This privacy notice describes how Fremja Oy processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and national data protection legislation.
This is a translation of the Finnish privacy notice. In case of any discrepancy, the Finnish version prevails.
1. Data controller
Fremja Oy
Business ID: 3597059-2
Kirkkokatu 1 A 1 b, 06100 Porvoo
Email:
mika@fremja.fi,
johanna@fremja.fi
2. Contact person for data protection matters
Please send any questions about data protection to mika@fremja.fi.
3. Name of the register
Fremja Oy’s customer and contact register.
4. Purposes of and legal basis for the processing of personal data
We process personal data for the following purposes:
- managing customer relationships and delivering our services (legal basis: performance of a contract)
- handling contact forms and email messages (legal basis: legitimate interests)
- invoicing and accounting (legal basis: legal obligation)
- developing our services and monitoring their quality (legal basis: legitimate interests)
5. Data held in the register
The following data may be stored in the register:
- name and role in the organisation
- contact details (email address, telephone number, postal address)
- the organisation represented and its contact details
- data relating to the customer relationship and service assignments
- data relating to enquiries and communications
- invoicing details
6. Regular sources of data
Data is generally obtained from the data subjects themselves — for example from enquiries, service agreements and client meetings. Data may also be obtained from the data subject’s employer.
7. Disclosure and transfer of data
Personal data is not disclosed to third parties except where required by law, or to subcontractors where this is necessary to deliver the service (e.g. accounting and IT services). Data is not transferred outside the EU or the EEA without appropriate safeguards.
8. Retention period
Personal data is retained for as long as is necessary for the purposes for which it is processed, or as required by law (e.g. the six-year retention period under the Finnish Accounting Act). Enquiries and requests for quotations that do not lead to a customer relationship are deleted within a reasonable period.
9. Principles of data security
The register is protected by technical and organisational measures. Data can be accessed only by persons who have been granted access rights on the basis of their duties. Electronic data is protected by passwords and appropriate access rights. Paper records are kept in locked premises.
10. Rights of the data subject
Data subjects have the right to:
- access the personal data concerning them
- request the rectification of inaccurate data
- request the erasure of their data (the right to erasure, or ‘right to be forgotten’)
- request restriction of, or object to, the processing of their data
- request that their data be transmitted to another controller (right to data portability)
- lodge a complaint with a supervisory authority (the Office of the Data Protection Ombudsman)
Requests should be sent by email to mika@fremja.fi. We will respond to requests within one month at the latest.
11. Cookies
The fremja.fi website does not currently use analytics or marketing cookies. Should our use of cookies change, this notice will be updated and, where necessary, the website will ask for your consent.
12. Changes to this notice
This privacy notice may be updated as our operations develop or legislation changes. The current version is always available at fremja.fi/en/privacy.
Supervisory authority: Office of the Data Protection Ombudsman, tietosuoja.fi.