Verticom Oy (2344342-9)
Metsänneidonkuja 8
02130 Espoo
Teijo Raatikainen teijo.raatikainen@verticom.fi
Legitimate interest
Legal basis of processing data is legitimate interest. The purpose of use for the filing system is to promote business operations, create new customer relationships and to communicate with potential customers. Collected data are used to create and maintain new customer relationships as well as carry out other business-related tasks.
The legitimate interest of the controller in the processing of personal data collected and used is based on the freedom to conduct a business in European Union.
The data controller’s personnel and outsourcing partners when applicable.
Personal data filing system contains the following information: - First and last name of person - Community represented - Email address - Postal address - Phone number
Data are collected from customer’s business cards which can be received either from the data subjects or as recommendations made by third parties. Data will not be disclosed to external parties or to the company’s partners except for purposes related to credit applications, debt collection or invoicing as well as in situations required by law. A data subject’s personal data will be removed upon the data subject’s request unless such removal is prohibited by legislation, matters related to the management of the customer relationship, outstanding invoices, or debt collection.
Data is deleted during annual business card register updating for those registered with whom there will be no business contact.
Data stored in the filing system can only be accessed by the company and its employees. A data subject’s personal data will be removed upon the data subject’s request unless such removal is prohibited by legislation, matters related to the management of the customer relationship, outstanding invoices, or debt collection.
Personal data will not be transferred outside the European Union unless necessary for ensuring the technical implementation of the company’s or its partners’ activities.
After initial processing, manually processed business cards are stored in a locked and fireproof space. Only specific employees who have signed confidentiality agreements have the right to process manually stored customer data.
The data subject has the right to check what data has been stored about him or her in the filing system. A request for data access must be given in writing by contacting the company’s customer service or the filing system’s contact person either in Finnish or English. The request for data access must be signed. The data subject has the right to prohibit the processing of his or her data and its disclosure for the purposes of direct marketing, distance marketing or opinion polls by contacting the company’s customer service.
The data subject has the right to transfer his or her own data from one system to another. The transfer request can be addressed to the registry contact person.
Taking into account the purposes of processing, any data stored in the filing system that is inaccurate, unnecessary, incomplete, or outdated must be erased or rectified. A written request for rectification, signed by hand, should be sent to the company’s customer service or the personal data filing system’s administrator. The request should specify what information should be rectified and on what grounds. Rectification shall be carried out without delay. Notification of rectification will be sent to the party who provided the inaccurate data or to whom the data were disclosed. If a request for rectification is denied, the responsible person of the filing system will provide a written document stating the grounds for the denial of the request for rectification. The data subject concerned may then pass the matter along to the Data Protection Ombudsman.
If you consider that an infringement of the General Data Protection Regulation has occurred in the processing of your personal data, you have the right to lodge a complaint with a supervisory authority. The complaint can also be lodged in a member state where you are a permanent resident or where you are employed. Contact information for the Finnish national supervisory authority: Office of the Data Protection Ombudsman PL 800, Lintulahdenkuja 4, 00530 Helsinki tel. +358 29 566 6700 tietosuoja@om.fi www.tietosuoja.fi/en/
Right to restrict processing The data subject has the right to request that the processing of their personal data is restricted for example if data stored in the filing system is erroneous. Requests should be sent to the responsible person of the filing system. Right to object The data subject has the right to request for personal data pertaining to them, and the data subject has the right to request for the rectification or erasure of said data. Request can be sent to the contact person of the filing system. If you are acting as the contact person of a company or organisation, your data cannot be erased during this time. The data subject has the right to prohibit the disclosure of processing of personal data for the purposes of direct marketing or other marketing, the right to demand the anonymization of data where applicable, as well as the right to be completely forgotten.