This is a register and privacy statement in accordance with Trenox Oy’s Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Created 4/10/2019.
1. THE REGISTER
Trenox Oy, Kuoppanummentie 2 A 13, 03100 Nummela, Finland
2. CONTACT OFFICER
Jussi Tuomola, firstname.lastname@example.org, 050 462 8055
3. NAME OF THE REGISTER
Trenox Customer Register
4. LEGAL BASIS AND PURPOSE OF THE PROCESSING OF PERSONAL DATA
The legal basis for the processing of personal data under the EU General Data Protection Regulation is
- individual consent (documented, voluntary, personalized, informed and unambiguous)
- the agreement to which the data subject is party
- the law (which)
Performing a public function (on what basis), or
- the legitimate interest of the controller (eg customer relationship, employment relationship, membership).
The purpose of the processing of personal data is to maintain customer relations and marketing.
The data is not used for automated decision making or profiling.
5. CONTENTS OF THE REGISTER
Information to be recorded in the register include: person’s name, position, company / organization, contact information (phone number, email address, address), website addresses, IP address of the internet connection, IDs / profiles on social media services, subscription service information and changes, billing information, other customer relationship and subscribed service information.
Please also indicate here the retention period, if possible. Also tell us if, for example, data is anonymised after a certain period of time.
6. REGULAR SOURCES OF INFORMATION
Information stored in the register can be obtained from the customer eg. messages sent via web forms, email, telephone, social media services, contracts, customer meetings and other situations where a customer discloses information.
7. REGULAR DISCLOSURES AND TRANSFERS OUTSIDE THE EU OR EEA
Information is not routinely disclosed to other parties. The information may be published to the extent agreed with the customer.
Data may also be transferred by the controller outside the EU or the EEA.
If you are disclosing personal information to different parties, please indicate here the potential recipients or groups of recipients.
8. PRINCIPLES FOR THE PROTECTION OF THE REGISTER
The records shall be handled with care and the data processed by the information systems shall be appropriately protected. When registry information is stored on Internet servers, the physical and digital security of their hardware is properly taken care of. The data controller shall ensure that the stored information, as well as server access and other information critical to the security of the personal data, is treated confidentially and only by the employees whose job description it is included in.
9. RIGHT OF AUDIT AND RIGHT TO CLAIM INFORMATION
Every person in the register has the right to verify their data stored in the register and to request the correction of any inaccurate or incomplete information. If a person wishes to check or rectify the information stored about him / her, the request must be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his identity. The controller will respond to the client within the time limit set by the EU Data Protection Regulation (as a rule within one month).
10. OTHER RIGHTS RELATING TO THE PROCESSING OF PERSONAL DATA
A person on the register has the right to request that personal data relating to him / her be removed from the register (“the right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation, such as restricting the processing of personal data in certain situations. Requests should be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his identity. The controller will respond to the client within the time limit set by the EU Data Protection Regulation (as a rule within one month).