This statement sets out the principles regarding data protection and privacy policies of Pibond Oy according to Personal Data Act (sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Prepared May 24, 2018.
Pibond Oy (company id: 2621795-3)
Address: Kutojantie 2b, 02630 Espoo, Finland
Contact information: +358 207 929 818 / firstname.lastname@example.org
Hannu Hiillos, email@example.com, +358 5235383
Customer Register of Pibond Oy
Personal data are processed for the purposes of customer register management. The legal basis for the processing of personal data, in accordance with the EU's general data protection regulation, is the contract with the registered party. The purpose of processing personal data is to supply products, maintain and develop customer relations.
The information stored in the register is the person's name, position, company, contact details, web site addresses, information about the products ordered and their changes, billing information, and other information related to management of the customer relationship. The information is retained for the duration of the customer relationship. Unnecessary data is deleted every 3 years.
The information stored in the register is gathered from customers by e-mail, telephone, contracts, customer meetings and other situations where the customer disclose their information.
We primarily process personal data on servers located within the EU/EEA. However, in certain situations, minor amount of data may also be transferred outside the EU or EEA by our own personnel. While processing the data outside EU/EEA we implement adequate safeguards and data protection procedures.
The collected and stored data is protected with adequate protection tools and controls. The physical and digital security of the records stored on Internet servers, are maintained and handled appropriately. The Registry holder ensures that collected and stored data, access to server and other critical data related to the security of personal data are processed confidentially and only by such employees whose job description they belong to.
The registered persons have the right to check his / her data stored in the register and to demand that any possible incorrect information is corrected, or incomplete information updated and corrected. The request to correct or update the collected and stored data shall be sent in writing to Pibond Oy.
A person in the register has the right to request the removal of his / her personal data from the register ("right to be forgotten"). Also, those who are registered have other rights under the EU's general data protection regulation such as restricting the processing of personal data in certain situations. Requests should be sent in writing to Pibond Oy. Pibond Oy may, if necessary, request the applicant to prove his identity. Pibond Oy shall give its response within the time limit set in the EU Data Protection Regulation (usually within one month).