PURSO’S CLIENT AND MARKETING REGISTER
DATA PROTECTION NOTICE
The purpose of this notice is to provide privacy information required by the EU General Data Protection Regulation (hereinafter "GDPR") to both the data subject i.e. the data controller's client and to the supervisory authority.
2 DATA CONTROLLER AND CONTACT DETAILS
Purso Oy acts as the controller in accordance with this data protection notice.
The contact person of the data controller is Pekka Myllykangas.
Address: Alumiinitie 1, 37200 Siuro Email:Telephone: +358 (3) 3404 111
3 NAME OF THE REGISTER
The name of the register is Purso' client and marketing register.
The register covers Purso' clients, prospective clients, and other parties, who receive marketing material.
4 PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
The following table provides a summary of the purposes and the applicable legal basis for the use of personal data. A detailed description of the contents of the stored categories of personal data is available in section 5.
5 CATEGORIES OF PERSONAL DATA
There are different categories of personal data
Name and contact details (email, telephone number, addresses) of the natural person (data subject), age, title, employment and other connections in business life.
Client identification information
The client identification information required by legislation, such as the necessary information to identify the client and to determine the client's financial status.
The information regarding the contractual relation between the party and Purso and the information regarding the communication between the parties as well as the information enabling the automatic archiving of the communication.
6 RECIPIENTS AND GROUPS OF RECIPIENTS OF PERSONAL DATA
Personal data may be disclosed, inter alia, to authorities in statutory situations.
7 TRANSFERING PERSONAL DATA
Personal data processed by subcontractors is not transferred outside of the EU or the EEA. Personal data may be transferred to subcontractors for the purposes of e.g. updating contact information.
8 DATA RETENTION
The necessity of retaining client's and prospective client's personal data for sales and marketing purposes, as well as the data's correctness, is reviewed annually. Unnecessary and outdated data will be erased in accordance with the reviewing of the data's correctness, and also at other times when deemed necessary.
9 SOURCES OF PERSONAL DATA AND UPDATING
Personal data is collected from the data subject itself and also when the data subject uses the services of the data controller.
Based on its own clearance made by Purso, individuals may be added to the register, when the individual belongs to a group of people to which marketing actions will be allocated.
Personal data may also be collected and updated based on emails sent by the data subject to the personnel of Purso. Personal data may also be collected and updated from third party public registers or other partners, service providers and networks providing contact information for user groups.
10 RIGHTS OF THE DATA SUBJECT
The data subject has the right to receive confirmation from the data controller as to whether or not personal data concerning the data subject are being processed, or whether personal data has been processed. The data subject is entitled to receive a copy of the processed personal data and the personal data undergoing processing.
Whether the data subject makes the request by electronic means and he or she has not requested it by any other means, the information shall be provided by electronic means.
The data subject has also the right to obtain from the controller the rectification or erasure of personal data concerning him or her and the data subject has the right to prohibit the processing of personal data for direct marketing purposes.
In certain cases, the data subject has also the right to request from the controller restriction of processing of personal data or otherwise object to processing. Furthermore, the data subject may require the transmission of the personal data, which he or she has provided to the controller in a machine-readable format based on the GDPR.
All requests mentioned here shall be provided to the above-mentioned contact person of the controller.
Whether the data subject finds the processing of his or her personal data unlawful, he or she has the right to lodge a complaint with a supervisory authority.
11 RIGHT TO WITHDRAW CONSENT
Where processing of personal data of the data subject is based on consent, the data subject shall have the right to withdraw his or her consent. However, the withdrawal of consent may affect the usability and functionality of the service in question.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
12 THE PROTECTION OF THE REGISTER
The location and protection of the equipment for storing documents has been carefully maintained and the documents are stored in a secured space. The access control at the premises has been appropriately arranged. The right to access to the documentation is within the personnel of Purso, who have the obligation of confidentiality.