Rekisteriseloste

1. Data Controller

Tekoa Oy, 2045671–8

Contact Information:
Satamatie 199
85180 Rahja

Contact for registry-related matters:

Heikki Jyrinki
Satamatie 199
85180 Rahja
+358 40 5863506
heikki.jyrinki@tekoa.fi

If applicable, contact details of the Data Protection Officer:

Data Protection Officer

Heikki Jyrinki
Satamatie 199
85180 Rahja
+358 40 5863506
heikki.jyrinki@tekoa.fi

2. Data Subjects

Our company’s registry includes customers and potential customers.

3. Purpose of Personal Data Processing

Legal basis for maintaining the registry:

• Personal data is processed based on the registered person's customer relationship.

Personal data is processed based on consent (e.g., lists collected at trade fairs or permission asked for marketing through forms).

Purpose of Personal Data Processing and Registry Use

Personal data is processed solely for predefined purposes, which include:

• managing, maintaining, and developing the customer relationship
• informing about our services
• invoicing, accounts receivable management
• delivery of products
• provision of services
• new customer acquisition
• sales

Our company’s interest is to have the right to process the personal data of individuals with whom we cooperate.

4. Personal Data Stored in the Registry

The customer registry includes the following data:

Contact Information:

• name and address details
• email
• phone number

Customer Data

• information about purchased products or services
• business ID
• data required for invoicing

5. Rights of the Data Subject

The data subject has the following rights, and requests regarding the use of these rights should be directed to heikki.jyrinki@tekoa.fi

Right of Access

The data subject may check the personal data we have stored. 

Right to Rectification

The data subject may request correction of inaccurate or incomplete information.

Right to Object

The data subject may object to the processing of personal data if they believe it is being processed unlawfully. 

Right to Object to Direct Marketing

The data subject has the right to object to the use of their data for direct marketing.

Right to Erasure

The data subject may request erasure of personal data if processing is no longer necessary. We will process the deletion request and either delete the data or provide a justified reason why the data cannot be deleted. 

It should be noted that the data controller may have a legal or other right to refuse the deletion of the requested data. For example, the data controller is obliged to retain accounting material for the period defined in the Accounting Act (Chapter 2, Section 10), which is 10 years. Therefore, accounting-related data cannot be deleted before this period has elapsed.

Withdrawal of Consent

If the processing of the data subject's personal data is based solely on consent, not on a customer relationship or membership, the data subject may withdraw their consent.

The data subject may appeal the decision to the Data Protection Ombudsman

The data subject has the right to request that the processing of disputed data be restricted until the issue is resolved.

Right to Lodge a Complaint

The data subject has the right to file a complaint with the Data Protection Ombudsman if they believe that we are violating data protection laws while processing their personal data.

Contact details of the Data Protection Ombudsman: www.tietosuoja.fi/fi/index/yhteystiedot.html

6. Regular Sources of Data

The information provided should include details about the nature of the data sources (e.g., whether the source is publicly or privately maintained, type of organization/sector, and where the data originates from, e.g., EU or non-EU). The specific source should be provided unless impossible.

Customer data is regularly obtained from:

• Directly from the customer: Data necessary to manage the customer relationship, provided by the customer during the purchase or ordering of a service/product.
• Other sources:
  • Third parties: Customer data may come from external sources such as credit agencies or market research services.
  • Public registers: Data may be obtained from public registers like the population register or the business register, if legally permitted.
  • Customer meetings or discussions: Customer data may also accumulate through customer meetings or discussions, e.g., trade fairs or other customer service situations.
  • Social media and online behavior: If consent is given, customer data may be collected from social media platforms or through analysis of online behavior.

7. Regular Disclosures of Data

We ensure that all our service providers comply with data protection legislation. We regularly use the following service providers:

• Cardu Manager/newsletter service
• Profinder/yritys- ja kuluttajadata

8. Data Processing Duration

• Personal data is processed primarily as long as the customer relationship is active.
• The data subject can opt out of our marketing list by using the link in each marketing email we send.

9. Data Processors

The customer registry may be processed by the company’s CEO Heikki Jyrinki, Deputy CEO Markku Jyrinki, and Tekoa Oy’s office assistant. In addition, external service providers such as an accounting firm and IT support may process the data, and we ensure through contractual arrangements that personal data is processed in compliance with applicable data protection laws.

10. Transfer of Data Outside the EU

Personal data is not transferred outside the EU or the European Economic Area. 

11. Automated Decision-Making and Profiling

We do not use personal data for automated decision-making or profiling.