1. The controller
2. Contact person for register matters
3. The name of the registry
Freefinns Oy customer and marketing register
4. Legal basis for the processing of personal data:
The processing of customer data is based on the legitimate interest of the controller or an agreement between the controller and the data subject.
5. Purpose of the processing of personal data:
Development of the registrar’s customer service, targeting of customer communications, measures related to marketing and other co-operation.
6. Information content of the register:
The following information can be collected in the register:
Customer’s first and last name
marketing allowed / prohibited
information about the use of the services
Name of the company
The data subject has the right to check the data concerning him or her and to demand the correction of incorrect data in the register.
7. Regular sources of information
The information is collected through the forms on the freefinns.fi website, which are filled in by the users themselves, and through separate campaign pages, where the user fills in the form himself. Information may also be obtained by telephone, e-mail, face-to-face meetings, or the like.
8. Regular disclosures
The data may be shared within the controller’s organization. Registry data will not be disclosed without the express consent of the data subject.
9. Data transfer outside the EU or the EEA
Data will not be transferred outside the EU or the EEA.
10. Registry Security Principles
The processing of personal data is protected by the necessary technical measures. Only the controller’s organization can access the register. The personnel are bound by confidentiality obligations.
11. Right of inspection
The data subject has the right to check what information about him is stored in the register. In addition, he shall have the right to obtain information about himself after making a sufficiently precise and specific request for an inspection. The data subject shall also have the right to require the controller to correct inaccurate and erroneous personal data concerning the data subject without undue delay and to delete the data concerning him or her from the register.