Siskon Siivous Oy (0977912-9)
Ruosilantie 11
00390 Helsinki
Kalle Hiljanen kalle.hiljanen@siskonsiivous.fi
Contractual
Depending on the task, the legal basis of processing is either the data controller’s legitimate interest or agreement. The purpose of use of the data is the tracking of vehicles or mobile devices included in the register. The tracking is used to gain information on the current status and location of vehicles for logistics planners and terminal workers. This enables logistics planners to anticipate and react to vehicle scheduling and to maximise the utilisation rate of vehicles, as they can see whether specific vehicles are on schedule or whether delays, breakdowns or other anomalies have occurred. This also helps reduce unnecessary traffic and environmental pollution. Terminal workers will have access to information on when vehicles will be arriving, their number, schedules, and the amount of cargo to be loaded or unloaded. The location of terminals is also shown on the map. Users can use the service to find information on vehicles and terminals. The assigned personnel of the data controller have the right to process personal data from mobile device tracking based on their job description or position.
The legal basis for processing for the part of the data controller’s own personnel is the data controller’s legitimate interest (General Data Protection Regulation article 6 section 1 point f).
The data controller’s own personnel. The data is processed using the Vehicle Monitor map application. Other than this, the data are not regularly disclosed without a legal basis (Act on the Protection of Privacy in Working Life 759/2004). Data may be disclosed to the police in special situations involving reporting procedures for criminal offences when a crime has occurred or is suspected
The register contains the following information: - data subject’s first and last name - data subject’s employer / fleet operator - terminal area - personal mobile phone number - vehicle’s registration number - fleet operator number - GPS location data
The data in the mobile device register are received from the data subjects or their employers through the electronic subscription channel. Tracking data are received from the Vehicle Monitor map application through the mobile device’s tracking functionality.
The data in the register will be stored for 10 + 1 years after the termination of employment.
Data in the register are not regularly disclosed to third parties. Tracking is carried out using the Vehicle Monitor tracking application.
Data in the filing system will not be transferred outside the EU or the EEA.
Data related to the filing system are only kept in electronic format, and data are only processed electronically. Access to the data stored in the filing system is given only to such persons and in such scope that is required for the purposes of employee supervision, monitoring, or other tasks related to the maintenance of employee relations. The protection of all data in the filing system is carried out in accordance with the regulations and principles of the Data Protection Act, regulatory provisions, and good data processing practices.
Access to the data stored in the filing system is given only to such persons and in such scope that is required for the purposes of employee supervision, monitoring, payroll tasks or other tasks related to the maintenance of employee relations. The filing system is kept on a protected server which is located in Finland. The protection of all data in the filing system is carried out in accordance with the regulations and principles of the Data Protection Act, regulatory provisions, and good data processing practices
The data subject has the right to check what data has been stored about them in the filing system. A request for data access must be given in writing by contacting the data controller’s customer service or the register’s contact person either in Finnish or English. The request for access must be signed or sent from an email address that can be used to verify the data subject’s identity using a verification message. The data subject has the right to prohibit the processing of their data and its disclosure for the purposes of direct marketing, distance marketing or opinion polls by contacting the data controller’s customer service.
The data subject has the right to transfer their personal data from one system to another. Request of transfer can be sent to the contact person of the filing system.
Taking into account the purposes of processing, any data stored in the filing system that is inaccurate, unnecessary, incomplete, or outdated must be erased or rectified. A written request for rectification, signed by hand, should be sent to the company’s customer service or the personal data filing system’s administrator. The request should specify what information should be rectified and on what grounds. Rectification shall be carried out without delay. Notification of rectification will be sent to the party who provided the inaccurate data or to whom the data were disclosed. If a request for rectification is denied, the responsible person of the filing system will provide a written document stating the grounds for the denial of the request for rectification. The data subject concerned may then pass the matter along to the Data Protection Ombudsman.
If you consider that an infringement of the General Data Protection Regulation has occurred in the processing of your personal data, you have the right to lodge a complaint with a supervisory authority. The complaint can also be lodged in a member state where you are a permanent resident or where you are employed. Contact information for the Finnish national supervisory authority: Office of the Data Protection Ombudsman PL 800, Lintulahdenkuja 4, 00530 Helsinki tel. +358 29 566 6700 tietosuoja@om.fi www.tietosuoja.fi/en/
Right to restrict processing The data subject has the right to request that the processing of their personal data is restricted for example if data stored in the filing system is erroneous. Requests should be sent to the responsible person of the filing system. Right to object The data subject has the right to request for personal data pertaining to them, and the data subject has the right to request for the rectification or erasure of said data. Request can be sent to the contact person of the filing system. If you are acting as the contact person of a company or organisation, your data cannot be erased during this time. The data subject has the right to prohibit the disclosure of processing of personal data for the purposes of direct marketing or other marketing, the right to demand the anonymization of data where applicable, as well as the right to be completely forgotten.