CUSTOMER DATABASE PRIVACY STATEMENT

Sava-Group

1 CONTROLLER

Sava-Group Oy consists of:

  • KOY Arktinen portti Business ID: 0850872-2
  • KOY Kalotinlinna Business ID: 1556327-9
  • Kalottikone Oy Business ID: 1076359-7
  • Sava-Group Oy Business ID: 0416710-7
  • Savaterra Oy Business ID: 1477650-4
  • Toptester Oy Business ID: 1703637-6
  • Tunturikiinteistöt Oy Business ID: 0605091-4
  • Walls Of Kilpis I Business ID: 2109345-3 | Walls Of Kilpis II Business ID: 2109485-3

Ahjotie 23, 96300 ROVANIEMI, tel. +358 400 322 344

2 CONTACT PERSON IN MATTERS RELATING TO THE PERSONAL DATA FILE

Hannu Wärme, e-mail: hannu.warme@savagroup.fi, tel: +358 400 986 945

3 DATA PROTECTION OFFICER

The data protection officer at Sava-Group is Hannu Wärme, e-mail:

tietosuojavastaava@savagroup.fi

4 NAME OF THE PERSONAL DATA FILE

Customer database privacy statement.

5 PURPOSE OF PERSONAL DATA PROCESSING

Personal data are collected for specified, explicit and legitimate purposes. The data are collected telemetrically and with the consent of the customers and stakeholders.

The personal data are gathered in accordance with this privacy statement and they will not be used, altered or transferred in ways not mentioned in this privacy statement.

6 CONTENT OF THE DATA FILE

The data file contains personal data on the customers of Sava-Group: first name, last name, email address, telephone number, language, personal id-code, and other data related to customer relations.

7 REGULAR SOURCES OF PERSONAL DATA

The personal data is collected from the customer and obtained from Sava-Group partners.

8 REGULAR DESTINATIONS OF DISCLOSED DATA

Data can be transferred to marketing register of Sava-Group. In individual cases, Sava-Group discloses data of a customer or stakeholder to the designated party if the data subject so requests or if a competent authority requires Sava-Group on legal grounds to disclose specified data in the database in our possession.

9 DATA TRANSFER TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

Sava-Group has decided not to transfer data in our possession automatically to third countries or international organizations.

10 RIGHT OF ACCESS

Data subjects have the right to inspect what data on them have been stored in the file. In addition, after a sufficiently detailed and accurate request, data subjects have the right of access to the data on them stored in the data files. The request for access must be delivered in written form and with the subject’s signature and attached with a copy of personal id-card to the Data Protection Officer.

11 RIGHT TO RECTIFICATION AND ERASURE

The controller must rectify inaccurate data in the personal data file indicated by the data subject. The controller is also obligated to independently verify that the data in the data file are accurate and up to date. Data subjects may also request that the controller erases data on them from the file. This procedure is managed by the data protection officer.

12 OTHER RIGHTS PERTAINING TO PERSONAL DATA PROCESSING

Data subjects have the right to request a restriction of processing data on them. Data subjects also have the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. In addition, data subjects have the right to object to processing of personal data, automated decision-making and profiling.

13 ERASURE OF DATA AND TIME OF STORAGE

Sava-Group removes data on a customer from the data file, when there no longer are operational grounds for their processing or if data subjects exercise their legal right to request from Sava-Group the erasure of data on them.

The data are erased by overwriting, when their processing or keeping is no longer justified. The data are not erased, however, if specific provisions have been issued by laws or regulations or if a competent authority has initiated a process that requires Sava-Group to keep the data or if a Finnish court of law has been requested to decide on safeguarding the data.

14 APPROVAL OF THE PRIVACY STATEMENT

This privacy statement has been inspected and its continuation has been approved on 30.10.2018.