Register and Data Protection Statement in accordance with the Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR)
- Register holder
Nakkila Works Oy
Business ID: 0135640-4
Nakkila Works Oy
PL 15, 29251 NAKKILA
Tel: (02) 531 6300
- Contact person in matters relating to the register
Jussi Kivioja
info@nakkilagroup.fi
- Register name
The marketing and analytics register of Nakkila Works Oy
- The purpose of handling personal data and legal basis
The purpose of the register is to take care of the customer relationship between the register holder and the customer, as well as marketing and communications. The management of the register and the handling of the data can be outsourced to the co-operative partner of the register holder, who has committed to complying with this register description.
The data is not used for automated decision making or profiling.
- The data content of the register
The register may contain the following information about the customer:
– Name
– Telephone number
– Address
– E-mail address
– The name and business ID of the organisation
– Contact log
The information is stored for the time being for as long as the management of the customer relationship requires it.
- Data sources in compliance with the regulations
The register is compiled from the register holder’s customer information system and the visitor tracking tool on the site, publicly available Internet sources and other public sources, both free and payable ones.
- Passing on of data in compliance with the regulations
The register holder will not pass on the data to outside parties except for the co-operative partner of the register holder mentioned in point 4, unless actions by the Finnish authorities require it to do so.
- Transferral of data outside the EU or EEA
As a rule, personal data is not transferred outside the European Union or European Economic Area.
- The principles of the protection of the register
Personal data is kept confidential. The data network and equipment of the register holder and its possible data technology partners, where the register is located, are protected with a firewall and other necessary technical measures.
- Cookies
Cookies may be used on the pages of the register holder to improve the user experience. A cookie is a text file which is saved on the user’s computer when they visit the web page. It contains information and it is used, amongst other things, to develop marketing and the site. Cookies do not establish the identity of the user. The user can delete cookies from use with the browser settings. The register holder does not guarantee that the site will work correctly after cookies have been deleted.
- Right of inspection and right to request correction of information
Every person in the register has the right to check the information stored in the register and to request the correction of any incorrect information or the completion of incomplete information. If a person wishes to check the data stored about him or her or request a correction, the request must be sent in writing to the data controller. If necessary, the controller may ask the applicant to prove his or her identity. The controller will respond to the customer within the timeframe set out in the EU Data Protection Regulation (generally within one month).
- Other rights related to the processing of personal data
A person in the register has the right to request the removal of his or her personal data from the register (“the right to be forgotten”). Data subjects also have other rights under the EU’s general data protection regulation, such as restrictions on the processing of personal data in certain situations. Requests must be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his or her identity. The controller will respond to the customer within the time frame set out in the EU Data Protection Regulation (generally within one month).