Privacy policy for Maustaja Oy’s online services’ person register
Date 14th August 2018
1. Data controller
Maustaja Oy (Business ID 2031955-3)
Tuotetie 3
92930 Pyhäntä
switch: +358 20 799 1399
2. Register issues’ contact person and contact details
Jari Partanen
jari.partanen@maustaja.fi
Tel. +358 20 799 1368
3. Name of the register
Maustaja Oy’s online services’ person register
4. Purpose and legal reason for processing personal data
The processing of data is based on Maustaja Oy’s legitimate interest and the purposes for processing data include the distribution of Maustaja Oy’s newsletter to parties that have subscribed to it, responding to questions presented to Maustaja as well as for retaining open job applications.
5. Data content of the register and group of data subjects
The register includes the following data: person’s name, email address, phone number
6. Regular data sources
The register consists of data that has been personally provided by the data subject in Maustaja’s online service.
7. Transferring data outside the EU or the European Economic Area
Maustaja Oy shall not disclose data of the register to any third parties.
Personal data can be transferred by the data controller to outside the EU or European Economic Area.
8. Protection principles and retention periods of the register
Only such parties who have the right to process such data as part of their work have the right to access a system containing data. The data is collected in databases, which are protected with firewalls, passwords and other technical methods.
Personal data is retained for as long as it is necessary for the purpose of processing personal data. If a person cancels his/her newsletter subscription, the personal data shall be removed from the register. Open job applications shall be stored in the email of the person responsible for recruitment for a period of six (6) months, after which they shall be removed.
9. Rights of the data subject
Right to review and right to demand rectification
The data subject has a legal right to review any information stored in the person register concerning him-/herself, as well as the right to demand for the rectification or deletion of any incorrect data. Any relevant requests are asked to be delivered in person or in writing to the contact person referred to in Section 2.
Other rights
In accordance with the General Data Protection Regulation, the data subject has the right to deny or request for the processing of his/her details to be limited, as well as appeal the processing of personal data to a supervisory authority.
