According to the General Data Protection Regulation, the company is obliged to inform the data subjects in a clear manner. This statement fulfils the obligation to provide information.
1. Company
Remu Ltd
Address:
Inhantie 7
63700 Ähtäri, Finland
Contact information in matters concerning the register:
Remu Oy / Hanna Rissanen
Inhantie 7
63700 Ähtäri
+358 20 7431 161
info@remu.fi
2. Register
- a) Customers and prospective customers/leads
If you are a customer or employee of REMU Oy customer company, we may process your contact information such as name, phone number, e-mail address, address, title and organization. We will process your personal data, for example, to provide customer service and product support as well as to map customer satisfaction. The legal basis for keeping the register is to fulfill the contract and/or legitimate interest. We will delete your personal data when the aforementioned purpose of processing has been achieved. If your personal data is part of the accounting records, we comply with the requirements of national accounting legislation regarding retention periods.
REMU Oy processes the personal data of potential new customers (leads) in order to promote the establishment of business relationships. The legal basis for keeping the register is the company’s legitimate interest. Personal data will be deleted from the register when the purpose of processing has been achieved.
(b) Suppliers
If you are a supplier of REMU Oy or work for a supplier, we may collect information such as name, company, telephone number, e-mail address and address.
The basis for keeping the register is either a contract or the company’s legitimate interest.
REMU Oy’s marketing practices
We use our registered customer, lead and supplier data for the company’s marketing purposes, to inform about products, services, offers and novelties, and for marketing research.
App and website tracking:
When you visit our website and consent to the collection of personal data, we may collect information through cookies, pixels and the like.
Our processing purpose is to improve the usability and customer experience of our online visits and to monitor the results of marketing. The legal basis for processing is the company’s legitimate interest in developing products and services for sale and marketing.
Cookies:
We use cookies and other similar technologies on our site. A cookie is a small text file that the browser stores on the user’s terminal device. Cookies contain an anonymous, unique identifier that allows us to identify and count the different browsers that visit our site. The purpose of using cookies and other similar technologies is to further analyze and develop our services to serve users better and to target advertising. The user can block the use of cookies or clear cookies in the browser settings.
Contact forms:
If you contact us through the form displayed on the website or in the apps, we will collect the information you provide for future communication and service provision. We may also combine cookie and email tracking data with customer information. We collect personal data in connection with transactions using paper or electronic forms. The processing of data is based on consent or the legitimate interest of the company.
Email:
Marketing and informational e-mails sent by our company, as well as sales-related offers, etc. Emails may contain tracking technologies that tell you whether you have received or opened the email or the links in it. The processing of data is based on a legitimate interest in marketing, selling products and developing services. You can unsubscribe from the company’s email marketing list, for example, through the link at the end of each email.
(c) Visitors to physical premises
We collect data on visitors to physical premises and especially production facilities to ensure safety and to agree on practices. We collect information such as:
Name, organization you represent, telephone number, email address.
The legal basis for keeping the register is a contract.
The data will be deleted five years after the last visit.
(d) Jobseekers
If you apply for a job at REMU, we collect information about you for the recruitment process and a possible job offer. We collect information such as:
Name, address, telephone number and email address, as well as information on educational background, work experience and other skills.
The legal basis for keeping the register is the company’s legitimate interest.
The data will be deleted from the register one year after the end of the recruitment process.
3. Rights of the data subject
The data subject has the following rights, the use of which requests must be made to the address info@remu.fi
The right to obtain information on the processing of personal data
Data subjects have the right to be informed of the collection and processing of their data. The processing of personal data shall be done transparently.
Right of access
Data subjects have the right to receive confirmation from the controller on whether or not the controller is processing personal data that concerns them. The data subjects thus have the opportunity to evaluate and ensure the legality of the processing.
The right to rectification
Data subjects have the right to demand the rectification of inaccurate personal data concerning them and to have incomplete personal data completed.
Right to erasure
In certain cases, the data subject has the right to have the controller erase data concerning him or her without undue delay. This right is also known as the right to be forgotten. This right does not apply if the processing of the data is necessary
Right to restriction of processing
The data subject can request the controller to restrict the processing of personal data concerning him or her.
Right to data portability
The data subject has the right to receive the personal data that he or she has provided to a controller in a structured, commonly used and machine-readable format and, if desired, transmit that data to another controller.
Right to object
In certain situations, the data subject has the right to object to the processing of his or her personal data, that is, request the controller not to process it at all.
Right not to be subject to a decision based solely on automated processing
The data subject has the right to demand human involvement in decisions that concern him or her.
Data subjects have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. There are exceptions to this prohibition, however.
More information on the rights: https://tietosuoja.fi/en/rights-of-the-data-subject
Contact details of the Data Protection Ombudsman: www.tietosuoja.fi/fi/index/yhteystiedot.html
4. Regular sources of information
Customer data is obtained regularly:
- from the customer himself/herself when the customer relationship is established, through contact forms, email, phone and social media services.
- Information published from publicly available sources, such as information published on companies’ websites
- Purchased company registers and reports
5. Regular disclosure of data
We disclose data to REMU Oy’s subsidiary, REMU USA Inc., for marketing purposes. The company is committed to complying with the requirements of the General Data Protection Regulation.
We have ensured that all our service providers comply with data protection legislation. We regularly use the following service providers: Dun & Bradstreet (Bisnode).
6. Processors of personal data
The controller and its employees process personal data. We may also partially outsource the processing of personal data to a third party, in which case we guarantee through contractual arrangements that personal data is processed in accordance with current data protection legislation and otherwise appropriately.
7. Transfer of data outside the EU
Data is regularly transferred outside the EU or the European Economic Area. When data is transferred outside the EU and EEA, we ensure an adequate level of protection of personal data, for example, by agreeing on matters related to the confidentiality and processing of personal data as required by law.
8. Automated decision-making and profiling
We do not use the data for automated decision-making or profiling.
