Privacy Policy
Privacy Policy
Privacy Policy
1. Data Controller
Name: Envineer Oy
Business ID: 2850396-1
Address: Microkatu 1
Postal Code: 70210
City: KUOPIO
Phone Number: +358 50 3060 752
Email: info@envineer.fi
2. Person Responsible for Register Matters / Data Protection Officer
Company: Envineer Oy
Name: Niko Karjalainen
Address: Microkatu 1
Postal Code: 70210
City: KUOPIO
Phone Number: +358 50 3060 752
Email: niko.karjalainen@envineer.fi
3. Purpose of the Register
Marketing register, customer register, recruitment register, and partner register, covering stakeholders. The processing of personal data in these registers is carried out by the responsible specialist and a possible deputy.
4. Basis for Data Collection and Processing
The basis for processing personal data is the company’s legitimate interest and/or customer relationship and/or consent or contract preparation. Legitimate interest is based on managing customer and employee relationships arising from agreements.
The purpose of processing personal data is marketing our products and services, targeted advertising, sales, production, delivery, user management, and customer relationship management, communication with customers, and invoicing. Consent is obtained case by case, documented or voluntarily, and in some cases through contracts where the data subject is a party.
Personal data is also used for sending newsletters. Data is not used for automated decision-making or profiling.
5. Data Content of the Register
We process the following personal data in connection with the register:
- Name of the data subject (first names, surname), customer number (mandatory for service provision)
- Contact details (phone number, email address, postal address) (mandatory for service provision)
- Information provided voluntarily by job applicants (mandatory for service provision)
- Company-related information (phone number, email address, postal address, business ID, billing details, contact person details as described above) (mandatory for service provision)
- Customer and contract-related information, such as customer history, ongoing and potential future projects, customer satisfaction data if contact details have been provided
- Participant information for events organized by the data controller
- Possible prohibitions and consents
- Other information collected with the data subject’s consent
The controller’s website collects data on user activity and actions via cookies and similar technologies, as well as consents, prohibitions, and other information provided by the user.
6. Data Retention Period
Collected data is retained as long as necessary to maintain the customer relationship or improve customer service.
7. Regular Sources of Data
Data stored in the register is obtained from the customer/data subject/job applicant/the person themselves via web forms, email, phone, social media services, contracts, customer meetings, and other situations where the customer provides their information. Additionally, data may be obtained from publicly available sources such as websites, trade registers, and other public and private registers where the person has consented to data processing.
8. Regular Data Disclosures and Transfers Outside the EU or EEA
Data is not regularly transferred outside the EU or EEA by the controller. Envineer’s service providers may outsource personal data processing to their service or software providers located outside the EU and EEA, such as in the USA. In these cases, the service provider ensures adequate data security and processing through the EU-U.S. Privacy Shield arrangement or EU Commission-approved standard contractual clauses. Detailed information is available upon request. Requests must be submitted in writing to the data controller, who may require proof of identity.
9. Use of Cookies
We use cookies on our website. A cookie is a small text file sent to and stored on the user’s computer, enabling the website administrator to identify frequent visitors and compile aggregate data about visitors. This feedback helps us continuously improve our website content. Cookies do not harm users’ computers or files. We use them to provide information and services tailored to individual customer needs.
If a user does not want us to collect the above-mentioned information via cookies, most browsers allow disabling cookies through settings.
However, please note that cookies may be necessary for the proper functioning of some of our pages and services.
10. Register Protection
Data is transmitted over an SSL-secured connection. Electronic data is protected by a firewall, usernames, and passwords.
Access to the data is restricted to employees of the data controller who need the information for their duties.
11. Automated Decision-Making
No automated individual decisions (Article 22 of the EU GDPR) are made.
12. Rights of the Data Subject
The data subject has the right to check what information about them is stored in the personal data register. A written, signed request must be sent to the person responsible for register matters.
The right of access is free of charge once per year.
The data subject has the right to request correction or deletion of incorrect or outdated data or transfer of data from one system to another. They also have the right to restrict or object to the processing of their data under Articles 18 and 21 of the EU GDPR.
The data subject has the right to withdraw previously given consent for data processing or lodge a complaint with the supervisory authority regarding the processing of their personal data.
The data subject also has the right to prohibit the use of their data for direct marketing purposes.
25.2.2020,
Envineer Oy