AGRITOUKOLA MACHINERY OY CUSTOMER REGISTER PRIVACY POLICY

1 CONTROLLER

The controller is Agritoukola Machinery Oy, Pakkalantie 281, 36430 Kangasala, Finland

2 CONTACT PERSON FOR MATTERS CONCERNING THE REGISTER

Agritoukola Machinery Oy

Juha-Pekka Toukola

Pakkalantie 281, 36430 Kangasala, Finland

juha-pekka(a)agritoukola.fi

3 NAME OF THE REGISTRY

Agritoukola Machinery Oy's customer register.

4 LEGAL BASIS FOR PROCESSING AND PURPOSE OF PROCESSING PERSONAL DATA

Personal data are processed for purposes related to the management and development of the customer relationship, the performance of a contract or its pre-contractual measures, enquiries, the preparation and sending of requests for quotations, the provision and delivery of services and the management of correction data and billing. 

Personal data are processed on the following legal bases:

(a) The data subject has given his or her consent to the processing of his or her personal data for the purposes set out in this Privacy Notice;

(b) The processing is necessary for the performance of a contract or a prior transaction to which the data subject is a party;

(c) The processing is necessary for the purposes of the controller's legitimate interests.

Legitimate interest
The processing of data in the register is based on the legitimate interest to market and offer its products and services with regard to the following processing operations:

- Collecting customer feedback
- Customer relationship management and related marketing

5 CONTENT OF THE REGISTER

The controller collects personal data from data subjects that are necessary for the purposes for which the register is used.

The register contains the following personal data of all data subjects: name, postal address, telephone number, e-mail address.

6 REGULAR SOURCES OF INFORMATION

Personal data is collected from the data subject himself/herself.

7 RECIPIENTS (CATEGORIES OF RECIPIENTS) OF PERSONAL DATA AND THE REGULAR TRANSFERS OF DATA

The controller uses contractors, i.e. processors, to carry out processing tasks on its behalf, to whom personal data are transferred for processing in accordance with the mandate agreement and its data protection conditions, in accordance with the controller's instructions. Such processors include, for example, providers of ICT, surveys and communication and marketing services.

8 TRANSFER OF DATA OUTSIDE THE EU OR ETA

The personal data contained in the register will not be transferred outside the EU or EEA.

9 RETENTION PERIODS FOR PERSONAL DATA

Agritoukola Machinery Oy keeps personal data in accordance with the law.

The data will only be kept for as long as necessary or specified for the purposes of the processing identified in the privacy policy.

10 PRINCIPLES FOR THE PROTECTION OF PERSONAL DATA

Manual files containing personal data are kept in locked premises, accessible only to designated persons authorised by their functions. The database containing personal data is on a server, which is kept in a locked room accessible only to designated and duly authorised persons.

Personal data are processed with due care and the controller has taken appropriate technical and organisational measures to protect the register. Personal data in electronic form are protected by an appropriate firewall and technical protection. Access to data and access to information systems is limited and protected by user IDs and passwords. The controller shall ensure that personal data stored, including server access rights and other information critical to the security of personal data, are treated confidentially and only by employees whose job description includes such treatment.

The controller's employees have been instructed and trained to ensure data security and confidentiality of the processing of personal data, and the employees and other persons have undertaken to respect the confidentiality and secrecy of the information obtained in connection with the processing of personal data.

11 RIGHTS OF THE DATA SUBJECT

Data subjects have the following rights:

- Is aware that his or her data is being collected and processed and the purposes for which it is being used
- Know what information has been collected about them and how long it will be kept
- Get any incorrect information corrected
- To have their data erased if they wish, i.e. the right to be forgotten if there is no basis for processing their personal data
- Restrict the processing of their data for certain purposes
- Transfer data from one register to another, where applicable
- To be informed of a data breach against the controller if this poses a high risk to his or her rights and freedoms
- Claim compensation for the damage he or she has suffered as a result of a data breach
- Refer a complaint about the processing of personal data to the data protection authorities.

Requests concerning the exercise of the rights of the data subject should be sent to juha-pekka(a)agritoukola.fi

If necessary, the controller will ask the applicant to prove his or her identity. The controller will respond to the customer within the time limits laid down in the EU General Data Protection Regulation.