PRIVACY POLICY

Register name
Customer register
Marketing register
Employee register
Recuitment register

Controller
Normaint Ltd Business ID 2581120-5
Tehdaskatu 15, Rata 3 C 31, 87100 Kajaani

Contact person in matters concerning the register
Petri Aikio, tel +358 40 543 2858, petri.aikio [at] normaint.fi

The purpose and legal basis of the processing of personal data

Customer register
The personal data is collected only for specified, explicit and legitimate purposes. The data is collected for maintaining customer relationships and providing services. The legal basis for processing personal data is fulfilling contractual obligations.

Marketing register
The personal data is collected for specified, explicit and legitimate purposes for legitimate interest of the controller. The controller has the right to engage in marketing activities.

Employee register
The personal data is collected for specified, explicit and legitimate purposes. The data is collected for the purpose of maintaining employment relationships. The legal basis for processing personal data is fulfilling contractual obligations. Disclosure of personal data is obligatory for the fulfillment of employer obligations. The failure to provide personal data may prevent the employer from fulfilling the legal obligations of employment or employment contract.

Recruitment register

The personal data is collected for specified, explicit and legitimate purposes, to process and manage the tasks related to the job application and recruitment process.

Categories of personal data in the register

Customer register
The register includes personal data of the controller’s customers. This includes name, address, email, phone number and other data required to manage the customer relationship.

Marketing register
The marketing register includes customer contact information, including name, email and phone number.

Employee register
The register includes the controller’s employees’ data, including name, contact information, personal identification number, bank details and other data required to manage the employment.

Recruitment register
The register includes job applicants’ data, including name, contact information and other data given in the job application.

Regular data sources

Customer register
The customer register data is collected from the data subject.

Marketing register
The personal data in the marketing register is collected from the data subject or from public sources, such as company contact information on their website and address registers.

Employee register
The data in the employee register is collected from the employee.

Recruitment register
The data in the recruitment register is collected from the applicant.

Regular disclosure of data

Customer register
No regular disclosure of data.

Marketing register
No regular disclosure of data.

Employee register
The data in the employee register is disclosed to the accounting partner company offering payroll services and to the insurance company, related to the insurances of the controller’s employees.

Recruitment register
No regular disclosure of data.

Transfer of data outside the EEA area
There is no transfer of data outside the EEA area.

Profiling and automated decision-making

There is no profiling and automated decision-making with the register’s data.

Data retention period

Customer register
Customer data is stored according to the time set the contract defined with the customer.
Marketing register
The data in the marketing register is removed when there is no longer a business reason to keep it, or if the data subject asks to remove their data.

Employee register
The personal data in the employee register is removed after the employment and the legitimate obligation to provide a certificate of employment ends. Data related to the ability to work or health is removed when related payments have been paid.

Recruitment register
The personal data in the job application is handled for the duration of the recruitment in question, and stored for a year after the recruitment. Data in open applications is stored for 6 months.

Data subject rights
The data subject has the right to access and check all data relating to them and the right to the rectification of erroneous data.

The data subject has the right to demand the erasure of personal data or interruption of processing personal data, when there no longer are grounds to process it.

The data subject has the right to object to processing their personal data or using it for marketing or profiling.

The data subject shall have the right to obtain from the controller their personal data given by them, in commonly used and machine-readable format, and the right to transfer this data to another controller’s register.

Requests of data subjects in exercise of their rights shall be delivered to the controller’s contact person signed and in written form.

The data subject shall have the right to lodge a complaint with a supervisory authority in the member state where they are resident in or have their employment in, or where the alleged data protection breach took place.

We use cookies on our site

A cookie is a small text file to be sent to and stored on a user’s computer, enabling, for example, the basic functionality of the site. Cookies do not harm users’ terminal devices or files. You can disable cookies or set a browser alert for cookies. For instructions on managing and deleting cookies, for example, see aboutcookies.org.

Website visitor statistics

This website uses the Google Analytics Visitor statistics service as well as the related target group and interest reporting.

Google uses this information on behalf of a web site to evaluate the use of the page, to provide web site traffic reports to web site vendors and to provide web site providers with services related to other websites and websites.

Google Analytics anonymous visitor statistics is based on purely technical information provided by your browser and your web connection, and this statistic does not provide information about yourself as a visitor. Demographic and interest reporting also collects personal statistics, such as age and sex, and information about your interests, in addition to technical statistics.

You can block the collection and use of data from Google (cookies and IP addresses) by downloading and installing the browser plug-in available here: https://tools.google.com/dlpage/gaoptout?hl= en or using other blocking tools for ads and tracking.