Privacy policy
We are committed to complying with the EU General Data Protection Regulation (2016/679, “GDPR”).
The purpose of the Regulation is to strengthen individuals’ rights in relation to the control and processing of their personal data. Under the GDPR, the data controller has an obligation to inform data subjects in a clear manner. This privacy notice fulfills that obligation.
General
In order to serve you as well as possible, it is necessary for us to collect and process certain information about you. We value your privacy and are committed to protecting it. This privacy notice explains what personal data we collect, the principles according to which we process it, and what rights and options you have regarding your data. As the data controller, we process in particular the personal data of the contact persons and other personnel of our client companies. Personal data means any information relating to an identified or identifiable person, such as a name, email address, phone number, or job title.
We process your personal data in accordance with this privacy notice and applicable legislation, so we ask you to read this notice carefully. We may also update this privacy notice as our operations develop or legislation changes.
By using our services, our website, or by contacting us, you accept that we process your personal data in accordance with this privacy notice.
1. Name of the register
Vinrea Oy customer register
2. Controller of the register
Vinrea Oy, Business ID 2299551-2
As the data controller in relation to the processing of personal data described in this privacy notice is Vinrea Oy (hereinafter also “the Company” or “we”).
3. Processors of the register
Only those employees of the data controller who are entitled, by virtue of their work duties, to process customer data are authorized to use systems containing customer information. Each user has their own username and password.
4. Purpose of the register
We collect, store, and process your personal data only for predefined purposes. The main purposes are:
- to tailor our services to you;
- to fulfill our contractual obligations;
- to comply with legal obligations and claims;
- customer communication;
- responding to contact requests; and
- developing our business.
5. Personal data stored in the register
We collect personal data about you mainly from you directly in connection with contact requests or later in connection with the use of our services. In the case of new customers, we may also collect data regarding prospects from LinkedIn, the websites of potential client companies, or by using tools intended for new customer acquisition (e.g. Leadfeeder).
In addition, we may collect information from public sources and registers, such as the Finnish Business Information System (YTJ) service. We also collect visitor data from our website through Google Analytics in order to analyze and improve our website and make it more user-friendly.
A significant amount of personal data is collected through our website and the forms available on it. The customer data we use consists of customer information collected for the purpose of managing customer matters, which in all cases includes the customer’s name, email address, and phone number. During the customer relationship, additional information is also generated and collected, although this mainly relates to client companies. We also use customer relationship marketing tools into which data is collected. Different tools and software are used in the company for customer marketing, all of which have their own privacy practices. Use of customer marketing programs always requires the processor to have a username and password (access rights).
6. Processing of personal data
We ensure that we always have a legal basis required by law for processing your personal data. We may process your personal data on several different grounds. We process your data for the performance of a contract and for compliance with legal obligations. When using subcontractors and service providers, we ensure that the confidentiality of personal data is maintained and that the data is otherwise processed lawfully.
We also process your personal data on the basis of our legitimate interest, which is the provision of our services and the conduct and development of our business. Some personal data may also be processed on the basis of your consent.
7. Disclosure of data
As a rule, your personal data is processed by members of our company’s personnel in the course of their duties. We may also outsource certain personal data processing activities, such as the information systems used for storing and processing personal data. In such cases, we ensure, among other things by contract, that the confidentiality of your data is maintained and that the data is otherwise processed lawfully.
We may disclose data if required by law, a court, or a competent authority. We may also disclose your data if we are involved in a corporate or business transaction.
As a rule, your personal data will not be transferred outside the EU.
8. Retention of the register
We do not retain your personal data longer than is necessary for its intended purpose or as required by contract or law. However, retention periods for personal data may vary depending on the purpose of use and the situation.
9. Protection of the register
Your data is stored on the servers of our service provider, which are protected in accordance with generally accepted industry practices. The personal data we collect and process is kept confidential and is not disclosed to anyone other than those who need it in their work, or confidentially and in a limited manner to our customers under service agreements. Access to your personal data is protected by user-specific IDs, passwords, and access rights.
10. Destruction of the register
Documents containing customer data are destroyed appropriately after processing.
11. Rights of the data subject
The data subject has the right to inspect the information stored about them in the register free of charge. The data subject also has the right to request the deletion of their personal data from the register (see also the section “Retention of the register”). If there are errors in the data, the data subject may submit a written request to the controller to correct the error. The data subject may also restrict the use of their data. Requests for deletion, correction, rectification, and restriction must be made in writing and signed, and addressed to the controller.
Withdrawal of consent
If we process your data on the basis of your consent, you may withdraw your consent at any time by notifying us in writing by email.
Access to data
The data subject has the right to obtain confirmation from us as to whether we process personal data concerning them in the register and to know what personal data concerning them we process. In addition, you have the right to receive supplementary information on the grounds for the processing of your personal data.
Right to rectification
The data subject has the right to request that we correct inaccurate, outdated, or otherwise incomplete personal data concerning them.
Prohibition of direct marketing
The data subject has the right to prohibit the use of their data for direct marketing.
Right to object
The data subject may object to the processing of personal data if they feel that the personal data has been processed unlawfully.
Right to restriction of processing
In certain situations, you have the right to require that we restrict the processing of your personal data.
Right to data portability
If we have processed your data on the basis of your consent or for the performance of a contract, you have the right to receive the data you have provided to us electronically in a commonly used format so that it can be transferred to another service provider.
The data subject has the right to prohibit the controller from processing data concerning them for direct advertising, distance selling, and other direct marketing, as well as market and opinion research. In matters relating to such prohibitions, the data subject must contact the controller.
12. Additional information on data protection
The controller complies with the regulations and standards issued regarding the retention of personal data and continuously reviews and improves practices related to the matters mentioned above.
Mandatory nature of providing data and consequences of not providing it
Providing data is voluntary, especially for our potential customers. From potential customers, we usually request on our website a name, phone number, email address, and a short description of the need. Providing and processing personal data is mandatory to a certain extent, as we may need sufficient information to determine whether we are disqualified from accepting a new assignment.
Controller
Contact information:
Vinrea Oy
Kelatie 8 B
01450 Vantaa
Tel. +358 50 531 1982