PRIVACY POLICY
We collect, store, and process the personal data of the contact persons of our corporate clients. This information includes, for example, name, email address, and phone number. We handle our clients’ personal data in accordance with this privacy statement, in compliance with data protection legislation (GDPR), and with respect for the privacy of our clients’ contact persons.
DATA CONTROLLER
Arctic Rebar Oy
Liuskekuja 3
90620 Oulu
Business ID: 3362430-3
Contact Person: Janne Hilden +358 (0)45 349 9414
COLLECTION OF PERSONAL DATA
We collect and process personal data related to the contact persons of our clients and partners. We primarily collect personal data from emails, website contact forms, and during the conclusion of contracts. For marketing purposes, we also collect relevant email addresses from public sources.
WE NORMALLY COLLECT AND STORE THE FOLLOWING PERSONAL DATA:
- First and last name
- Represented organization/company
- Email address
- Postal address
- Phone number
- Information on previous orders
USE AND PURPOSES OF COLLECTED PERSONAL DATA
The purpose of the register is business operations, managing customer orders, archiving, processing, maintaining customer relationships, opening new client accounts, and related communication. The collected information is used to initiate, maintain, and fulfill other business needs.
MARKETING AND CUSTOMER COMMUNICATION
We conduct marketing and customer communication with potential new clients as well as existing clients. We may market via email or phone. However, individuals have the right to opt-out of direct marketing at any time.
RETENTION OF COLLECTED PERSONAL DATA
We generally retain collected personal data only for as long as necessary. Contact information and other manually processed customer data collected during client events or meetings are stored carefully and destroyed appropriately once no longer needed. Only employees of the company and those acting on behalf of the company have the right to use and maintain the electronic customer register.
LEGAL BASES FOR DATA PROCESSING
We always ensure that we have a proper legal basis under applicable law for processing your personal data.
YOUR PERSONAL DATA IS PROCESSED BASED ON EITHER:
- Fulfillment of our contractual obligations to you, or
- Our legitimate interests, such as proper execution and development of services, provided that your interests or fundamental rights and freedoms do not override these legitimate interests, or
- Your explicit consent.
You can withdraw your consent for the retention and processing of your personal data at any time by notifying us, for example, via email at janne.hilden@arcticrebar.fi.
COOKIES
We use cookies on our website to provide a functional user experience. A cookie is a small file stored on your device when you visit the website. The website uses this information as you navigate the site or return to it. We use functional cookies and visitor analytics cookies. Our visitor analytics (Google Analytics) processes visitor statistics anonymously, and the information collected about visitor movements on the site is not disclosed to third parties.
DISCLOSURE OF INFORMATION
Our company may disclose information on behalf of the client to parties required by the service, including partners necessary for the work who have a legal right to receive the information, and authorities. Our company does not disclose personal data to other third parties beyond statutory disclosures without the individual’s consent/request. Personal data is not transferred outside the European Union (EU) and the European Economic Area (EEA) unless necessary for the technical implementation by the company or its partners. Transfers of personal data outside the EU or EEA are carried out only with appropriate safeguards as required by applicable data protection legislation.
YOUR RIGHTS
Applicable data protection legislation grants the data subject certain rights concerning the processing of their personal data. These rights include:
ACCESS TO INFORMATION The data subject has the right to know what personal data is being processed about them and, with some exceptions, the right to obtain a copy of this data.
CORRECTION The data subject has the right to request the correction of inaccurate, incomplete, or outdated personal data.
OBJECTION The data subject has the right to object to the processing of their personal data in certain situations, including direct marketing purposes.
RESTRICTION The data subject has the right to request the restriction of their personal data processing in certain situations, such as when a request for data deletion cannot be carried out.
DATA PORTABILITY The data subject has the right to receive the personal data they have provided in a commonly used, machine-readable format and the right to transfer this data to another data controller, provided that it is processed based on consent or the performance of a contract.
ERASURE The data subject has the right to request the erasure of their personal data if the data is no longer needed for the purposes for which it was collected or if the personal data has been processed unlawfully.
COMPLAINTS If the data subject believes that any of their rights under applicable data protection legislation have been violated, they have the right to lodge a complaint with the relevant supervisory authority or seek judicial remedy.
We update our privacy policy as our services develop and legislation changes, and we will notify you of these changes on this page.