The description includes:
- descriptions of customer and marketing registers.
Our company, “Repojotos”, follows procedures and processes to protect personal data under data protection legislation requirements. This Privacy Statement sets out the rationale for data collection and what the information collected will be used for.
We may change this Privacy Statement, so that website users and marketing registrars are always aware of how their information is treated. A valid Privacy Statement is always available on our website.
NON – PERSONAL INFORMATION
We may collect non-personally identifiable information from users in many ways. This information is necessary to monitor the use of the Site, and we use the information to improve the Site.
We collect and process certain personal information of the Site’s users and other information provided by the User through various contact request forms through our Site or by email.
Through the collection and processing of personal information, we may also send targeted marketing messages to the User. If the user does not accept the use of his data described above, he can prevent using his data by sending a written request to email@example.com or by changing or deleting his data via the links in connection with marketing messages.
For more information on personal data processing and the user’s rights, see the Marketing and Customer Register below.
DISCLOSURE OF INFORMATION
We may provide statistics to third parties, including usage and user information and non-personal information, but these statistics do not include identifying information.
The site is protected by technical and organizational means. Site information is stored on servers and systems protected by firewalls, passwords, and other technical means. Access to personal data shall be granted only if it is necessary for the processing of the data. All processors of personal data are bound by professional secrecy.
When you submit your personal information through the Site, you have given us and/or a third party the right to use the information as described on that Site. The approval granted on the Site applies only to the user information stored on the Site. If you have provided us with information other than through the Site, your use of such information will not be affected by your acceptance of the Site.
TRANSFER OF PERSONAL DATA OUTSIDE THE EU / EEA
We may transfer personal information outside the EU or the European Economic Area when our engagement partner is established outside those territories. In these cases, we will take appropriate safeguards to ensure data subjects’ rights and freedoms under applicable data protection law, such as the EU General Data Protection Regulation (679/2016).
For example, a service provider who carries out marketing or contact forms may transfer personal information to the United States in connection with the provision of a service. In this case, the appropriate safeguards for personal data have been implemented so that the service provider has committed itself to the so-called US-EU agreement—Privacy Shield arrangement.
Read about the Privacy Shield arrangement here https://www.privacyshield.gov/welcome.
Our site may contain links to other sites. We are not responsible for the privacy practices of other sites. We encourage you to review the privacy statements of the sites you visit.
MARKETING AND CUSTOMER REGISTERS
REGISTRAR AND REGISTERS
Repojotos, Kimolantie 174, 47710 Kouvola, Business ID FI23713361
Contact person for register matters
Data Protection Officer: Eero Niskala, firstname.lastname@example.org
INFORMATION STORED IN THE REGISTERS
The registers shall contain information that is either personal or relating to the data subject’s role in the undertaking, community, or public function and other information necessary for the purpose for which the register is used. These can include basic company information and the names and contact information of the company’s decision-makers and key personnel.
Regular sources of information
The marketing register stores information on contact forms or product orders received via Repovesikeskus’ public websites. Besides, personal information may also be obtained from other sources to the extent permitted by applicable law. Such are, e.g., marketing and trade fair events or public sources such as the Trade Register.
You are not required to provide us with your personal information, but we may not be able to provide you with our service in that case.
The access information of the Repovesikeskus staff is transmitted to the marketing register through the software’s user management.
Personal data shall be kept only for as long as necessary for the registers’ purposes.
Personal information is retained during the customer relationship. To the extent necessary, personal data may also be retained after the termination of the customer relationship to the extent permitted or required by applicable law. For example, we may retain personal information to the extent necessary to comply with your direct marketing ban.
Personal data will be deleted when their retention is no longer required by law or by either party to implement the rights or obligations.
PURPOSE OF THE REGISTERS AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
We only collect and process personal information necessary for the conduct of our business, customer relationship management, and appropriate commercial purposes.
We process your personal information for the following purposes:
sales and marketing
We may contact you, for example, to tell you about new products or to market and sell you other products or services. We may also process your personal information for marketing research and customer surveys. The processing of personal information is based on our legitimate interest in providing information as part of the service and marketing our other services. You have the right at any time to object to the processing of your personal data for direct marketing.
Service development, information security, and internal reporting
We also process personal information to ensure the website’s security and improve the quality of the website. We may also compile internal reports based on personal information for management for the proper management of our business. In such cases, the processing of personal data is based on our legitimate interest in ensuring the proper security of our products and websites and obtaining adequate and appropriate information for product development and the conduct of our business.
Other purposes for which you have consented
We will also process your personal data for other purposes if given your consent to such processing.
TRANSFERS AND TRANSFERS OF PERSONAL DATA
We may disclose personal information to Repovesikeskus contract partners whose products you have expressed interest in or whose products you have purchased through our service. With this procedure, we facilitate your dealings with our contract partner and us.
Personal data will not be disclosed to a third party for any purpose other than those mentioned above, except for a request for legal information from the authority.
USE OF PERSONAL DATA AND GENERAL PRINCIPLES OF PROTECTION
The access rights of the persons in the Repovesikeskus are managed through a role-based user management process, in which each is granted only the access rights that fall within his or her task and job description. The access rights of contract companies are limited to persons requesting or purchasing their own company’s services or products.
The information in the reservation system related to the customer register can also be updated by Repovesikeskus’ contractual partner for its own customers. In this case, Repovesikeskus is responsible for the contract partner’s operations and data security on its own.
Website Forms: Jotform Inc, covered by the Privacy Shield, see
Email Marketing and CRM: Zoho Corporation, covered by Privacy Shield, see
Analysis tools: Google Tag Manager and Google Analytics, see Data Security
Payments on the Site are made through a domestic verified and secure VismaPay payment system. No information other than the payer’s name, amount, and reference number is transmitted to us for storage.
RIGHTS OF THE DATA SUBJECT
According to current data protection legislation, marketing and customer registers contain personal data that forms a personal register. In this regard, registered persons have statutory and statutory rights to their data.
You have the right to verify your personal information. You can also request at any time that your personal information be corrected, updated, or deleted. However, please note that personal data that is necessary for the purposes specified in this Statement or that is required to be retained by law may not be deleted.
When we process your personal data based on consent, you have the right to withdraw your consent at any time. We will not then process personal data unless there is another legal basis for processing.
You can exercise your rights by sending a request to us at email@example.com, or you can change or delete your information from the marketing register whenever you receive an e-mail. Such messages always include links to change and delete actions.
We will take appropriate measures (including physical, digital, and administrative measures) to protect personal information from loss, destruction, misuse, and unauthorized access or disclosure. As a result, personal data is only accessible to people who need it to perform their duties.
You can ask about this Description or the processing of your personal data by contacting us by e-mail at firstname.lastname@example.org.