1. Data controller
Name: Kokonat Oy (3000238-1)
Address: Bertel Jungin aukio 1, 02600 Espoo
Email: info@kokonat.fi
2. Contact person for the register
Name: Johanna Dietrich, Kokonat Oy
Contact details: info@kokonat.fi
3. Name of the register
Kokonat Oy's customer and stakeholder register
4. Purpose and legal basis for processing personal data
Personal data received through the form is used to provide our services, manage customer relationships and communicate with you.
The legal bases for processing personal data are the following grounds under the EU General Data Protection Regulation (hereinafter the “GDPR”):
- the data subject has given consent to the processing of their personal data for one or more specific purposes (Article 6(1)(a) GDPR);
- processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR);
- processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (Article 6(1)(f) GDPR).
The controller’s legitimate interest referred to above is based on a relevant and appropriate relationship between the data subject and the controller, resulting from the data subject being a customer of the controller, and where processing is carried out for purposes that the data subject could reasonably have expected at the time of collecting the personal data and in connection with the appropriate relationship.
5. Contents of the register and planned retention period
The personal data register may contain the following information:
- Contact details, such as the person's first and last name, telephone number and email address
- Basic information related to employment or position
- Organisation
- Information related to interaction between Kokonat Oy and data subjects, such as order details and communication between the parties. In addition, other information provided by the data subject may be stored.
6. Retention period for personal data
The information is retained for as long as necessary to fulfil the purpose for which it was collected in accordance with this privacy policy.
The information is deleted at the request of the data subjects.
7. Regular data sources
The information stored in the register is obtained from customers, for example through messages sent via online forms, by email, by telephone, through social media services, from contracts, customer meetings and other situations in which the customer provides information.
Contact details of people representing companies and other organisations may also be collected from public sources such as websites, directory services and other companies.
8. Disclosure of data and transfer of data outside the European Union or European Economic Area
Kokonat Oy does not disclose register data to parties outside the company. The data is also not transferred outside the European Union or the European Economic Area.
9. Data security principles
Care is taken when processing the register, and data processed using information systems is protected appropriately.
The controller ensures that stored data is processed confidentially and only by employees whose duties include processing it.
10. Data subjects’ rights regarding the processing of personal data
Right of access
Data subjects have the right to inspect what information concerning them has been stored in the register. An inspection request must be sent to info@kokonat.fi. If necessary, the controller will ask for additional information to identify the data subject.
The response to an inspection request is sent to the person who made the request by email, unless the data subject asks for the information to be sent in another way.
Kokonat takes care of the quality of the personal data it processes. Incorrect data is corrected and unnecessary data is deleted on the controller’s own initiative or at the request of the data subject.
Right to request erasure
Data subjects have the right to request the deletion of their personal data. Data subjects always have the right to object to direct marketing by sending an email to info@kokonat.fi.
Right to lodge a complaint with a supervisory authority
Data subjects have the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates the EU General Data Protection Regulation.