This Notice explains how Suvi Hannus Oy (Suvi Hannus Ltd) complies with the DPA (the Data Protection Act), and the GDPR (the General Data Protection Regulation).
The Controller and Contact Person of your personal data
Suvi Hannus is both the controller and processor of your personal data collected.
Suvi Hannus Oy (Suvi Hannus Ltd), Business ID: 3153941-2
+358 40 7152 294
Date this Notice was created: 3rd of November 2020
Date this Notice was last modified: 3rd of November 2020
How I collect personal data
I regularly receive and process various types of personal data in connection with business operations with my clients. That data forms my client register. For example I gather information in connection with my business intake process (including marketing and selling) and when performing and managing assignments from my clients. Personal data are data that can be used to identify you or data that can otherwise be linked to you. I process personal data I obtain from you directly, for example when you send emails to me or communicate with me through other channels.
What personal data I collect
I process the following types of your personal data in my client register: your name, your contact information (email, address, phone number), your employer, your title or position, your company / organisation, billing information and other information related to the business relationship and the services ordered.
Legal basis for the processing of personal data
The processing of personal data in the client register is based on the business relationship with corporate or individual clients with Suvi Hannus.
How I may share of transfer your personal data
I do not sell, rent, distribute, or otherwise make your personal data available to any third party for marketing purposes. However, I may share information with my suppliers when they perform services on my behalf. If I transfer your personal data outside the EU or the EEA, such transfer will be performed subject to appropriate safeguards required by applicable data protection laws.
How long I will store your personal data
Your personal data will be stored for the purposes mentioned above for as long as I have a meaningful business contact or other contact with you. When the processing of your personal data is no longer necessary for the purposes they were collected, I will delete or anonymise the personal data relating to you in a secure manner.
Your rights and how to exercise them
You have the right to:
- request a copy of the personal data I process relating to you
- request the correction of incorrect personal data relating to you
- request the deletion of your personal data
- request the restriction of processing of your personal data or to object to processing
If you wish to check the data stored about you or if you request a correction, the request must be sent in writing to [email protected] If necessary, I may ask you to prove your identity. I will respond to you within the timeframe set out in the GDPR (generally within one month).
In addition, you have a right to ask me not to send you marketing-related communications. Please note that if I restrict or delete your personal data, this may result in me not being able to provide to you the communications described above.