Data protection and the processing of personal data in Jämsek Oy’s customer register

Records pursuant to Article 13 of the General Data Protection Regulation

Controller 
Jämsek Oy, Seppolantie 5, FI-42100 Jämsä
Tel. +358 (0)40 712 2645
yrityspalvelut@jamsek.fi

Controller’s contact person
Heidi Hakonen
Tel. +358 (0)40 712 2645
heidi.hakonen@jamsek.fi

Purpose of the customer register and the legal basis for processing personal data

The register is used with the customer’s consent for saving information about the customer relationship between Jämsek and the customer, for customer communications and marketing and for identifying the customer in service activities. Jämsek Oy may use the register for marketing purposes in order to promote and develop its business services. Personal data is received from the customer in connection with making an appointment or providing guidance. The data subject may withdraw their consent to the processing of their personal data at any time by contacting the controller.

Data content of the customer register

The data given by the customer when making the appointment is stored in the register: name, address, postal code, city, telephone number, field of business, purpose of the appointment (setting up a company, operating a company, acquisition, relocating in the area), along with the topics of the customer meeting:

Processing of data, processors and disclosure
Data in the customer register is mainly and primarily processed by business service managers and by other Jämsek employees, if necessary. The documents prepared with the customer at negotiations (business plan, estimates, funding applications, attachments provided by the customer) are stored in Jämsek Oy’s customer register. The data is not disclosed to third parties for marketing purposes. The register is located on a server that is managed by the City of Jämsä and protected with appropriate firewalls. The files are also protected with usernames and passwords. Backup copies of the server content are taken daily.

Data storage period
The basic data of data subjects is stored for a maximum of three (3) years or until the data subject requests its erasure.
If the customer participates in Jämsek Oy’s projects as a beneficiary, we might have to store some of the customer’s personal data in order to comply with accounting legislation or other mandatory legislation even after the customer relationship or the legal basis for processing personal data has ended.

 

Rights of the data subject

  • right to access one’s own personal data
  • right to rectification
  • right to restrict the processing of data
  • right to erasure
  • right to data portability
  • right to object
  • right to lodge a complaint with a supervisory authority

Notification and complaint relating to processing of personal data

If you wish to lodge a complaint about a problem with the processing of your personal data, please contact the controller’s contact person using the contact information available at the top of this document. You may also lodge a complaint with a supervisory authority, the Data Protection Ombudsman.