Privacy Policy

The data controller has an obligation under the General Data Protection Regulation to inform data subjects in a clear manner. This statement fulfills the obligation to provide information.

1. Data Controller

Simmes Oy

Reinikaisenkatu 6
56800 SIMPELE

Contact person for matters concerning the register

Simmes Oy / Pekka Europaeus
0500 853 981
pekka.europaeus@simmes.fi

Reinikaisenkatu 6
56800 SIMPELE

Contact information for the possible Data Protection Officer, if applicable:

Data Protection Officer

Simmes Oy / Pekka Europaeus
0500 853 981
pekka.europaeus@simmes.fi

Reinikaisenkatu 6
56800 SIMPELE

2. Data Subjects

The register contains customers, potential customers, and partners of the company who have submitted their contact information through a form.

3. Purpose of Personal Data Processing

The basis for maintaining the register is the contact information saved through the contact form. Individuals give their consent when submitting a contact request.

Purpose of Personal Data Processing and the Register

Personal data is processed only for predefined purposes, which are as follows:

• message confirmation

4. Personal Data Stored in the Register

The customer register contains the following information:

Contact Information

• name
• email
• phone number

5. Rights of the Data Subject

The data subject has the following rights, requests for the exercise of which should be made to contact information

Right of Access

The data subject can check the personal data we have stored.

Right to Rectification

The data subject can request the rectification of incorrect or incomplete data concerning them.

Right to Object

The data subject can object to the processing of personal data if they feel that the personal data has been processed unlawfully.

Right to Prohibit Direct Marketing

The data subject has the right to prohibit the use of data for direct marketing.

Right to Erasure

The data subject has the right to request the deletion of data if the processing of the data is not necessary. We will process the deletion request, after which we will either delete the data or state a justified reason why the data cannot be deleted.

It should be noted that the data controller may have a statutory or other right not to delete the requested data. The data controller has an obligation to retain accounting material for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). For this reason, material related to accounting cannot be deleted before the expiration of the period.

Withdrawal of Consent

If the processing of personal data concerning the data subject is based solely on consent, and not, for example, on customer relationship or membership, the data subject can withdraw consent.

The data subject can appeal the decision to the Data Protection Ombudsman

The data subject has the right to demand that we restrict the processing of disputed data until the matter is resolved.

Right to Lodge a Complaint

The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they feel that we are violating current data protection legislation when processing personal data.

Contact information for the Data Protection Ombudsman: www.tietosuoja.fi/fi/index/yhteystiedot.html

6. Regular Data Sources

Customer data is regularly obtained from:

• the customer or potential customer themselves when filling in their contact information on the contact form.

7. Regular Data Disclosures

Data is generally not disclosed for marketing purposes outside Simmes Oy.

8. Duration of Processing

Personal data is generally processed for 5 years.

9. Processors of Personal Data

The data controller and its employees process personal data. We may also partially outsource the processing of personal data to a third party, in which case we guarantee through contractual arrangements that personal data will be processed in accordance with applicable data protection legislation and otherwise appropriately.

10. Transfer of Data Outside the EU

Personal data is not transferred outside the EU or the European Economic Area.

11. Automated Decision-Making and Profiling

We do not use data for automated decision-making or profiling.