Privacy Notices

Privacy notice: customer register

General Data Protection Regulation (2016/679) Article 13, 14 & 30(1)
Drafted on 25 May 2018

1. Controller

Name: Scason Oy

Address: Silakatu 3, FI‑20380 Turku

Other contact details: info (a) scason.fi

2. Data protection officer

Name: Risto Meriläinen

Address: Scason Oy, Silakatu 3, FI‑20380 Turku

Other contact details: risto.merilainen (a) scason.fi

3. Name of the register

Customer register

4. Purpose of the processing

Maintenance and administration of the customer relationship between the company and customer, the offering, planning and developing of the company’s products and services, implementation of contracts, fulfilling order processing and other similar functions, conducting statistical research and market surveys, and advertising and direct marketing with permission or when otherwise permitted.

5. Data content of the register

Name, Email address, Telephone number, Address, partly birthday (partnerships), Order data

6. Legal basis of the processing

Contract or data subject’s unambiguous consent

7. Data sources

Data subject’s own notice or data submitted by them as well as data entered by personnel

8. Possible recipients of personal data

Data is not disclosed.

9. Regular disclosures and transfer of data outside the EU/EEA

Data is disclosed to authorities only when so required by the legislation. Data is not disclosed or transferred outside the EU or EEA.

10. Storage period of personal data

The duration of the customership + 6 years (storage period as referred to in the Finnish Accounting Act)

11. Right of access and right to rectification

The data subject has the right to access the data regarding them that has been stored in the register. Contact requests relating to the right of access should be signed and sent in writing using the contact details in section 2. The request must also mention the time period for which the stored data is requested. If there are errors in the registered data, the data subject can present a request to rectify the error to the person mentioned in section 2. In addition, the data subject has the right to request the erasure or transfer of their data or object to the processing of data concerning them.

12. Other rights related to the processing of personal data

Every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to them infringes the General Data Protection Regulation. The data subject has the right to withdraw their consent regarding the processing of their personal data by contacting the person mentioned in section 2.

13. Automated decision-making

We do not use any automated decision-making or profiling in the processing of personal data.

14. Principles of protecting the register

The data in the register is protected with adequate technical and organisational measures from accidental and/or unlawful access, alteration, destruction or other processing, including its disclosure and transfer. We train and instruct our employees on matters related to data protection and data security.

 


Privacy notice: supplier and partner register

General Data Protection Regulation (2016/679) Article 13, 14 & 30(1)
Drafted on 25 May 2018

1. Controller

Name: Scason Oy

Address: Silakatu 3, FI‑20380 Turku

Other contact details: info (a) scason.fi

2. Data protection officer

Name: Risto Meriläinen

Address: Scason Oy, Silakatu 3, FI‑20380 Turku

Other contact details: risto.merilainen (a) scason.fi

3. Name of the register

Supplier and partner register

4. Purpose of the processing

Maintenance, administration and development of the supplier/collaboration relationship between the company and supplier, Administration of service and product deliveries / other output of the collaboration, Fulfilment of statutory obligations based on, for example, the Finnish Accounting Act

5. Data content of the register

Name, Email address, Telephone number, Address, Details on the contractual relationship

6. Legal basis of the processing

Contract or data subject’s unambiguous consent

7. Data sources

Data subject’s own notice or data submitted by them as well as data entered by personnel

8. Possible recipients of personal data

Data is not disclosed.

9. Regular disclosures and transfer of data outside the EU/EEA

Data is disclosed to authorities only when so required by the legislation. Data is not disclosed or transferred outside the EU or EEA.

10. Storage period of personal data

The duration of the relationship with the supplier/partner + 6 years (storage period as referred to in the Finnish Accounting Act)

11. Right of access and right to rectification

The data subject has the right to access the data regarding them that has been stored in the register. Contact requests relating to the right of access should be signed and sent in writing using the contact details in section 2. The request must also mention the time period for which the stored data is requested. If there are errors in the registered data, the data subject can present a request to rectify the error to the person mentioned in section 2. In addition, the data subject has the right to request the erasure or transfer of their data or object to the processing of data concerning them.

12. Other rights related to the processing of personal data

Every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to them infringes the General Data Protection Regulation. The data subject has the right to withdraw their consent regarding the processing of their personal data by contacting the person mentioned in section 2.

13. Automated decision-making

We do not use any automated decision-making or profiling in the processing of personal data.

14. Principles of protecting the register

The data in the register is protected with adequate technical and organisational measures from accidental and/or unlawful access, alteration, destruction or other processing, including its disclosure and transfer. We train and instruct our employees on matters related to data protection and data security.