1. Data controller
Patera Oy (hereinafter referred to as the “Company”)
Kuhnamontie 2, 44100 Äänekoski, Finland
2960765-8
2. Organisation responsible for data file matters
Patera Ltd
info@patera.fi
+358 44 236 2030
3. Name of data file
Customer data file
4. Purpose of processing personal data
The purpose of the data file is to maintain the Company’s customer data file, process customer orders and execute orders. The data is processed in order to produce the agreed services, develop the services, invoice customers, and manage and maintain the customer relationship.
5. Data content of the data file
The personal data file contains the following data:
• First and last name
• Represented organisation
• E-mail address
• Contact telephone number
• Postal code/zip
• Order information
6. Regular sources of data
The data is obtained from notifications and disclosures made by the customer to the Company during the customer relationship.
7. Use and disclosure of data and principles of data file protection
The data collected in the data file is only used by the Company. The data will not be disclosed outside the Company or for the use of its partners, except in matters related to credit applications, debt collection or invoicing, and where required by legislation. Only the Company’s separately appointed employees and employees of companies acting for and on behalf of the Company have access to and the right to use systems containing customer data and to maintain the data contained therein.
8. Right of access and rectification
The data subject has the right to check what data about them is stored in the data file. A request for access must be made in writing to the organisation handling data file matters. The data subject has the right to prohibit the processing and disclosure of their data for direct marketing purposes, for example, by contacting the organisation handling data file matters. Personal data in the data file that is incorrect, unnecessary, incomplete or outdated with regard to processing must be rectified, erased or supplemented. A specific request for rectification, including the grounds, must be submitted in writing to the organisation handling data file matters.
9. Data retention
The data may be erased at the data subject’s request or if the customer relationship ends, unless retention of the data is required by law.
1. Data controller
Patera Oy (hereinafter referred to as the “Company”)
Kuhnamontie 2, 44100 Äänekoski, Finland
2960765-8
2. Organisation responsible for data file matters
Patera Ltd
info@patera.fi
+358 44 236 2030
3. Name of data file
Website visit data file
4. Purpose of processing personal data
The purpose of the data file is solely to monitor website visit behaviour: which of the Company’s sites the visitor has visited. The collected data will not be used for targeted advertising or other similar purposes, for example.
5. Data content of the data file
The personal data file contains the following data:
• IP address
• time of website visit
• pages visited by the visitor
6. Regular sources of data
Data is obtained on visits to the Company’s sites.
7. Use and disclosure of data and principles of data file protection
The data collected in the data file is only available to the Company and the service provider maintaining the website. Only designated employees of the Company have the right to use the website’s maintenance server, which requires a personal username and password. The processing and protection of data in the data file complies with the provisions of the Data Protection Act, the regulations of the authorities, and good data processing practices.
8. Cookies
Usage statistics are collected from the website for the Google Analytics service, the purpose of which is to track the interests of website visitors and how the services we market have attracted interest and viewers through the Company’s website. The data collected cannot be used to identify an individual user or person. If you wish, you can disable Google Analytics tracking with a web browser add-on.
9. Right of access and rectification
The data subject has the right to check what data about them is stored in the data file. A request for access must be made in writing to the organisation handling data file matters. The data subject has the right to prohibit the processing and disclosure of their data for direct marketing purposes, for example, by contacting the organisation handling data file matters. Personal data in the data file that is incorrect, unnecessary, incomplete or outdated with regard to processing must be rectified, erased or supplemented. A specific request for rectification, including the grounds, must be submitted in writing to the organisation handling data file matters.
10. Data retention
The data will not be deleted separately.
1. Rekisterin pitäjä
Patera Oy (jäljempänä ”Yhtiö”)
Kuhnamontie 2, 44100 Äänekoski
2960765-8
2. Rekisteriasioita hoitava organisaatio
Patera Oy
info@patera.fi
044 236 2030
3. Rekisterin nimi
Rekrytointirekisteri
4. Henkilötietojen käsittelyn tarkoitus
Rekisteri sisältää sellaisia tietoja työnhakijoista, jotka ovat tarpeen työnhakijan rekrytoinnissa ja selvitettäessä työnhakijoiden soveltuvuutta Yhtiön asiakasyritysten tarjoamiin työtehtäviin. Lisäksi rekisteri sisältää sellaisia tietoja Yhtiön työnhakijoista ja työntekijöistä, jotka ovat tarpeen Yhtiön työsuhdeasioiden ja niihin liittyvien työnantajavelvoitteiden hoitamisessa.
