Privacy statement

In compliance with the EU General Data Protection Regulation (679/2016)

Controller

Ink & Media Solutions IMS Oy
Business ID: 2873095-3
Address: Silakatu 2, FI-20380 Turku, Finland
Tel. +358 40 0620 995
E-mail: esa.leivo@imsoy.fi

Contact person responsible for data protection issues

Data protection officer
Esa Leivo
Tel. +358 40 0620 995
E-mail: esa.leivo@imsoy.fi

Name of personal data file

Customer register, marketing register

Grounds and purpose of the processing of personal data

The legal grounds for the processing of personal data are as follows:

  • Consent for the processing of personal data from the data subject
  • Contractual relationship between the data subject and controller

Sales and marketing.

Regular sources of information

The regular sources of information for the data entered in the personal data file are as follows:

  • The data subjects themselves
  • Sources of information related to business operations assigned based on a partnership agreement, e.g. customer register

Personal data being processed

  • Customer relationship-related contact person information

Disclosure of personal data

As a rule, personal data is not disclosed. Consequently, personal data is not transferred outside the EU or the European Economic Area.

However, data may be disclosed on statutory grounds to the authorities, for example.

Protection of personal data

The register containing the data is stored on a cloud server protected by a firewall and password protection.

Duration of data storage

The data is stored 12 months after which it is updated, and any unnecessary data is destroyed.

Profiling

Personal data shall not be used for profiling or any automated decision-making.

Rights of the data subject

Right of access

Each data subject shall have the right to know whether their personal data is being processed and to receive a copy of their personal data being processed, if any.

Right of rectification

Each data subject shall have the right to request any inaccurate or erroneous personal data concerning them to be rectified. In addition, each data subject shall have the right to supplement any incomplete personal data by providing the necessary additional data.

Right of erasure

Each data subject shall have the right to request the erasure of personal data concerning them if

a. the personal data is no longer required for the purposes it was collected;
b. the data subject withdraws the consent based on which the personal data has been processed, and there are no other statutory grounds for the processing; or
c. the personal data has been processed in an unlawful manner.

Right to restriction of processing

Each data subject shall have the right to restrict the processing of personal data concerning them if
a. the data subject contests the accuracy of the personal data concerning them;
b. the processing is unlawful, and the data subject opposes the erasure of personal data concerning them and demands the restriction of its use instead; or
c. the controller no longer needs the personal data for the original purposes, but the data subject requires it for the establishment, exercise or defence of legal claims.

Right to withdraw consent

Each data subject shall have the right to withdraw their consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Right to transfer data from one system to another

Each data subject shall have the right to obtain personal data concerning them and provided by them in a structured, commonly used and machine-readable format as well as the right to transmit said data to another controller.

Right to complain to the supervisory authority

The national supervisory authority on issues relating to personal data is the Data Protection Ombudsman operating under the auspices of the Ministry of Justice. You have the right to refer your complaint to the supervisory authority if you think that the processing of personal data concerning you is in breach of the applicable laws.

Contact

On all issues related to the processing of personal data and exercising their rights, each data subject shall contact the data protection officer by e-mail at esa.leivo@imsoy.fi or by post to the following address: Silakatu 2, FI-20380 Turku, Finland.