Privacy Policy

Use of cookies

Our site uses cookies. A cookie is a small text file to be stored on the user’s device that contains numbers and letters.

We use cookies to get statistical information about the usage of our site and to do this we use Google Analytics service. With this information, we can ensure that the website operates in accordance with the needs of users. In addition, we can see which parts of our site interest our users which helps us to improve our service.

By using the Website you agree to our use of cookies. Depending on your device’s browser software, you can also use its features to delete cookies from your device or disable them completely.

Privacy Policy Notice

Privacy Policy Notice – Tunturitec Oy’s customer register

Registrar

Tunturitec Oy
Company ID: 1842714-1
Contact Information: 010 231 4477, tunturitec(at)tunturitec.com

Contact Person

Maria Heikkilä
Contact Information: 010 231 4477, maria.heikkila(at)tunturitec.com

Registry name

Tunturitec Oy’s customer register

The purpose of processing personal data, and legal basis for the processing

The purpose of the processing is to handle the relations based on an agreement, consent or law-based relationship such as business liaisons, communication, marketing, customer support, billing, and fulfilment of services.

Data content of the register

The register may include the following information necessary for the registry keeping purposes: name, address, email address, telephone number, personal identification number, preferred language, employer, contract and customer number, customer history, services order, delivery and terms and conditions, username, password, as well as direct marketing bans and consents.

Regular data sources

Personal data is collected from the registered person, the postal services’ address information system, the population information system, the credit information register and other similar reliable sources of information as well as the data controller’s partners.

Statutory disclosing of information

Information from the Register is disclosed within the limits of the statutory permissions and requirements to selected partners, for example, for service production and marketing. Information may be disclosed in case of a business asset acquisition or other business arrangement.

Transfer of data outside the EU/EEA

Data will not be transferred outside the EU/EEA unless it is necessary for the technical execution of the service or for any other justified reason. In such a case, the registrar shall ensure, by contractual arrangements, an adequate level of data protection as required by legislation.

Data processing time

The controller keeps data for as long as is necessary for the purposes of the register.

Rights of the registered person

The registered person has the right to ask the controller to access personal data concerning himself/herself, the right to request the rectification or deletion of his/her personal data and, in certain circumstances, the right to transfer his/her information to another service provider.

If the processing of personal data is based on consent, the registered person shall have the right to withdraw consent. The registered person has the right to deny the disclosure and processing of his/her data for direct advertising, telemarketing and other direct marketing as well as market and opinion polling.

The exercise of these rights can be done by contacting our Customer Service. The request must be in writing and signed.

Automatic decision making

As a rule, registered person is not subject to major decisions based solely on automatic processing of personal data. Information on automatic decision making is informed to the registered person separately.

Notification of security breaches of personal data

In the event of a personal data breach that is likely to cause high risk to the rights and freedoms of natural persons, the registrar informs the registered person about the security breach.

Right of appeal to the authority

The registered person has the right to file a complaint to the controlling authority, if he/she considers that his/her personal data processing violates applicable legislation.