5. Rekisterin tietosisältö
Rekisteriin voidaan tallentaa seuraavat työnhakijan perustiedot:
• etu- ja sukunimi
• osoite
• Henkilötunnus
• sähköpostiosoite
• pankkiyhteystiedot
• ammatti
• koulutukset, tutkinnot, osaaminen
• voimassa olevat työkortit
• työkokemus
• palkkatoive
• suosittelijat
• työhakijan valokuvat
• työnhakijan työpaikka- ja työssäkäyntialuetoiveet
• veronumero
• muut työnhakijan itsestään kertomat tiedot
Edellä kerrottujen lisäksi Yhtiön työntekijöistä voidaan tallentaa seuraavat tiedot:
• työsuhdetta koskevat tiedot
• palkanlaskentaan liittyvät perustiedot
• työajanseurantaan ja vuosilomiin liittyvät tiedot
• työterveyshuoltoon liittyen kerätyt tiedot
• Valtti-kortin numero
6. Säännönmukaiset tietolähteet
Tiedot kerätään rekisteröidyltä itseltään.
7. Tietojen edelleen luovutukset
Rekisteriin tallennetuista tiedoista luovutetaan Yhtiön asiakasyrityksille vain välttämättömät tiedot. Rekisterin tietoja ei luovuteta kolmansille osapuolille, ellei se ole työsuhteen ylläpidon tai palkanmaksun kannalta välttämätöntä.
8. Rekisterin suojauksen periaatteet
Manuaalisesti kerätty aineisto säilytetään lukituissa tiloissa. Sähköisesti tallennetut henkilötiedot on tietojärjestelmässä kryptattu, suojattu palomuurein, henkilökohtaisin salasanoin ja käyttäjätunnuksin sekä tietoihin on pääsy vain erikseen nimetyillä Yhtiön työntekijöillä.
9. Tarkastus- ja korjausoikeus
Rekisteröidyllä on oikeus tarkistaa, mitä tietoja hänestä on rekisterissä. Rekisteröidyllä työnhakijalla tai työntekijällä on myös oikeus vaatia virheellisen tiedon korjaamista sekä hänestä kerättyjen ja tallennettujen henkilötietojen poistamista, mikäli henkilötietoja ei enää tarvita niihin tarkoituksiin, joita varten ne kerättiin. Yhtiö poistaa henkilötiedot, ellei Yhtiöllä ole lakiin perustuvaa velvollisuutta tai oikeutta säilyttää henkilötietoja rekisteröidyn pyynnöstä huolimatta.
10. Tietojen säilytys
Yhtiö poistaa työnhakijoista ja työntekijöistä keräämänsä tiedot, kun niiden käsittely ei ole enää tarpeen. Mikäli Yhtiöllä on lakiin perustuva velvollisuus säilyttää työntekijään liittyviä tietoja (esim. palkkatiedot), säilytetään tällaiset tiedot niin kauan kuin laki säilyttämistä edellyttää.
1. Data controller
Patera Oy (hereinafter referred to as the “Company”)
Kuhnamontie 2, 44100 Äänekoski, Finland
2960765-8
2. Organisation responsible for data file matters
Patera Ltd
info@patera.fi
+358 44 236 2030
3. Name of data file
Recruitment data file
4. Purpose of processing personal data
The data file contains data on job applicants that is necessary in the recruitment of job applicants and in assessing the suitability of job applicants for the jobs offered by the Company’s customer companies. In addition, the data file contains data on the Company’s job applicants and employees that is necessary for the management of the Company’s employment relationship matters and related employer obligations.
5. Data content of the data file
The following basic data about the job applicant can be stored in the data file:
• first and last name
• address
• personal ID number
• e-mail address
• bank account details
• profession
• training, degrees, competence
• valid work cards
• working experience
• salary request
• references
• photos of the job applicant
• the job applicant’s wishes for the workplace and working area
• tax ID number
• other data provided by the applicant
In addition to the above, the following data about the Company’s employees may be stored:
• employment relationship data
• basic data related to payroll calculation
• data related to working time monitoring and annual holidays
• data collected in connection with occupational health care
• Valtti card number
6. Regular sources of data
The data is collected from the data subject.
7. Disclosure of data
Only the necessary data from among the data stored in the data file will be disclosed to the Company’s customer companies. The data in the data file will not be disclosed to third parties unless it is necessary for the maintenance of the employment relationship or the payment of wages.
8. Principles of data protection
Manually collected material is stored in locked premises. Personal data stored electronically is encrypted in the data system, protected by firewalls, personal passwords and usernames, and only separately designated Company employees have access to the data.
