PRIVACY POLICY
Page updated 25.6.2018 This is a combined register description and information document in accordance with Section 10 and Section 24 of the Personal Data Act (523/1999) and Articles 12 and 13 of the EU General Data Protection Regulation (679/2016) for customers, potential customers and website users of Oulun PalaMetalli Oy.
1. DATA CONTROLLER
Name: Oulun PalaMetalli Oy
Phone number: 050 381 8006
Postal address: Lumijoentie 8,
90400 Oulu
PERSON RESPONSIBLE FOR REGISTER MATTERS
Name: Henry Korkiakoski
Phone number: 050 4494 993
Email: henry@palametalli.fi
2. DATA SUBJECTS
- Customers (contact persons)
- Potential customers
- Website users
- Online store customer data
3. PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
| Data subjects | Purpose of processing | Legal basis for processing |
| Customers (contact persons) | Enabling contacts required for customer service and maintaining the customer relationship. | Legitimate interest of the data controller |
| Potential customers and website users | Contact requests and newsletter subscriptions received through the website. | Legitimate interest of the data controller |
4. DATA STORED IN THE REGISTER
The following data may be stored in the register:
| Data | Customer | Potential customer / website user | Purpose of use |
| Name | x | x | Identification / communication |
| Phone number | x | x | Communication |
| Billing information | x | x | Managing the customer relationship |
| Email address | x | x | Communication |
5. DURATION OF PROCESSING
Personal data is generally processed for the duration of the customer agreement. We record data in the register as we receive it from the data subject themselves, and it is updated according to what the data subject notifies the data controller. Form data sent from the palametalli.fi website is automatically deleted one year after submission. We delete unnecessary personal data from our customer and marketing register once a year.
6. YOUR RIGHTS
You have the following rights, and requests to exercise them should be made to: henry@palametalli.fi
Right of access
You have the right to review the personal data we have stored about you. If you find errors or deficiencies in your data, you may ask us to correct or supplement the data.
Right to object
You have the right to object to the processing of your personal data at any time if you feel that we have processed your personal data unlawfully or that we do not have the right to process some of your personal data.
Direct marketing prohibition
You have the right to prohibit us from using your data for direct marketing at any time. We never sell or otherwise disclose your personal data to other parties for the purpose of directing direct marketing at you.
We use online advertising services from Facebook and Google, among others. However, these companies never receive your personal data, and such advertising does not constitute direct marketing but is based on cookies. Read more in section "11. Cookies".
Right to erasure
If you feel that the processing of some data concerning you is not necessary for our tasks, you have the right to ask us to delete the data in question. We will process your request, after which we will either delete your data or inform you of a justified reason why the data cannot be deleted. If you disagree with our decision, you have the right to file a complaint with the Data Protection Ombudsman (instructions for filing a complaint). You also have the right to require that we restrict the processing of disputed data until the matter is resolved.
Right to lodge a complaint
You have the right to lodge a complaint with the Data Protection Ombudsman if you feel that we violate applicable data protection legislation when processing your personal data (instructions for filing a complaint).
7. REGULAR SOURCES OF DATA
Data of potential customers is obtained with their consent from themselves during a website visit or other personal or digital interaction.
8. DATA DISCLOSURES
As a rule, data is not disclosed for marketing purposes outside of Pala Metalli Oy. Data may be selectively disclosed for a targeted marketing campaign by a third party commissioned by the data controller. Ownership of the data does not transfer from the data controller to the third party, and the third party has no right to use the data beyond the scope of the commission. We have ensured that all our service providers comply with data protection legislation. We regularly use the following service providers:
- Google Analytics (website visitors)
- Google Adwords (website marketing)
- Hosting service (website)
- Google G Suite (email)
- WooCommerce (Online store customer data)
- Paytrail (online store billing)
- Winboss (point of sale system)
- Talenom (billing)
9. DATA TRANSFERS OUTSIDE THE EU
Some of the above-mentioned service providers may back up data outside the EU/EEA area to the United States. Data is backed up so that your data would be safe even in situations where the primary servers malfunction.
Privacy Shield
We have ensured that our service providers have joined the so-called Privacy Shield program between the EU and the United States (https://www.privacyshield.gov/list), the purpose of which is to ensure the secure processing of European data in the United States.
10. PRINCIPLES OF REGISTER PROTECTION
The secure processing of your personal data is important to us. We use the following protective measures to ensure the security of your data.
- Access to the systems requires entering a username and password. The systems are also technically protected.
- Only certain, predefined employees of the data controller have access to and are authorized to use the data contained in the register stored in the systems.
- Access to the register is protected with user-specific usernames, passwords, and access rights.
- The registers are located in a cloud service and on a protected network drive.
- Manual data (various contracts) is stored in locked and guarded premises, accessible only to authorized employees of Pala Metalli Oy.
- Regular backups are taken of the register.
11. COOKIES
This website uses cookies. The website sends a cookie to your browser – a small text file that is stored on your computer's hard drive. Both temporary session ID cookies, which close when you close your Internet browser, and persistent cookies, which are stored on your computer's hard drive, are in use. Cookies allow us to identify your browser and use the information obtained in this way, for example, to count the browsers visiting our website and to analyze the use of our website, such as statistical monitoring. They also give us the opportunity to review and monitor the interests of our users and thus develop our website. All collected information is anonymous, and online activities cannot be linked to a specific person through it.
Most Internet browsers accept cookies automatically, but if you wish, you can modify your browser settings and disable cookies at any time. You can avoid cookies by modifying your browser software settings and prohibiting their use.
Advertising cookies help us select the most suitable and interesting advertisements for you. They also prevent the same advertisements from being shown. Some third-party providers may also use cookies or web beacons (1-pixel image files) so that you see advertisements of interest to you when visiting different websites. The information collected through cookies and web beacons does not tell us or third parties any personal information, such as your name or contact details. Third-party advertisers may also use technology to measure the effectiveness of advertisements. For this purpose, they may use a beacon (a one-pixel GIF file) placed on our website to collect anonymous data. After receiving anonymous information about a user's visits to these and other websites, advertisers can design advertisements for products and services that may interest the user.
This website uses a Google Adwords cookie that targets marketing using a user list in Google's advertising networks. The user cannot be identified based on the information associated with the cookie. If desired, the user can block Google Adwords marketing based on user lists at www.google.com/settings/ads.
More information about browser-based advertising targeting can be found at the Your Online Choices website