Updated 4 Aug 2019
How do we use the personal data we collect?
We may collect your data to:
create or maintain customer relationships;
offer services, products, or other legitimate interests to you;
develop our services, products, or other legitimate interests;
fulfil requirements of a contract to which you are a party, or to take steps to create such a contract;
fulfil requirements of any legal obligations that we are a subject for; or
pursue any other legitimate interests that do not override your interests or fundamental rights and freedoms that require protection of your data.
What personal data do we collect?
We may collect your:
contact details (such as name, email address and phone number);
company details (such as company name, position and website);
deal details (such as deal amount);
communication details (such as chat transcripts, and memos); or
customer relationship details (such as lifecycle stage and status).
We may also collect any details that accumulate during a customer relationship.
How do we collect personal data?
We collect personal data about you:
from publicly available sources (such as company website or LinkedIn);
from yourself as part of our communication or as you use our products or services;
from shared partners, shared service providers, or other shared third parties;
or from your representative.
What is the legal basis for collecting personal data?
There is always a legal basis for collecting and processing your data. The legal basis for processing your data may be a freely given consent from you, performance of a contract, or fulfilment of our or a third party’s legitimate interest. These interests may be, for example, offering our services or products. However, these interests cannot override your interests or fundamental rights and freedoms that require the protection of your data.
Who can access, control, and process personal data?
The data is accessible by the CEO of Koskinen Family Business Oy (Matias Koskinen). In the event of his death, trusteeship or other force majeure, your data will be accessible by the business’ board.
Some parts of the data processing have been outsourced to third parties. We do our best to ensure that the chosen data processors have appropriate security measures to protect your privacy and to comply with any applicable legislation. These security measures may include the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks or something similar.
Your data may be processed by any number of the following third parties:
WhatsApp Ireland Ltd. WhatsApp Legal Info.
Or any other software you choose to communicate with us.
Your data is not transferred elsewhere unless the performance of a contract that you are a party, other legal obligations that we are a subject, or a public authority demands otherwise.
How is personal data protected?
Your data is protected with appropriate security measures. The computers that are used to access your data have been encrypted. The access to the data processing services has been protected with two-factor authentication measures where applicable and with very secure passwords. Also, a VPN connection is used wherever possible to connect to these services.
Is personal data transferred internationally?
Your data may be transferred outside of the EU or ETA by the third parties described above. It is likely that some parts of their data processing processes do transfer the data internationally. However, we have done our best to ensure that these third parties have their data servers within EU or ETA, or have appropriate security measures to transfer your data internationally.
What are your rights to access and control your data?
You have the following rights regarding your data:
You have a right of access—you have a right to know whether we collect, control, and process your data or to know what personal data we collect, control, and process about you.
You have a right to rectification—you have a right, without undue delay, to rectify inaccurate, expired, or incomplete data about you.
You have a right to restrict processing—you have a right to restrict what personal data we process about you, how long we are consent to process it, and in what ways we are consent to process it.
You have a right to data portability—you have a right to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
You have a right of erasure—you have a right, without undue delay, to ask for erasure of your personal data unless the processing is necessary for any legal obligations that we are a subject for, or for the performance of a contract to which you are a party.
You have a right to object—you have a right to object to the processing of your data unless we have a compelling legitimate ground for processing data which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
You have a right to appeal to a Data Protection Authority—you have a right to appeal to the Office of the Data Protection Ombudsman.
You can exercise these rights by contacting us with the steps below.
However, if the changes result in the expiration of the legal basis for collecting, controlling and processing your data, we make sure that the legal basis for collecting, controlling and processing your data is restored. Otherwise, your data will be deleted according to all applicable privacy laws and regulations.
How can you contact us about your privacy?