Privacy policy and statement

Privacy policy and statement in accordance with the Regulation (EU) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and Sections 10 and 24 of the Personal Data Act

Date of issue

24 May 2018

Controller

Mergertum Oy (y-tunnus 2120897-8)

Itäinen Teatterikuja 5 A 2, 00100 HELSINKI

puh. 040 310 0122, mergertum@mergertum.fi

Contact person for matters concerning the filing system

Sami Alatalo

Itäinen Teatterikuja 5 A 2, 00100 HELSINKI

puh. 040 826 2066, sami.alatalo@mergertum.fi

Name of the filing system

Customer and marketing filing system

Purpose of processing personal data

The purpose of the processing of personal data is implementation of customer and marketing communications (Personal Data Act (523/1999), Sections 19 and 24) and development of customer service production (Regulation (EU) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and Personal Data Act (523/1999), Section 8(5)).

Data content of the filing system

For customers, the data content of the filing system is the name and business ID of the customer company, telephone number, e-mail address and postal address of the contact person and details of the services used by the customer company.

For marketing, the data content of the filing system is the e-mail address, name, telephone number and company name of the person who has joined the marketing register as well as any other information provided by the person, such as requests for quotations and contacts, and usage data of the fulmore.fi website.

Data may be stored on the data subject from the perspective of both the customer and the marketing filing system.

Regular data sources

  • Data obtained from the data subject
  • Data stored on the data subject’s visits to the mergertum.fi website

Regular disclosure of data

Data will not be disclosed for marketing purposes outside of Mergertum Oy.

Transfer of data outside the EU or EEA

Personal data will not be transferred outside the EU or EEA, but part of the automatic processing of personal data in connection with marketing communications may take place from information systems outside the EU or EEA. In such cases, the systems used comply with the Privacy Shield agreement between the EU and the US.

Principles of filing system protection

Manual material

Manual material is stored on the controller’s premises under lock and key.

Data processed with ADP

Data processed with ADP is stored in accordance with security practices in the controller’s information system, and only certain pre-defined employees of the controller can access and are authorised to use the data stored in this information system. If necessary, the processing of personal data can also be partly outsourced to a third party. In such cases, it will be guaranteed through contractual arrangements that the personal data is processed in accordance with applicable data protection legislation and otherwise properly.

Right to review

As a rule, everyone has the right to review their data stored in the personal data file. The request should be submitted by e-mail at sami.alatalo@mergertum.fi with a picture ID of the sender attached. If possible, requests will be responded to within seven (7) days.

Right to demand rectification

Everyone has the right to demand rectification of inaccurate data in the personal data file. The claim should be submitted by e-mail at sami.alatalo@mergertum.fi.

Other rights related to the processing of personal data

Everyone has the right to prohibit the processing of data concerning themselves for the purposes of direct marketing, distance selling and other direct advertising as well as market research and opinion polling. The ban should be submitted by e-mail at sami.alatalo@mergertum.fi.