Cactos Oy Customer and Partner Register
Managing director Oskari Jaakkola firstname.lastname@example.org
In our register, we process personal data of our customers, representatives of our corporate customers and representatives of our partners.
We collect and process the following personal data:
The controller or its authorised partner (acting on behalf of the controller) uses the personal data of the register in accordance with personal data legislation for the following purposes:
The controller shall have the right to process personal data on the following grounds:
Information is obtained from representatives of customers and partners in connection with requests for tenders, orders, contracts and other contacts.
Personal data may also be collected from public information sources such as company websites andLinkedIn.
In principle, personal data will not be disclosed to third parties. Data may also be transferred for processing to the partners of Cactos Oy for the purposes specified in section five.
The personal data is not transferred outside the EU/EEA.
Personal data will be kept as long as the controller uses the data for the purposes described in section four. Personal data stored in the register will be deleted when there is no longer a legitimate basis for processing them.
Personal data will be stored in the Customer Information System for a maximum period of seven years after the end of the customer relationship or until the customer requests the deletion of the data. Personal data may also need to be kept longer than this if applicable law or our contractual obligations towards third parties require a longer retention period.
The data security of the register and the confidentiality, integrity and availability of the personal data shall be ensured by appropriate technological protection and organisational measures.
Only persons employed by Cactos Oy or its authorised operators whose work requires the processing of personal data are entitled to access the data. The register data is protected by personal user IDs and passwords. We require our staff and partners to commit to maintaining the confidentiality of customer data.
More on Cactos Oy’sdata security policy here.
The data subjecthas the rights based on data protection legislation. Please note that theprecise application of these rights in each individual situation will depend onthe purpose and context for which the personal data is processed.
Data subjects maysend all requests concerning their rights by email to email@example.com
As a rule, thecontroller shall not charge a fee for processing the request from the datasubject. However, if the data subject's requests are clearly unfounded orunreasonable, such as if they are repeatedly submitted, the controller maycharge the data subject a reasonable fee based on the administrative costs ofprocessing the request.
The data subjectshall have the right to obtain confirmation as to whether or not personal dataconcerning him or her is being processed, as well as information on theprocessing of personal data as defined in data protection legislation. Inaddition, the data subject shall have the right to receive a copy of thepersonal data being processed.
The data subjectshall have the right to access the personal data that is stored in theregister. The data subject shall have the right to request the correction ofinaccurate or imprecise personal data.
The data subject shall have the right to obtain the erasure of personal data concerning him or her without undue delay provided that:
Restriction of processing of the personal data means that the personal data subject to the restriction may, in addition to retention, be processed only:
The data subject shall have the right to obtain restriction of processing by the controller if:
If the processing of personal data is based on the consent of the data subject, the data subject shall have the right to withdraw his or her consent at any time without affecting the lawfulness of the processing carried out on the basis of that consent. However, the personal data of the data subject may be retained if the retention of the personal data is necessary to comply with a legal obligation imposed on the controller.
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller if it is technically possible.
The data subject shall have the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data concerning him or her infringes the applicable data protection legislation.