal data.
Data in the register is processed by the systems used to maintain the register. These systems are physically located either in Europe or the United States and are Privacy Shield registered or have otherwise incorporated the requirements of the GDPR into their services.
4. Protection of minors’ personal data
If the personal data of a minor is processed, the processing will be carried out with particular care and in accordance with the principles of the General Data Protection Regulation. Consent to the processing of personal data will be obtained as required by applicable law.
5. Information about the customer’s rights
The customer has the right to access the personal data concerning them that has been stored in the register. A request for access must be made in writing, signed and sent to the administrator of Suomen Sijoitusmetsät Oy’s customer register (see contact details above). The request may also be submitted in person at the address stated above, in which case the customer must provide proof of identity. Suomen Sijoitusmetsät Oy will respond to requests for access in writing within the time limit specified in the General Data Protection Regulation (GDPR).
If the customer’s personal data contains errors, the customer may ask Suomen Sijoitusmetsät Oy to correct the inaccurate information.
The customer has the right to restrict the processing of personal data to storage only. In certain circumstances, the customer has the right to request the deletion of their personal data from the register. The right to deletion is subject to limitations, and data cannot be deleted, for example, if Suomen Sijoitusmetsät Oy has a legal obligation to retain the data or if the processing of personal data is necessary for the establishment, exercise or defence of legal claims.
In certain circumstances, providing personal data and consenting to its processing may be a prerequisite for using the services of Suomen Sijoitusmetsät Oy and may also, in some respects, be a statutory requirement. Suomen Sijoitusmetsät Oy reserves the right not to provide services or to suspend the provision of services if the customer does not provide the information necessary for providing the services or requests the deletion of such information.
Personal data is not used for automated decision-making.
You have the right to lodge a complaint with a data protection supervisory authority.
6. Accuracy of personal data
We take all reasonable measures to ensure that personal data remains accurate and up to date, and we update the information in the register when changes occur. Accordingly, personal data that is inaccurate or incorrect in relation to the purposes for which it is processed will be erased or rectified.
7. Retention of personal data
We retain personal data for as long as necessary to fulfil the purposes for which the register is used or to comply with applicable law.
8. Data security
The information contained in Suomen Sijoitusmetsät Oy’s customer register is confidential. The register is stored electronically and appropriately protected against unauthorised access by firewalls and other technical security measures. Users with access to the register are subject to an obligation of confidentiality.