9. Right of access and rectification
The data subject has the right to check what data about them is stored in the data file. A registered job applicant or employee also has the right to request the correction of incorrect data and the erasure of personal data collected and stored about them, if the personal data is no longer required for the purposes for which it was collected. The Company must delete the personal data unless the Company has a legal obligation or right to store the personal data despite the data subject’s request.
10. Data retention
The Company must delete the data it has collected about job applicants and employees when its processing is no longer necessary. If the Company has a legal obligation to store data related to the employee (e.g. salary information), such data shall be stored for as long as required by law.
1. Data controller
Patera Oy (hereinafter referred to as the “Company”)
Kuhnamontie 2, 44100 Äänekoski, Finland
2960765-8
2. Organisation responsible for data file matters
Patera Ltd
info@patera.fi
+358 44 236 2030
3. Name of data file
Marketing data file
4. Purpose of processing personal data
• Marketing and promoting the company’s products and services in different channels (e.g. email, telephone, social media, targeted advertising).
• Maintaining and developing the customer relationship.
• Planning, implementation and analysis of marketing campaigns.
• Improving customer service and personalisation.
• Targeting marketing communications based on the interests and preferences of the data subjects.
• Arranging competitions and raffles.
• Conducting marketing research and surveys.
5. Data content of the data file
The personal data file may contain the following data:
• Contact data: Name (first name, last name), email address, telephone number, address.
• Demographic data (optional): Age, gender, place of residence.
• Company data (if relevant): Company name, position in the company.
• Customer relationship data: Purchase history, product and service interests, contacts with the Company.
• Marketing permits and prohibitions: Consents for electronic direct marketing, telemarketing, etc.
• Website behaviour (if relevant): Information on the use of the Company’s websites (e.g. pages visited, data collected through cookies).
• Social media data (if relevant and consent obtained): Publicly available data or data that the user has provided to the Company through social media.
• Other data collected with the data subject’s consent.
6. Regular sources of data
Data is collected mainly from the following sources:
• Directly from data subjects (e.g. forms on websites, order forms, participation in competitions, contacts).
• From the company’s existing customer data system.
• Using cookies and other tracking technologies on the Company’s website (in accordance with a separate cookie policy).
• From social media (only with the data subject’s consent or from publicly available data).
• Possibly from other legal sources (e.g. public data files).
7. Use and disclosure of data and principles of data file protection
The data collected in the data file may be used for the marketing purposes specified in Section 4.
Data may be disclosed to service providers acting on behalf of the Company who assist in the implementation of marketing (e.g. email marketing platforms, advertising agencies, analytics services). Appropriate data processing agreements have been concluded with these service providers to ensure the lawful processing of data.
The data is not regularly disclosed to third parties for their own marketing purposes without the data subject’s separate consent. However, data may be disclosed to the authorities in cases required by law.
The data in the data file is stored in protected data systems. Access to the data is solely restricted to the Company’s designated employees and/or persons acting on behalf of the Company who, due to their job duties, have a need to process the data. Users have personal usernames and passwords.
The processing and protection of data in the data file complies with the data protection legislation, the regulations of the authorities, and good data processing practices.
8. Cookies and other tracking technologies
The Company’s website may use cookies and other tracking technologies to analyse website use, improve the user experience, and target marketing. Further information on the use and management of cookies can be found in the Company’s separate cookie policy.
9. Right of access and rectification
The data subject has the right to check what data about them is stored in the data file. A request for access must be made in writing to the organisation handling data file matters (contact details in Section 2).
The data subject has the right to request the rectification, erasure or supplementation of inaccurate, unnecessary, incomplete or outdated personal data. A specific request for rectification, including the grounds, must be submitted in writing to the organisation handling data file matters.
10. Right to object to the processing of personal data for direct marketing purposes
Data subjects have the right to object to the processing of their personal data for direct marketing purposes at any time. This can be done by contacting the organisation handling data file matters (contact details in Section 2) or referring to the instructions in marketing messages (e.g. the unsubscribe link).
11. Right to withdraw consent
If the processing of personal data is based on the data subject’s consent, the data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Consent can be withdrawn by contacting the organisation handling data file matters (contact details in Section 2).
12. Data retention period
Personal data will be retained for as long as necessary to fulfil the purposes specified in Section 4, unless otherwise required by law. Data collected for marketing purposes may be retained, for example, for the duration of the customer relationship and for a reasonable period after its termination, or until the data subject withdraws their consent or objects to the processing.
13. Right to file a complaint with the supervisory authority
The data subject has the right to file a complaint with the competent data protection authority if they consider that their personal data has been processed unlawfully. The competent supervisory authority in Finland is the Data Protection Ombudsman.