Privacy Statement

Drafted on January 28, 2022

1. Data Controller

Kallioinen Yhtiöt Oy
Business ID: 2283394-3

2. Contact regarding registry matters

Isto Nuorkivi
CEO
0400 250 120
[email protected]

3. Registry Name and Registered Persons

Kallioinen Yhtiöt Oy’s Customer and Marketing Registry

We process the personal data of our customers, potential customers, and their representatives in the registry.

4. How do we use your personal data?

The processing of personal data contained in the customer registry is for the purpose of managing customer relationships and tasks related to Kallioinen Yhtiöt Oy’s business, offering products and services, sales and marketing of products and services, and advertising. We collect, store, and process personal data only for predefined purposes.

5. What personal data do we collect?

The following types of information about the data subject may be recorded:

  • Name
  • Company
  • Phone number
  • Email address
  • Address
  • Title
  • Consent information
  • Generally available classification information
  • IP address information or other identifier
  • Information collected through cookies
  • Pages visited
  • Duration of stay on the site
  • How you arrived at the site
  • Links clicked
  • Information collected from social media channels
  • Billing information
  • Customer-related information
  • Other information collected with the consent of the data subject

6. From where do we collect your personal data?

We primarily collect personal data about you directly from you in connection with inquiries or later in connection with the use of our services. We may also collect contact information from public sources.

Customers’ information is obtained from customers, e.g., in connection with requests for quotations, orders, agreements, and other contacts.

Information about potential customers is obtained e.g., in connection with website visits, sales, events, or other contacts. Only the information of potential customers who have given marketing or contact permission is recorded from this information.

7. On what basis do we process your information?

We ensure that we always have a legal basis for processing your personal data.

Personal data recorded in the marketing register is processed either on the basis of our legitimate interest (e.g., direct marketing to our customers and development of our services) or on the basis of your consent.

We process information about our customers based on a contract.

8. Are your data transferred or disclosed?

Generally, your personal data is processed by personnel in our company in their work.

Your information may be disclosed in some cases to our trusted partners or subcontractors who process personal data under a written assignment agreement. These include, for example, data storage and cloud services, suppliers of IT systems we use, and external services purchased to support sales and marketing.

Our subcontractors and partners process personal data as agreed, according to our written instructions, and only to promote agreed, lawful purposes.

9. Are your data transferred outside the EU or EEA?

Generally, we do not transfer your personal data outside the EU or EEA. However, data may be transferred outside the EU or EEA within the limits permitted by the regulation.

We only transfer personal data outside the EU and the EEA to entities for which we have ensured an adequate level of data protection through agreements or in other ways required by law. Data may be transferred, for example, in connection with system development work.

10. How long do we retain your personal data?

We only retain your personal data for as long as necessary to fulfill the purposes described in this notice. Unnecessary information is routinely deleted.

11. How do we secure your data?

We respect the confidentiality of your personal data.

Personal data is protected against external access by firewalls, antivirus programs, personal usernames, and passwords. Access to personal data is only granted to authorized persons whose duties require the processing of personal data. We disclose personal data only confidentially and to a limited extent based on contracts to our contractual partners, such as subcontractors. Our contractual partners must commit to implementing sufficient data security and lawful processing of personal data in all respects. Processors of personal data are bound by confidentiality.

Our website uses TLS-encrypted HTTPS connection, ensuring that all personal data is securely transmitted in electronic form. You can see this by the padlock icon on the left side of the address bar. If data is in manual form, it is stored in locked premises inaccessible to outsiders and destroyed securely.

12. What rights do you have?

12.1. Right to object to direct marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time.

12.2. Right to access data (right of access)

You have the right to know what information about you is stored in the personal data register. You can request access to your information as described in this policy.

12.3. Right to request correction or deletion of information (right to be forgotten)

We will delete, correct, or supplement personal data that is incorrect, unnecessary, incomplete, or outdated on our own initiative or at the request of the data subject.

12.4. Right to restrict processing

You have the right to request the active restriction of the processing of your personal data, for example, when you dispute the accuracy of your personal data and request correction or deletion of your personal data. In such cases, the data may only be stored, not processed otherwise. The restriction of processing is ensured by technical means.

12.5. Right to object to the processing of personal data

You have the right to object to the processing of your personal data to the extent that there is no significant reason for the processing that would override your rights or the processing is not necessary for the handling of a legal claim.

12.6. Right to data portability

To the extent that the data subject has provided data to the customer register himself, which is processed based on the data subject’s consent or assignment, the data subject has the right to receive such data for himself in machine-readable form and the right to transfer this data to another data controller.

12.7. Withdrawal of consent

If personal data is processed based on the data subject’s consent, the data subject has the right to withdraw his or her consent by notifying us. You can withdraw your consent as described in this policy.

12.8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the competent supervisory authority if the data controller has not complied with the applicable data protection regulations in its operations.

13. Where can I submit requests regarding my rights?

Inquiries and requests related to the register can be submitted either in person by presenting an identity card or by sending an email to [email protected].

We may then contact you by phone if necessary to ensure your identity.

You can pick up the requested information from our office at a mutually agreed time. We will verify your identity when you pick up the information.

We respond to requests within one (1) month of the request, unless there are specific reasons to extend the response time. We may also refuse to fulfill your request on the basis provided for in the applicable law.

The exercise of rights is generally free of charge.

14. Is the provision of information mandatory?

If you do not accept the processing of your personal data for the purposes and rights described in this privacy policy, we will likely be unable to serve you and fully fulfill the purpose of our operations. Therefore, if you do not want us to process your information according to these principles, we ask that you do not provide us with any information.

15. Where can I find the latest, valid privacy policy?

We update the latest privacy policy to this address.

16. How do we use cookies?

This site uses cookies. Cookies are small text files that are automatically stored on a computer/device when a visitor visits different websites. We use cookies to make our services as user-friendly as possible. If you do not want the web service to receive data via cookies, only accept the most essential cookies.

Privacy Policy

Our web service uses cookies to make our services as user-friendly and high-quality as possible, and to target our marketing. The cookies we use are related to, among others, Google Analytics, the video playback service Vimeo, and the social media channels we use, such as LinkedIn and Meta (Facebook) company services. These software programs record, among other things, information about the pages you visit, how long you stay on the site, how you arrived at the site, and what links you click on. We may also use cookies for the development of our services and website, analyzing website usage, and targeting and optimizing marketing. By tracking website traffic, we develop our website to be even better and provide users with a better browsing experience.

Your consent applies to the following domains: kallioinenyhtiot.com