Drafted January 28, 2022
Address: Pohjolantie 1, 84100 Ylivieska
Business ID 1650536-1
2. Contacts in matters concerning the register
Address: Pohjolantie 1, 84100 Ylivieska
3. Register name and data subjects
Camtronic Oy’s marketing, customer and supplier data personal register
We process the personal data of our customers, suppliers and potential customers and their representatives in the register..
4. How do we use your personal data?
Managing customer and supplier relations: Camtronic Oy generally processes personal data for purposes related to customer and supplier relationship management and payment monitoring, to respond to inquiries and feedback sent by customers and suppliers, for service and business development and statistical purposes, and for customer communication.
Marketing: sales and marketing of products and services and advertising.
We collect, store and process personal data only for predefined purposes.
5. What personal data do we collect?
Information such as the following can be stored concerning the data subject:
- Phone number
- E-mail address
- Consent information
- Publicly available classification information
- IP address information or other identifier
- Information collected through cookies
- What page you visit on our website
- How long you visit the website
- How you came to the website
- What links you click
- Information collected from social media channels
- Billing information
- Information on the customer relationship
- Other information collected with the data subject’s consent
6. From what sources do we collect personal data?
Personal data is collected from customers and suppliers either when registering as a customer or supplier or during the customer/supplier relationship, or based on other separate consent from the customers or suppliers (in connection with the processing of the tender).
Information on potential customers can be obtained, for example, in connection with website visitors’ contacts, sales, events or another form of contact.
We may also collect contact information from public sources.
7. On what basis do we process your data?
We make sure that we always have a legal basis for processing your personal data.
We process personal data stored in the marketing register either based on our legitimate interest (e.g. direct marketing to our customers and the development of our services) or based on your consent.
We process our customers’ data based on an agreement.
8. Will your information be transferred or disclosed?
As a rule, your personal data is processed by our company’s staff in their work.
In some cases, your data may be transferred confidentially to our partners or subcontractors who process personal data based on a written assignment agreement. These include, for example, data center and cloud services for data storage, suppliers of the IT systems we use, and external services purchased to support sales and marketing.
Our subcontractors and partners process personal data in the agreed manner, in accordance with our written instructions, and only for the agreed, lawful purposes.
9. Will your data be transferred outside the EU or EEA?
As a general rule, we do not transfer your personal data outside the EU or EEA. However, data can be transferred outside the EU or EEA within the limits permitted by the regulation.
We transfer personal data outside the EU and EEA countries only to entities for which we have ensured an adequate level of data protection through contracts or otherwise, as required by legislation. Data can be transferred, for example, in connection with system development.
10. How long will your personal data be kept?
We only keep your personal data for the period necessary to fulfill the purposes described in this statement. Unnecessary information is deleted regularly.
11. How is your data secured?
We respect the confidentiality of your personal data.
Personal data is protected from access by outsiders by means of firewalls, anti-virus software, personal user IDs and passwords. Access to personal data is only available to persons authorized by us, whose work tasks require the processing of personal data. We disclose personal data only confidentially and in a limited way based on agreements with our contractual partners, such as our subcontractors. Our contractual partners must commit to implementing adequate information security and to processing personal data in accordance with the law in all respects. Personal data processors are bound by an obligation of secrecy.
As our website uses a TLS-encrypted HTTPS connection, all personal data is protected in electronic form. In the browser, you can see this by the lock on the left side of the address bar. If the data is in a manual format, it is stored in a room locked to outsiders and it is destroyed securely.
12. What rights do you have?
12.1 Right to prohibit direct marketing
The data subject has the right at any time to object to the processing of their personal data for direct marketing purposes.
Every direct e-mail we send has a link from which you can block direct e-mails to your e-mail address in the future, if you wish. You can also send a ban on direct marketing by e-mail to firstname.lastname@example.org
12.2 Right to access data (right to inspect)
You have the right to know what information is stored about you in the personal register. You can ask us to send your data for your review, as described in this statement.
12.3 Right to demand correction or deletion of information (right to be forgotten)
We will delete, correct or supplement information that is incorrect, unnecessary, incomplete or outdated in terms of processing on our own initiative or at the request of the data subject.
12.4 Right to restriction of processing
The data subjects have the right to demand the restriction of the active processing of their personal data, for example, when they dispute the accuracy of their personal data and demand that their personal data be corrected or deleted. In this case, the personal data in question may only be stored, not processed in any other way. Limitation of processing is ensured by technical measures.
We will notify the data subject before the processing restriction is removed.
12.5 Right to object to the processing of personal data
You have the right to object to the processing of your personal data to the extent that there is no substantial reason for the processing that overrides your rights or the processing is not necessary to handle a legal claim.
12.6 Right to transfer data from one system to another
To the extent that the data subjects have themselves submitted information to the customer register, which is processed based on the consent or mandate given by the data subjects, the data subjects have the right to receive such information for themselves, as a rule, in machine-readable form, and the right to transfer this information to another controller.
12.7 Withdrawal of consent
If personal data is processed based on the data subjects’ consent, the data subjects have the right to withdraw their consent by notifying us. You can withdraw your consent as described in the “Requests regarding rights” section of this statement.
12.8 Right to file a complaint with the supervisory authority
The data subject has the right to file a complaint with a competent supervisory authority if the controller has not complied with applicable data protection regulations in its operations.
13. Where can I submit rights requests?
Inquiries related to the register can be submitted either personally on site by presenting an ID, or by sending an e-mail to
email@example.com. We will then contact you and verify your identity. You can pick up the information you requested at our office at a time agreed in advance. We will check your identity upon pickup.
We will respond to a request within one (1) month of you making the request, unless there are special reasons to extend the response time. We may also refuse to fulfill your request on the basis provided by applicable law.
Using the rights is basically free of charge.
14. Obligation to provide information
If you do not agree to the processing of your personal data within the scope of the purposes and rights of this privacy statement, we will probably not be able to serve you and fully fulfill the purpose of our operations. Therefore, if you do not want us to process your data in accordance with these principles, we ask that you do not provide us with any data.
15. Where can I find the latest, valid privacy statement?
We always update the latest privacy statement at this address.