Privacy Policy
PRIVACY POLICY FOR PAVE ARCHITECTS OY'S CUSTOMERS AND PARTNERS
This is PAVE Arkkitehdit Oy's register and privacy policy in accordance with the Personal Data Act (523/1999, Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). PAVE Arkkitehdit Oy reserves the right to update the policy as required by operations and applicable legislation.
1. Data Controller
PAVE Arkkitehdit Oy
Hintantie 18C
90500 OULU
2. Contact Person for Register Matters
3. Name and Purpose of the Register
Architectural firm PAVE Arkkitehdit Oy's customer and partner register.
4. Basis and purpose of use of personal data
The legal basis for the processing of personal data under the EU General Data Protection Regulation is the legitimate interest of the data controller, consent related to a customer or collaboration relationship, or another lawful basis such as a contract.
Personal data is processed in accordance with assignments agreed with the client, for the performance of tasks and obligations included in the assignment, for communication, information purposes and the development of operations. Contact details may be used to fulfil statutory obligations related to projects.
5. Data content of the register
The information stored in the register includes:
-
person's name
-
person's contact information (address, email address, telephone number)
-
company
-
name of the data subject
-
task in the organization
-
company contact information and billing information
-
offer and request for quotation information
-
information about ordered services
6. Rights of the data subject
The data subject has the following rights, requests for the exercise of which must be submitted to the controller in writing and signed or in person at the controller's premises. The controller may ask the requester to prove their identity if necessary.
Right of inspection
-
The data subject can check the personal data we have stored.
Right to rectification of data
-
The data subject may request the correction of incorrect, outdated or incomplete information concerning him or her.
Right to object
-
The data subject may object to the processing of personal data if they feel that the personal data has been processed unlawfully.
Direct marketing ban
-
The data subject has the right to prohibit the use of data for direct marketing. (Our company does not use direct marketing).
Right of withdrawal
-
The data subject has the right to request the deletion of data if the processing of the data is not necessary. We will process the deletion request, after which we will either delete the data or provide a justified reason why the data cannot be deleted.
It should be noted that the controller may have a statutory or other right not to delete the requested information. The controller is obliged to retain accounting records for the period specified in the Accounting Act. Therefore, accounting records cannot be deleted before the expiry of the period.
The data subject can appeal the decision to the contact person.
-
The data subject has the right to demand that we limit the processing of disputed data until the matter is resolved.
Right of appeal
-
The data subject has the right to file a complaint if he or she feels that we are violating applicable data protection legislation when processing personal data.
7. Regular Sources of Datan
The personal data in the register consists of information that is obtained from the person themselves when a customer relationship is established, face to face, by email, by telephone, and from their organization's public information sources.
8. Disclosure of information to outside parties
The information in the register is not routinely disclosed to other parties. Information may be published to the extent agreed with the customer.
Information in the register may be disclosed to authorities when required by law or other regulations, as well as in the normal exchange of information between key parties in commissioned projects to the extent required by the design process and construction.
Information will not be disclosed for marketing purposes.
Data is not transferred outside the EU or the European Economic Area.
9. Duration of processing
Data is generally stored and processed for as long as the customer relationship is valid.
Some of the information is retained for possible further cooperation and some of the personal information is retained in accordance with the requirements of the Accounting Act.
10. Data Processors
The data controller's employees process the personal data in the customer register.
11. Principles of register protection
The register is handled with care and the information processed by the information systems is appropriately protected with firewalls and passwords. Only employees of PAVE Arkkitehdit Oy have access to the information contained in the register stored in the system.
Paper documents such as signed contracts are stored in locked rooms.
12. Cookies and their use
Our Services may also contain links to other websites and social media services, but we are not responsible for the privacy practices or content of these external websites. We recommend that you review the privacy policies of these services.
Cookie used by our website:
-
Google Analytics (visitor tracking)
Cookies can be used to collect, among other things, the following information:
-
visitor's IP address
-
time
-
browser type
-
operating system
-
screen resolution
-
how the visitor came to the site (search engine, direct link, etc.)
-
previous visits to the site
-
used pages
For more information: Google's Privacy Policy https://policies.google.com/privacy?hl=en and Google Analytics Privacy and Security Principles https://support.google.com/analytics/answer/6004245?hl=en .
13. Recruitment
The data controller: rekry@pavearkkitehdit.fi
The applicant may specify in their application how long they wish their application data to be retained. Otherwise, applications will be deleted within six months of submission. Outdated or unnecessary personal data will not be stored.
The right to access, rectify or erase personal data, as well as other rights related to the processing of personal data, are described in section 6.
14. Contact form
The data controller: hallinto@pavearkkitehdit.fi
Contact requests submitted through the contact form are retained for six months from the date of submission.
The right to access, rectify or erase personal data, as well as other rights related to the processing of personal data, are described in section 6.