Under data protection legislation, the data controller is obliged to provide clear information to data subjects. This privacy policy fulfils that obligation.
Savopak Oy
Contact details:
Käsityökatu 41
78210 Varkaus
Finland
Contact details for matters related to the register:
Savopak Oy / Jussi Saarinen
Kuusitie 5
50170 Mikkeli
Finland
+358 40 558 9975
jussi.saarinen@savopak.fi
Contact details of the Data Protection Officer, where applicable:
Data Protection Officer
Savopak Oy / Jussi Saarinen
Kuusitie 5
50170 Mikkeli
Finland
+358 40 558 9975
jussi.saarinen@savopak.fi
Individuals who contact us via the website forms. In addition, individuals who submit their contact details through the company’s reporting channel in connection with a report.
Legal basis for maintaining the register:
Personal data is processed on the basis of consent. The individual gives consent by completing an online form.
Purpose of processing and use of the register:
Personal data is processed only for predefined purposes, which include:
managing customer relationships
providing information about our services and products
responding to job-related inquiries
responding to other business-related questions
processing reports submitted through the reporting channel (if the reporter so wishes)
Register (website contact form) includes the following information:
Contact details
name / company
email address
phone number
Message content
Register (reporting channel) includes the following information:
Background information
name (not mandatory)
email address (not mandatory)
phone number (not mandatory)
the reporter’s position in relation to the organization
the subject of the report
whether the same matter has been reported previously
Report
description of the case
possible additional information
attachments
The data subject has the following rights. Requests regarding these rights should be sent to:
jussi.saarinen@or-group.fi
Right of access
The data subject has the right to check the personal data stored about them.
Right to rectification
The data subject may request the correction of incorrect or incomplete personal data.
Right to object
The data subject may object to the processing of personal data if they believe the data has been processed unlawfully.
Right to prohibit direct marketing
The data subject has the right to prohibit the use of their data for direct marketing purposes.
Right to erasure
The data subject has the right to request the deletion of their personal data if the processing is no longer necessary. We will process the deletion request and either delete the data or provide a justified reason why the data cannot be deleted.
It should be noted that the data controller may have a legal or other right not to delete the requested data. The data controller is obliged to retain accounting material for the period specified in the Accounting Act (Chapter 2, Section 10), which is ten (10) years. For this reason, accounting-related material cannot be deleted before the retention period expires.
Withdrawal of consent
If the processing of personal data is based solely on consent and not, for example, on a customer relationship or membership, the data subject may withdraw their consent.
Right to lodge a complaint
The data subject has the right to request that we restrict the processing of disputed data until the matter has been resolved.
The data subject also has the right to lodge a complaint with the Data Protection Ombudsman if they believe that we are violating applicable data protection legislation.
Contact details of the Data Protection Ombudsman:
www.tietosuoja.fi/fi/index/yhteystiedot.html
Personal data is obtained regularly:
from the individual themselves via the website form
from the individual themselves via the reporting form
Personal data is generally not disclosed outside Savopak Oy for marketing purposes.
Personal data is generally processed for as long as the customer relationship is valid.
Other inquiries received via the website form are generally stored for a maximum of one year.
Personal data received via the reporting channel is generally stored for two years.
Personal data is processed by the data controller and its employees. We may also partially outsource the processing of personal data to third parties, in which case we ensure through contractual arrangements that personal data is processed in accordance with applicable data protection legislation and otherwise appropriately.
Personal data is not transferred outside the European Union or the European Economic Area.
We do not use personal data for automated decision-making or profiling.
