1.1 The responsible authority for the collection, processing and use of personal data is: Detech Decision Technologies Ltd, (“Detech”, “us”, “we”, “our'') an international business with headquarters in Ahventie 4 A FI-02170 Espoo, Finland. If you have any questions about how we protect or use your data, please email us at firstname.lastname@example.org
2.1 We will collect and process the following data about you:
3.1 We use your information:
4.1 The lawful basis we use for collecting and processing your information in Europe (as required by current legislation) are as follows:
5.1 We may share your information with selected third parties including:
5.2 We may disclose your personal information to third parties:
5.3 We do not have a list of all third parties we share your data with, as this would be dependent on your specific use of our Website. However, if you would like further information about who we have shared your data with, or to be provided with a list specific to you, you can request this by writing to email@example.com.
6.1 In principle, personal data will not be transferred outside the European Economic Area unless this is necessary for technical reasons pursuant to fulfilling the purposes of processing personal data, in which case the transfer of personal data will abide by the requirements of data protection legislation for the implementation of the appropriate or adequate safeguards. By submitting a request in accordance with section 13, we shall provide a copy of these protection measures.
7.1 Physical data is stored in locked facilities. Such data may only be processed by persons who have a legitimate reason, related to their duties, for processing the data. The information systems are protected by various organisational and technical methods from access by third parties. Each user has a personal user ID and password for logging into the system. Access to the data is restricted to persons who process the personal data in question as part of their duties.
9.1 Right of access to data (right to inspect data). The data subject shall have the right to inspect personal data relating to him or her that has been stored in the register. The data subject is also entitled to receive a copy of the personal data being processed. A request for right of access must be made in accordance with the instructions given in section 13 of this privacy notice. Right of access may be refused on the grounds laid down by law.
Exercising right of access is free-of-charge in principle. We may charge a reasonable fee corresponding to the administrative costs of fulfilling the request if the data subject requests several copies of the data or if the requests are made repeatedly or otherwise found manifestly excessive or unfounded.
9.2 The right to require rectification, erasure or restriction of processing. The data subject shall have the right to have any data on the register rectified or deleted if such data is contrary to the purpose of the register, incorrect, superfluous, incomplete or outdated. The data subject may submit a request for the rectification or deletion of data by contacting the Company in accordance with section 13 of the privacy notice.
The data subject shall also be entitled to require the Company to restrict the processing of his or her personal data, for example if the data subject is awaiting a response to a request from the Company for the rectification or deletion of such data.
9.3 Right to object to the processing of personal data. With respect to his or her particular circumstances, the data subject has the right to object to the profiling of him or her and other processing activities to which Detech is subjecting the data subject’s personal data. Upon the objection Detech shall no longer process the personal data unless the grounds for data processing are based on the legitimate interests of the Company which override the interests, rights and freedoms of the data subject. If the personal data is processed for direct marketing, the data subject has the right to object to the processing without any specific grounds, after which the Company will no longer process the data for purposes of direct marketing.
The data subject may submit his or her objection by contacting the Company in accordance with section 13 of this privacy notice. With respect to the objection, the data subject must identify the specific situation with respect to which he or she objects to processing. The Company may refuse to execute the request on the grounds laid down by law.
9.4 Right to withdraw consent given. If personal data is processed on the basis of the data subject's consent, the data subject has the right to withdraw such consent by notifying the Company thereof in accordance with section 13.
9.5 Right to data portability. The data subject shall have the right to receive his or her personal data which the data subject has provided to the Company and the processing of which is automated and based on an execution of a contract or on data subject’s consent, in a structured, commonly used and machine-readable format and have the right to transmit the data to another controller (where technically possible).
9.6 Right to lodge a complaint with a supervisory authority. Every data subject shall have the right to lodge a complaint with a supervisory authority, if the Company has not complied with the applicable data protection regulation.
The complaint shall be lodged to the supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement of data protection regulation. Complaint concerning Detech’s actions in relation to data protection regulation can be lodged to the supervisory authority of the data subject’s habitual residence or alternatively to the Finnish Data Protection Ombudsman. Further information about your right to data protection is available on the website of the Data Protection Ombudsman at: tietosuoja.fi.
10.1 Personal data shall be kept for as long as its processing is necessary with respect to the purpose for which the personal data was collected. Upon a withdrawal of data subject’s consent to process his or her personal data for direct marketing purposes, the Company shall only delete such data if there are no other legitimate grounds for processing the data. The Company shall delete or anonymize unnecessary data at regular intervals. Personal data shall be deleted from the register or anonymized as soon as there is no longer any need or grounds for its processing, or until such processing is no longer necessary for the Company in the fulfilment of a law, regulation or other official obligation.
11.1 Our Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility for them. Please check these policies before you submit any personal data to these websites.
13.1 You can contact the data protection officer in all matters related to the processing of their personal data or the exercise of rights based on the GDPR. You can contact our data protection officer on any questions about the privacy notice by e-mail at firstname.lastname@example.org, or by post addressed to:
Detech Decision Technologies Ltd
Ahventie 4A FI-02170 Espoo, Finland