PRIVACY NOTICE 

Controller
Name: Aaltoa & Co Oy (”Aaltoa” or ”we)
Company ID: 3457034-3
Correspondence address: Erottajankatu 2, 00120 Helsinki, Finland
E-mail address: info@aaltoa.fi

GENERAL INFORMATION

This privacy notice (“Privacy Notice”) is applicable to all our activities involving the processing of personal data such as to our database of customers, suppliers, partners and marketing and users of our website aaltoa.fi (“Website”).

We mainly process personal data when offering, promoting or providing our services or when maintaining the relationships with our clients, partners and other relevant interest groups.

We process personal data under this Privacy Notice and in accordance with applicable legislation, including the General Data Protection Regulation (2016/679) and Data Protection Act (2018/1050).

This Privacy Notice describes how we process personal data, what personal data we process, how we use our data and what rights you have regarding the processing of your data.

PERSONAL DATA PROCESSED AND SOURCES OF DATA

Personal data collected by us can be divided as follows:

Basic information, such as:

  • name and contact details

  • personal identity code

  • date of birth

  • language

  • nationality

  • correspondence between our representatives and you

  • salary and taxation information

Analytics data when using our Website, such as:

  • device information

  • country

  • browser type and version

  • operating system

  • IP address

  • time spent on the Website

  • interaction with the Website

  • time and date of your visits to the Website

  • sections of the Website you visited

The personal data is usually collected directly from you. In addition, personal data may be collected and updated from public sources, such as public search engines, public websites, social media platforms or public registers.

Some of the personal data may also be generated by us. This data includes correspondence between you and our representatives and information relating to meetings between you and our representatives.

PURPOSES

We use your personal data mainly to fulfill our contractual and statutory obligations, to provide our services, to run our business and develop our customer and business relationships. Personal data is processed for the following purposes:

To carry out contractual obligations and provide our services
The primary purpose of personal data processing is to be able to offer our services to our customers and to run, maintain, market and develop our business.  

For legal obligations
In addition to the performance of a contract and run our business, we may process your personal data to enable us to fulfill our obligations under law. This includes data processed for complying with bookkeeping obligations and providing information to relevant authorities.

For communication and marketing
We have a legitimate interest to process personal data for customer communications and in connection with marketing and promoting purposes. We may process your personal data in order to correspond with you via different communication channels. In addition, we may process your personal data for the purposes of marketing and promoting our services to you.

PERSONAL DATA RECIPIENTS

We do not share personal data with third parties outside of our organization unless this is allowed or required by legislation. Information may be disclosed to, for example:

  • the authorities (such as tax administration)

  • authorized service providers who perform services for us (including accounting, legal, sales and marketing services)

  • companies belonging to the same financial consortium

  • third party if Aaltoa is involved in a merger, acquisition or asset sale

  • third party when we have your consent to do so. You have the right to withdraw the consent at all times.

 Transfer to countries outside Europe

We store your personal data primarily within European Economic Area. However, we can also transfer personal data to organizations operating outside the European Economic Area. Such data transfers can be carried out if one of the following conditions is met:

  • The EU commission has decided that the level of data protection in the country in question is adequate

  • Other necessary protection measure have been introduced by following the Standard Contractual Clauses approved by the EU commission or by ensuring that the company processing the data has in place valid binding rules concerning the company.

     

Storage period

We do not store your personal data longer than is legally permitted and necessary for the carry out contractual obligations to you, maintain and run our business or other purposes set out in this Privacy Notice. The storage period depends on the nature of information and the purposes of processing.

INFORMATION SECURITY

We use technical and administrative information security means that are necessary, appropriate and in line with the best practices to protect your personal data. Measures include, for instance, where appropriate, firewalls, safe IT areas, access control and careful selection of subcontractors.

YOUR RIGHTS

Right to access
You have the right to receive information from us of whether we process your personal data and to request a copy of your personal data.

Right to withdraw consent
In case the data processing is based on your consent, you may withdraw the consent at any time.

Right to rectification
You have the right to request us to rectify any inaccurate, incorrect or incomplete personal data we have stored about you.

Right to erasure
You have the right to request the erasure of your personal data. We will comply with such request unless we have a legitimate ground to not delete the data or we have statutory obligation to retain the data.

Right to restriction of processing
Under specific conditions provided for in legislation, you have the right to request us to restrict processing of your personal data. The right to request restriction of processing does not apply to personal data processing resulting from our statutory obligations.

Right to data portability
You have the right to receive some of your personal data you have provided us in a structured and commonly used format.

Right to object
You have the right to object to the processing of your personal data if such data is processed for our legitimate interest. In case we do not have compelling legitimate grounds to continue processing such personal data, we shall no longer process the data after your objection.

Right to lodge a complaint
If you find the processing your personal data to conflict with the applicable data protection laws, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (www.tietosuoja.fi).  

COOKIES

Cookies are small text files that are stored on the visitor’s computer or other device when visiting our Website. We use cookies to tailor our website and compile statistics on the visitors.

You may choose to set your web browser to refuse cookies.

CONTACT US

If you have questions about data protection, we ask you to contact info@aaltoa.fi.

LAST UPDATE: 5 AUGUST 2024