Company identification
Staycation Törrö Oy
Business ID 3465686-8
Postal address and possible business address
Törröntie 62, 93100 Pudasjärvi
Email address and telephone number
info@staycationtorro.fi / 041 3140 250
2. Privacy Policy
Staycation Törrö’s Privacy Policy
Privacy policy in accordance with the EU General Data Protection Regulation.
Controller
Staycation Törrö Oy
Business ID: 3465686-8
Hopiarannantie 2, 91980 Lumijoki
Phone: 041 3140 250 / 0500 727413
Email: info@staycationtorro.fi
Person in charge of data protection
Name: Jenny Rahkola; info@staycationtorro.fi
Substitute: Esa Hirvasniemi; esa.hirvasniemi@taloustulkki.fi
Names of data registers
Staycation Törrö Oy
• Customer register
• Employee register
Purpose of use of personal data
Personal data is processed to fulfill obligations defined by law, agreement or official regulation.
Employee register: Personal data of persons who have signed an employment contract is processed to fulfill the employer’s obligations defined by the employment contract. The processing is based on the Employment Contracts Act (2001/55, esp. Chapter 2).
Customer register: Personal data is processed to manage and analyze customer relationships and other relevant relationships, to provide services, to develop and plan business, and to carry out marketing, distance selling, opinion and market research and customer communications, which can also be carried out electronically and in a targeted manner.
Data content of the registers
The employee register contains the following information:
- basic information about employees, such as
- information related to statistics
- first and last names
- personal identification number
- Finnish personal identification number or date of birth
- foreign personal identification number or date of birth
- home address, telephone number and email address
- information related to the employment relationship
- information regarding the quality of the employment or service relationship
- information related to the person’s taxation
The following information about all registered persons can be processed in the customer register:
- first and last name
- contact information (postal address, telephone number, email address)
- start and end date and method of customer relationship and/or substantive contact
- direct marketing permits and prohibitions
- business ID (companies) or personal identification number
- information regarding the utilization of electronic services and content (e.g. subscribing to newsletters)
- information related to marketing and sales promotion, such as marketing measures targeted at the registered person and participation in them
In addition to the information listed above, the following information about those who purchased a product and/or service can be processed in the customer register:
- customer number
- business ID or personal identification number
- billing and collection information
- contact persons (name, telephone number, email address)
- information related to the management and communication of customer relationships and other relevant contacts, as well as classification (e.g. purchase and cancellation information for products and services, delivery information, feedback, complaints and recordings of customer service events, such as calls, emails and support messages)
Regular data sources
Employee register: Personal data concerning the data subject is collected from the data subject himself/herself.
Customer register: Personal data concerning the data subject is collected from the data subject himself/herself, from various services that the data subject uses, and in connection with various marketing measures such as marketing lotteries, competitions, and events.
Personal data may also be collected and updated from the registers of partners and from authorities and companies that provide services concerning personal data.
Regular data transfers
Data may be transferred in a manner required by the requirements of competent authorities or other parties, based on applicable legislation. Data may be transferred to buyers in connection with corporate restructurings, if Staycation Törrö Oy sells or otherwise organizes its business. Data may be transferred to partners selected by the data controller, who process the data on behalf of the data controller, based on a cooperation agreement between the parties. In this case, the data processor is not entitled to process the transferred data on its own behalf, in its own personal registers.
Transfer of data outside the EU or EEA
Data is not transferred outside the territory of the Member States of the European Union or the European Economic Area, unless it is necessary for the purposes of the processing of personal data or the technical implementation of the processing of data, in which case the transfer of data complies with the requirements of the General Data Protection Regulation.
Use of cookies
We use the so-called cookie function on our website. A cookie is a small text file sent to and stored on the user’s computer, which enables the website administrator to identify frequent visitors to the website, to facilitate the login of visitors to the website and to enable the compilation of aggregated information about visitors. With this feedback, we are able to continuously improve the content of our website. Cookies do not harm users’ computers or files. We use them so that we can offer our customers information and services that meet their individual needs.
If a user visiting our website does not want us to receive the above-mentioned information via cookies, most browser programs allow the cookie function to be disabled. This is usually done through the browser settings. However, it is good to take into account that cookies may be necessary for the proper functioning of some of the pages we maintain and the services we offer.
Register protection
A Manual data
Personal data is protected from unauthorized access and illegal processing (e.g. destruction, modification or disclosure). Each processor may only process the personal data that he or she needs for his or her work. Documents are stored in a locked location, protected from outsiders. Documents are only printed when necessary and paper prints are destroyed after use.
B Automatically processed data
The electronically processed data contained in the register are protected by firewalls, passwords and other technical means generally accepted in the information security industry. Only identified employees of the controller and companies acting on its behalf and on its behalf have access to the information contained in the register with the access right granted by the controller.
Exercise of the rights of the data subject
The data subject has the right, in accordance with the Personal Data Act, to check what information about him or her has been stored in the register. At the request of the data subject, necessary corrections and additions will be made to the personal data or information that is incorrect, unnecessary, incomplete or outdated for the purpose of the processing will be deleted. The information can be checked and updated by contacting the person in charge of Staycation Törrö Oy’s register affairs.
Changing the data protection notice
Staycation Törrö Oy reserves the right to change this data protection notice by announcing it on its website. Changes may also be based on changes in legislation. We encourage you to read the notice regularly.