DATA PROTECTION STATEMENT OF KANGASALAN AUTOMAATTIVARASTOT OY’S CUSTOMER AND DIRECT MARKETING REGISTER

DATA CONTROLLER

Kangasalan Automaattivarastot Oy (“Kangasalan Automaattivarastot” or “we”) processes the personal data of its customers for the management of customer relationships, fulfillment of contractual obligations, maintenance of its CRM system, customer communication, and direct marketing purposes. In addition to existing customers, Kangasalan Automaattivarastot may process the personal data of potential customers.

It is important to us that you know how we process your personal data. Below we provide more information about the processing of your personal data.

Please note that this data protection statement (“Data Protection Statement”) only applies to the processing of personal data carried out by Kangasalan Automaattivarastot as the data controller.

DATA CONTROLLER CONTACT DETAILS

Kangasalan Automaattivarastot Oy Business ID: 3320846-5
Address: Kalevankatu 28 A 11, 00100, Helsinki
Phone number: +358 050 337 78 32
Email address: aspa@nordicministorages.fi
www.nordicministorages.fi
The person responsible for the customer register: Markus Kauppinen

PROCESSED PERSONAL DATA AND SOURCES OF INFORMATION

We collect customer-related data (“Customer Data”) and technical analytics data (“Analytics Data”) from our customers.

Although we typically do not use Analytics Data to identify individuals, sometimes individuals may be identifiable from it either alone or when combined or linked with Customer Data. In these cases, Analytics Data is considered personal data in the manner intended by applicable legislation, and we process the combined data as personal data.

Kangasalan Automaattivarastot collects and processes the following Customer Data: • first and last name; • represented organization; • personal ID/business ID; • mailing address, postal code, and city; • email address; • phone number; • communication; • billing and payment information; • consents or prohibitions related to direct marketing or other information; and • other information provided by the customer or added to the CRM system (e.g., expressed interest in certain types of services);

Most of the Customer Data is obtained directly from the customer or the data subject themselves. In addition, personal data may be collected and updated from various information services and public registers.

The Analytics Data we collect and process in connection with the use of our websites includes the following information:
• customer’s IP address; • customer’s device and device identifier; • operating system; • visit times; • URL path on the site; • browser type and version; and • language settings.

COOKIES AND WEB ANALYTICS

Kangasalan Automaattivarastot may use cookies and other technologies to collect Analytics Data when you visit our websites.

A cookie is a small text file sent to and stored on the user’s computer, allowing the website administrator to identify frequent visitors, facilitate visitors’ access to services, and compile aggregate data on visitors. With this feedback, we can continuously improve our website and better serve our customers. Cookies do not harm users’ computers or files. We use them in a way that allows us to offer information and services tailored to the individual needs of our customers.

You can block the use of cookies in your browser or set your browser to warn you when cookies are being installed.

For example, the following links provide information on changing cookie settings in popular browsers:
Safari Google Chrome Internet Explorer Mozilla Firefox

Please note that our website may not work correctly if the use of cookies is blocked.

We use Google Analytics and other web analytics tools on our websites to compile Analytics Data and reports on the use of our website by visitors. For more information about Google Analytics, visit the Google Analytics website. You can opt out of Google Analytics collecting data by downloading the following browser add-on: Google Analytics opt-out add-on.

PURPOSE AND BASIS OF PERSONAL DATA PROCESSING

Purposes

Kangasalan Automaattivarastot processes personal data for the following purposes:

Providing services

We primarily process personal data to offer services to our customers and to operate, maintain, and develop our business. Personal data can be used to fulfill our contractual obligations to the customer. If a customer contacts our customer service, we use the provided information to answer questions and solve potential problems.

Customer communication and marketing

We may process personal data to contact our customers regarding our services and to inform customers about changes to our services, process and collect customer feedback, and market our services.

Visitor analytics and trend identification

We may process information about the use of services to improve the quality of our services, for example, by analyzing various trends and developments related to the use of services. To the extent possible, we use anonymized or pseudonymized information that cannot be used to identify individuals.

