Register and Data Protection Statement
1. Registrar
Kapasity Oy, Asemantie 52, 03100 VIHTI
09 279 8110
2. Contact person responsible for the register
Iiro Kankaansyrjä
040 741 2223
3. Name of the registry
Kapasity Oy's customer and marketing register
4. Legal basis and purpose of processing personal data
The legal basis for processing personal data under the EU General Data Protection Regulation is:
- the consent of the person (documented, voluntary, individualized, informed and unambiguous)
- the contract in which the data subject is a party
- legitimate interests of the controller (e.g. customer relationship, employment relationship, membership).
The purpose of processing personal data is communication with customers and marketing.
5. Information content of the register
The information to be stored in the register is: name, position, company/organization, contact details (telephone number, email address, address), web site addresses, IP address of the network connection, IDs/profiles in social media services, information about the services ordered and changes thereto, billing information, other information related to the customer relationship and the services ordered.
6th. Regular sources of information
The data stored in the register is obtained from the customer, for example, from messages sent via web forms, e-mail, telephone, through social media services, contracts, customer meetings and other situations in which the customer discloses their data.
7. Regular transfers of data and transfer of data outside the EU or EEA
Data may also be transferred by the controller outside the EU or EEA.
We use Google AdSense to track traffic to our public website and to target sales. Google operates independently under its own privacy statements and we strongly recommend that you familiarize yourself with them at https://support.google.com/adsense/answer/48182?hl=en.
The provider of our chat service and customer management system, Pipedrive, uses the information collected from our website to enable the services. You can consult the privacy statements of Pipedrive at https://www.pipedrive.com/en/privacy.
We use Netlify Analytics to track traffic on our public website and to target sales. We strongly recommend that you review Netlify's privacy statements at https://www.netlify.com/privacy/.
8. Principles of registry protection
Due diligence is observed in the processing of the register and the data processed with the help of information systems are properly protected. When register data is stored on Internet servers, the physical and digital security of their hardware is appropriately taken care of. The controller shall ensure that the stored data, as well as server access rights and other information critical to the security of personal data, are treated confidentially and only by the employees whose job description it belongs.
9. Right to audit and right to demand rectification of information
Each person in the register has the right to review their data recorded in the register and demand that any incorrect information be corrected or incomplete information be supplemented. If a person wishes to verify the data stored about him or to request a correction thereof, the request must be sent in writing to the controller. The controller may, if necessary, ask the applicant to prove his/her identity. The controller responds to the customer within the time limit laid down in the EU Data Protection Regulation (usually within one month).
10. Other rights related to the processing of personal data
A person in the register has the right to request the removal of personal data about him from the register “the right to be forgotten”. Likewise, data subjects have other rights under the EU General Data Protection Regulation, such as limiting the processing of personal data in certain situations. Requests must be sent in writing to the controller. The controller may, if necessary, ask the applicant to prove his/her identity. The controller responds to the customer within the time limit laid down in the EU Data Protection Regulation (usually within one month).