EU General Data Protection Regulation (679/2016) Data Protection Act (1050/2018)

Updated 25.11.2024

1. Data controller

Watula Greentech Oy
Heinisuontie 128
39530 KILVAKKALA
045 802 5585
sales@watulagreentech.fi

2. Contact person for matters concerning the register

Jani Korkeakoski
Karhuntie 40
65350 VAASA
045 802 5585
sales@watulagreentech.fi

3. Name of the register

Watula Greentech Oy customer register

4. Purpose and legal basis for processing personal data

Personal data is processed for the purposes of managing customer and other business relationships, providing services, business development and planning, marketing, opinion and market research and customer communications, which may also be carried out electronically and in a targeted manner.

Personal data are processed based on the data subject’s consent or potential engagement, for the purposes of providing Watula Greentech Ltd with legitimate interests, or for the performance/preparation of a contract to which the data subject is a party.

5. Data content of the register

Organisation: name, address, billing information, e-mail, telephone, services associated with the organisation

Contact person: name, e-mail, telephone

6. Regular sources of information

Data is obtained when the customer joins the customer relationship and during the customer relationship for services ordered/participated in by the customer.

Personal data may also be collected and updated from the registers of Watula Greentech Oy’s partners and from companies providing services related to personal data.

Data may also be collected from an individual via the website with his/her consent.

7. Regular disclosures of data

Personal data may be disclosed to other subsidiaries / audit partners of Watula Greentech Oy within the scope permitted by law. In addition, data may be disclosed to public authorities in cases required by law.

8. Transfer of data outside the EU or EEA

As a rule, data is not transferred outside the EU and EEA. Personal data may be transferred within the European Union, the European Economic Area or other countries that have been recognised by the European Commission as providing an adequate level of data protection.

9. Principles for the protection of the register

Personal data will be kept confidential. Each person processing data in the register has signed a confidentiality agreement.

Data processed on the computer

The computer network and the hardware on which the register is located are protected by firewalls, passwords and other generally accepted technical means.

Manual data

Documents containing customers’ personal data are kept in premises to which access by unauthorised persons is denied.

10. Retention period of personal data

Data collected in the register will be kept only for as long and to the extent necessary in relation to the original or compatible purposes for which the personal data were collected. The legal basis of the data in the register and the need for processing will be assessed at least every five (5) years.

The controller shall assess the necessity of data retention in accordance with its regular rules of conduct. In addition, the controller shall take all reasonable steps to ensure that personal data which are inaccurate, inaccurate or out of date, having regard to the purposes of the processing, are erased or rectified without undue delay.

11. Rights of the data subject

Requests for the exercise of the rights of the data subject shall be addressed in writing and signed to the contact person indicated in this notice.

Right to verify and rectify data

The data subject has the right to obtain confirmation as to whether personal data concerning him or her are being processed and, if so, to obtain a copy of his or her personal data.

The data subject has the right to obtain from Watula Greentech Oy the rectification, without undue delay, of inaccurate or incomplete data relating to him or her and the right to have incomplete data completed.

Right to erasure

The data subject has the right to have data erased without undue delay, provided that:

– The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

– The data subject withdraws the consent on which the processing was based and there is no other lawful basis for the processing;

– The personal data have been unlawfully processed;

Right to restriction of processing and right to object

The data subject has the right to obtain restriction of processing by the controller where

– the data subject contests the accuracy of the personal data

– The processing is unlawful and the data subject objects to the erasure of the data

– the controller no longer needs the personal data concerned for the purposes of the processing

– the data subject has objected to the processing of personal data on the basis of Article 21(1).

The data subject has the right to object at any time to the processing of data concerning him or her.

Right to withdraw consent

The data subject has the right to withdraw his or her consent to the processing of personal data without prejudice to the lawfulness of the processing carried out on the basis of the consent.

Right to data portability

The data subject has the right to receive data relating to him or her in a structured, commonly used and machine-readable form and the right to transfer such data to another controller.

Right to lodge a complaint with a supervisory authority

The data subject has the right to lodge a complaint with a supervisory authority if he or she considers that the processing of personal data concerning him or her infringes the applicable data protection rules.

12. For further information

If the data subject wishes to obtain further information on the processing of his or her personal data, he or she may contact the contact person mentioned in point 2.