Privacy Policy

PRIVACY POLICY (02.12.2020)

Keeper of the register

The Finnish Research Infrastructure for Public Opinion (FIRIPO)
Finland
kimmo.gronlund@abo.fi

Party in charge of the register

Customer service /The Finnish Research Infrastructure for Public Opinion (FIRIPO)
Finland
kimmo.gronlund@abo.fi

Name of the register

Customer register of The Finnish Research Infrastructure for Public Opinion (FIRIPO)

Purpose and legal basis for the processing of personal data

The purpose of the processing of personal data is to manage and maintain the customer relationship between the company and the corporate customer, as well as for marketing purposes. The data in the register is used for the company’s own direct marketing, unless the customer has prohibited direct marketing.

Purchase and transaction data as well as location data processed in the register can also be used for profiling and for targeting marketing measures and customer communications to the interest of the data subject. The data is also processed in connection with the sending of newsletters as well as participation in events and other marketing activities.

The data is processed to guarantee the controller’s legitimate interest.

If the data subject does not fill in the information requested in the contact form, the controller cannot accept the data subject’s contact form or commit to a contract between the controller and the data subject.

Retention period of personal data

Personal data is stored for as long as it takes to undertake the measures described in the contact form filled in by the data subject. The storage period depends on the information collected, e.g. billing information must be stored for six years according to the Accounting Act. Data submitted via the contact form is stored only with the consent of the data subject.

Description of the group of data subjects and data content

The register contains personal data about the company’s corporate customers.

The data submitted via the contact form by the data subject may include e.g. an e-mail address, phone number or address.

Regular sources of information

The information provided by the contact person and the database of the customer information system and invoicing.

Regular disclosures of information

As a rule, personal data is not disclosed outside the organization. Personal data required by accounting is disclosed to the accounting firm used by The Finnish Research Infrastructure for Public Opinion (FIRIPO).

However, personal data may be disclosed on the basis of a contract between the customer and The Finnish Research Infrastructure for Public Opinion (FIRIPO), a customer relationship between the customer and The Finnish Research Infrastructure for Public Opinion (FIRIPO) or applicable legislation, e.g. to public authorities.

Data is not transferred outside the EU or EEA.

Principles of registry protection

The data is stored in a technically secured manner. Physical access to the data is blocked by access control and other security measures. Access to the data requires sufficient rights as well as multi-factor authentication. Unauthorized access is also prevented by, among other things, firewalls and technical protection. Only the keeper of the register and specifically designated technical personnel can access the register data. Only designated persons are authorized to process and maintain the data in the register. Users are bound by confidentiality. The register data is safely backed up and can be restored if necessary.

Rights of the data subject

The data subject has the right to inspect the personal data concerning him/herself stored in the register and obtain copies of them. The request for inspection must be made in writing and addressed to the party in charge of the register. (see section Party in charge of the register).

The party in charge of the register shall, on its own initiative or at the request of the data subject, rectify, erase or complete personal data contained in the register which are inaccurate, unnecessary, incomplete or out of date for the purposes of the data processing. The data subject must contact the registry department of the Keeper of the register in writing to correct the information (see section Party in charge of the register)

To the extent that the processing of personal data is based on the consent of the data subject, the data subject has the right to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of the data processing carried out prior to the withdrawal.

The data subject has the right to lodge a complaint about the processing of personal data with a supervisory authority.

Cookies

The user can refuse the use of cookies by blocking them in the settings of their own browser. With this policy, we refer to the European Commission’s press release on the simplest rules for the use of cookies.