1. Controller Information

Data Controller

Satakerta Rödl Oy
Kalevankatu 6, FI-00100 Helsinki, Finland
Business ID: 0676255-9

Contact Person Regarding the Register
Kati Jalojärvi
kati.jalojarvi@roedl.com
Tel. +358 (0)40 58 66 555

Name of the Register
Satakerta Rödl Oy Customer Register
(Rödl)

2. Purpose of Processing Personal Data and Use of the Personal Data Register

Personal data is processed for the following purposes:

  • Provision of our services and the maintenance, management, development, analysis, and statistical evaluation of service-related relationships, as well as for the provision and development of such services. 
  • Maintenance, management, development, analysis, and statistical evaluation of training, marketing, and communication activities, as well as for the provision and development of services related to these activities.

The data contained in the register may also be used for direct advertising, other forms of direct marketing, comparable addressed communications, and the targeting of online marketing.

3. Contents of the Personal Data Register

The register may contain personal data relating to the following categories of individuals:

(1) Customers

(2) Cooperation partners and affiliated stakeholder groups

(3) Persons included on communication and mailing lists

The register may contain the following information:

  • Basic information about the data subject, such as name, personal identity number, postal address, email addresses, telephone numbers, occupation, and any sensitive information required for the performance of an engagement;
  • Name, postal address, email addresses, telephone numbers, and occupation of a contact person;
  • Other information necessary for the performance of an engagement;
  • Employer company name and Business ID;
  • Information concerning direct marketing consents and prohibitions;
  • Information relating to invoicing and debt collection;
  • Information related to communications concerning customer service matters;
  • Payment information;
  • Credit information;
  • Profile and user account information if the data subject registers to use our services;
  • Technical and analytics data as described in Section 7 below.

Regular Sources of Information

Personal data is collected when registering for a service, when using a service, or otherwise directly from the data subject. Personal data may also be collected and updated from the Population Information System, the Trade Register, credit information registers, and other similar public and private registers.

Regular Disclosures of Personal Data

Personal data may be disclosed to third parties in the following cases:

  • For marketing and communications purposes, including by another Rödl office;
  • For the performance of an engagement, or part thereof, by another Rödl office or cooperation partner;
  • For analytics purposes, where applicable, as described in Section 7 below.

Transfers of Personal Data Outside the EU or EEA

Personal data may be transferred outside the European Union or the European Economic Area in the following situations:

  • Where required on a case-by-case basis for the performance of an engagement.

Retention Period of Personal Data

Personal data is retained only for as long as necessary for the purposes for which it is processed. Retention periods and deletion practices are defined, and outdated and unnecessary personal data is deleted. Retention obligations may also arise from applicable legislation.

4. Rights of the Data Subject

The data subject has the right to access the personal data stored in the register. Requests for access must be submitted to the contact person specified above. Such requests may also be made at the controller’s address stated above. The controller is obliged to verify the identity of the person making the request.

The data subject has the right to request the rectification of inaccurate personal data concerning them.

In certain circumstances, the data subject also has the right to have their personal data erased from the register and to request the transfer of such data to another controller.

The data subject has the right to object to the use of their personal data for direct advertising, distance selling, other forms of direct marketing, and opinion or market research.

Electronic direct marketing may be sent to the data subject provided that the data subject has given consent for such marketing. The data subject has the right to withdraw their consent at any time.

The data subject also has the right to withdraw consent for data processing or otherwise object to the processing of their personal data. Withdrawal of consent or objection to processing may affect the performance of an engagement.

Any disputes shall primarily be resolved through negotiations with the data subject. The data subject also has the right to lodge a complaint concerning the processing of personal data with the supervisory authority. 

Contact Details of the Supervisory Authority:

Office of the Data Protection Ombudsman
P.O. Box 800, FI-00531 Helsinki, Finland
tietosuoja@om.fi
Tel. +358 29 566 6700

5. Principles of Protecting the Personal Data Register

Personal data is processed in accordance with good information management practices and the diligence and security requirements set out in data protection legislation.

Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access and against accidental or unlawful destruction, alteration, disclosure, transfer, or other unlawful processing.

Access to personal data is restricted to persons whose duties require the processing of such information.

Digitally stored and processed data is maintained in databases protected by firewalls, passwords, and other technical measures. Physical paper records are stored in locked premises.

6. Collection of Personal Data from Visitors to Our Website

(1) Technical Information Collected When Visiting Our Website

If you use our website solely for informational purposes, meaning that you do not register or otherwise provide us with information, we collect only the data that your browser transmits to our server. When you visit our website, we collect the following information, which is technically necessary to display the website and ensure its stability and security (Article 6(1)(f) GDPR):

  • IP address;
  • Date and time of the request;
  • Time zone difference from Greenwich Mean Time (GMT);
  • Content of the request (specific page visited);
  • Access status / HTTP status code;
  • Volume of data transferred in each case;
  • Website from which the request originated;
  • Browser type;
  • Operating system and its interface;
  • Browser language and version.  

This information is retained for security purposes (for example, to investigate misuse or prevent fraud) for a maximum period of seven days and is then deleted. Information that must be retained as evidence will only be deleted once the matter to which the information relates has been finally resolved.

(2) Cookies

In addition to the information specified above, cookies are stored on your computer when you use our website. Cookies are small text files stored on your hard drive through your browser and they transmit certain information to the party setting the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. Their purpose is to make the use of the internet more user-friendly and effective.

(3) Use of Cookies:

a) Types of Cookies Used:

This website uses the following categories of cookies:

  • Transient cookies (see section b);
  • Persistent cookies (see section c).

b) Transient Cookies

Transient cookies are automatically deleted when you close your browser. These include session cookies in particular. Session cookies store a session identifier that allows different requests from your browser to be assigned to the same session. This enables us to recognize your computer when you return to our website. Session cookies are deleted when you close your browser..

c) Persistent Cookies

Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie concerned. You may delete cookies at any time through your browser’s security settings.

d) Browser Settings

You may configure your browser settings according to your preferences and, in particular, refuse the acceptance of third-party cookies or all cookies. Please note, however, that in such cases you may not be able to use all functions of this website.