Legal basis for processing

We process personal data based on our legitimate interest in operating, maintaining, and developing our business and creating and maintaining customer relationships. When we process your personal data based on our legitimate interests, we weigh our legitimate interests against your right to privacy.

In addition, we process personal data to fulfill our statutory obligations, such as the documentation requirements set by the Accounting Act.

In some situations, we may ask for consent to process personal data. In these cases, the given consent can be withdrawn at any time.

STORAGE TIME

We store personal data only as long as required by law or as necessary to fulfill the purposes specified above.

INTERNATIONAL TRANSFERS OF PERSONAL DATA

Kangasalan Automaattivarastot primarily stores your personal data within the European Economic Area.

However, our service providers operate in multiple geographic areas. We and our service providers may transfer personal data or access them in countries outside the European Economic Area or your country of residence.

In this case, we ensure that the level of protection of your personal data is adequate in the areas where your personal data is processed. We provide adequate protection for personal data transfers to countries outside the European Economic Area through agreements with our service providers based on the European Commission-approved standard contractual clauses or in accordance with any other arrangement approved by the EU Commission at the time, for example, within the framework of the Privacy Shield program.

RECIPIENT GROUPS OF PERSONAL DATA

We do not disclose your personal data to third parties outside the Kangasalan Automaattivarastot organization, except in the following situations:

Sharing is necessary due to the purposes specified in this Data Protection Statement

To the extent that third parties need access to personal data to provide services, Kangasalan Automaattivarastot has taken appropriate contractual and organizational measures to ensure that the processing of personal data is carried out solely for the purposes specified in this Data Protection Statement and in accordance with applicable laws and regulations.

For legal reasons

We may disclose personal data to third parties outside the Kangasalan Automaattivarastot organization if access to and use of personal data is reasonably necessary to (i) comply with any applicable law, regulation, and/or court order; (ii) detect, prevent, and address fraud or security, technical issues; and/or (iii) protect the interests or property of Kangasalan Automaattivarastot or our customers or ensure safety or protect the public interest as required by law. If possible, we will notify customers of such transfers and processing.

To authorized service providers

We may disclose personal data to authorized service providers providing services to us (including subcontractors providing data storage, sales, marketing, and customer support services). According to the commitments included in the agreements we make with our service providers, service providers commit to complying with privacy and data protection standards at least as specified in this Data Protection Statement. Remember that when you provide your personal data directly to a third party, for example, through a link on our site, the processing of personal data is usually based on the third party’s own documentation and standards.

With explicit consent

We may disclose personal data to third parties outside our organization for reasons other than those mentioned above when we have the customer’s explicit consent. The customer has the right to withdraw the given consent at any time.

For other legitimate reasons

If Kangasalan Automaattivarastot is a party to a merger, business transaction, or other corporate transaction, we may disclose personal data to a third party involved in the corporate transaction. However, we will ensure that all personal data remains confidential. In this case, we will notify the transfer as soon as reasonably possible to customers whose personal data the transfer concerns or whose personal data processing is subject to a different data protection statement.

DATA SUBJECT’S RIGHTS

Right of access

Data subjects have the right to access their personal data processed by Kangasalan Automaattivarastot. If you wish, you can contact us to find out what personal data we process and for what purpose it is used.

Right to request correction

You have the right to have incorrect, inaccurate, incomplete, outdated, or unnecessary personal data that we store corrected or supplemented by us. By contacting us, you can update, for example, your contact information.

Right to request deletion

You can ask us to delete your personal data. We will take the necessary actions according to your request unless we have a legitimate reason not to delete the information.

Right to object and right to restrict processing

You have the right to object to the processing or profiling of your data if your data is processed for direct marketing purposes. You also have the right to request the restriction of the processing of your personal data in certain situations, for example, when the data concerning you is not accurate. Additionally, in certain special situations, you have the right to object to the processing of your personal data.

Right to data portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and the right to transfer that data to another data controller.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a competent supervisory authority if you believe that we have not processed your personal data in accordance with applicable data protection legislation.

CONTACT

For all questions related to data protection and the exercise of your rights, you can contact us by email, phone, or letter. You can find the contact details at the beginning of this Data Protection Statement.