English
Suomi
This is a statement regarding the processing of personal data in accordance with the EU General Data Protection Regulation (679/2016).
Controller
Moipack Oy
Business ID: [Insert Business ID]
Address: Orvaajankatu 9-11 A, 00880 Helsinki, Finland
Contact Information for Privacy Matters
Giuseppe Baruffa
For all questions related to the processing of personal data and in situations related to the exercise of one's rights, data subjects are encouraged to contact the aforementioned contact person.
Name of the Personal Data Register
Moipack Oy Customer Register
Basis and Purpose of Personal Data Processing
The legal basis for the processing of personal data is:
The data subject's consent to the processing of personal data
The contractual relationship between the data subject and the controller
Fulfillment of the controller's legal obligations
The legitimate interest of the controller, which is based on the customer relationship between the data subject and the controller
The purposes of processing personal data include, among other things, the provision and maintenance of services, the management and development of customer relationships, marketing and communication, compliance with legal obligations, the development of business and services, and the prevention of fraud and ensuring security.
Personal Data Processed
The controller only collects personal data from data subjects that are relevant and necessary for the purposes described in this privacy policy.
The following data is processed from data subjects:
Email address
Name
Company and other contact information provided by the data subject
Disclosure of Personal Data
Personal data is not disclosed to third parties unless there is a legal obligation to do so. Thus, data may exceptionally be disclosed to authorities, for example, as required by law.
Transfers of Personal Data to Third Countries
Personal data is not transferred outside the EU and the European Economic Area.
Data Retention Period
The controller processes personal data for the time necessary to fulfill the purposes of use. After this time, the controller deletes or anonymizes the data within a reasonable time in accordance with its deletion processes.
The controller may have an obligation to process some of the personal data included in the register for longer than stated above in order to comply with legislation or regulatory requirements.
The controller processes personal data for as long as it is legally obligated to do so.
Rights of the Data Subject
Right of Access to Personal Data
The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, the right to obtain a copy of the personal data.
Right to Rectification
The data subject has the right to request that inaccurate and incorrect personal data concerning him or her be corrected. The data subject also has the right to have incomplete personal data completed by providing the necessary additional information.
Right to Erasure ("Right to be Forgotten")
The data subject has the right to request the erasure of personal data concerning him or her if
a. the personal data are no longer necessary in relation to the purposes for which they were collected;
b. the data subject withdraws consent on which the processing is based, and there is no other legal ground for the processing; or
c. the personal data have been unlawfully processed.
Right to Restriction of Processing
The data subject has the right to restrict the processing of personal data concerning him or her if
a. the accuracy of the personal data is contested by the data subject;
b. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; or
c. the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.
Right to Object
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her.
The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Right to Withdraw Consent
The data subject has the right to withdraw his or her consent to the processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Data Portability
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
Right to Lodge a Complaint with a Supervisory Authority
The national supervisory authority for personal data matters is the Office of the Data Protection Ombudsman, operating in connection with the Ministry of Justice. You have the right to bring your matter to the attention of the supervisory authority if you consider that the processing of personal data concerning you infringes the applicable legislation.
Kaynaklar ve ilgili içerik