Oomi Solar Oy:n markkinointirekisteri
This privacy statement provides data subjects, i.e. Oomi Solar Oy’s potential customers, and the supervisory authority with the information required by data protection legislation on how and why Oomi Solar Oy processes the personal data of its potential customers for marketing purposes.
1 Controller
Oomi Solar Oy
Business ID: 3384654-7
Postal address: Yrttipellontie 1, 90230 Oulu, Finland (No customer service point)
Website: oomisolar.fi
2 Persons responsible for the register and their contact information
Person responsible for the register
Olli Tuomivaara
Data protection officer
Olli Turpeinen
Enquiries about data protection
tietosuoja@oomi.fi
3 Name of register
Oomi Solar Oy’s Marketing Register (Marketing Register)
The register’s data subjects include the contact persons of Oomi Solar Oy’s current and potential corporate customers and possibly the customers of the charging stations.
A company becomes a potential customer when it expresses its interest in Oomi Solar Oy’s services on Oomi Solar Oy’s website, online, by phone, in lotteries, at fairs and events or at a sales point, for example.
4 Purpose and legal basis of the processing of personal data
The purpose of the processing of the personal data contained in the Marketing Register is to offer, sell and market services and products related Oomi Solar Oy’s business as well as ensure, maintain and develop the quality of existing and future services and products.
For the aforementioned purposes, personal data may be processed in order to offer, sell and develop Oomi Solar Oy’s services and products, analyse their use, identify data subjects, compile statistics, implement marketing communications, carry out marketing of the products and services of carefully selected cooperation partners, and carry out opinion polls and market research.
The processing of personal data is primarily based on Oomi Solar Oy’s justified and legitimate interest in communicating and marketing its services in order to promote its business and ensure, maintain and develop its services.
5 Data content of the register
With regard to potential customers, the following data related to data subjects may be processed:
- basic information about the data subject (such as names, address, business ID, ID of the location of use and/or other unique identifier);
- information concerning companies’ contact persons (such as information on the employer and the data subject’s professional status);
- contact information (such as address, phone number and email address);
- information related to the customer account and contracts (such as correspondence and other communication with Oomi Solar Oy, contact recordings and records (such as phone call recordings and email records) as well as information related to marketing);
- information on services and products (such as information provided by the data subject on their interests; cookies and information on their use);
- marketing opt-ins and opt-outs (such as direct marketing opt-out, telemarketing opt-out, electronic direct marketing opt-in);
- any other information collected with the specific consent of the data subject.
6 Regular sources of data
Data concerning data subjects is regularly received from the following sources:
- the data subjects themselves when they request a quote from Oomi Solar Oy (on the website, online, over the phone, in lotteries, at fairs and events or at a sales point) or consent to their information being added to Oomi Solar Oy’s Marketing Register;
- Oomi Solar Oy’s Marketing Register may also collect, record and update data (on company decision-makers) from the registers of bodies such as Suomen Asiakastieto Oy.
Personal data may also be collected and updated from the authorities and other third parties within the limits permitted by the applicable legislation for the purposes described in this privacy statement.
7 Regular disclosures of data and data transfer outside the EU or EEA
For the purposes described in this privacy statement and within the limits permitted and required by legislation, official regulations and instructions issued by industry associations that are in force at the time, personal data may be disclosed to the authorities, property owners and housing managers as well as parties to the supply and sales contract, for example.
Personal data may also be disclosed to cooperation partners carefully selected by the controller (e.g. outsourced customer service or sales partner) for purposes that support the purposes of personal data processing described in the Marketing Register.
The controller may use subcontractors in data processing, and data is transferred outside the EU and EEA to a limited extent. When data is transferred outside the EU/EEA, the transfer is carried out in accordance with the EU-US DPF or another transfer mechanism permitted by legislation.
8 Data retention period
Personal data is collected as part of the companies’ and other organisations’ data. The personal data will be deleted from Oomi Solar Oy’s Marketing Register at the same time as the company’s or organisation’s data is deleted.
The data is deleted in accordance with the deletion processes followed by the controller.
9 Principles of register protection
Personal data is protected by means that are generally acceptable and reasonable in the sector, such as with access passes, training, firewalls and passwords.
Only identified employees of the controller or companies acting on assignment by or on behalf of the controller have access to the personal data processed in the Marketing Register in accordance with the access rights granted by Oomi Solar Oy. Oomi Solar Oy takes into account the applicable legislation, official regulations and instructions issued by industry associations regarding ensuring confidential processing of personal data.
10 Rights of data subjects
Right of access
Pursuant to the General Data Protection Regulation, data subjects have the right to see what data is recorded about them in the Marketing Register. This right of access may be refused on grounds provided by law. Data access requests can be sent by email to tietosuoja@oomi.fi.
Oomi Solar Oy will charge a reasonable amount of compensation for providing the data if the data subject uses their right of access more often than once a year.
Right to object to the processing of personal data
Data subjects have the right, on account of their special personal situation, to object to being profiled and to other processing measures carried out by the controller on the data subject’s personal data in so far as the data processing is based on the controller’s legitimate interest. When making the request, the data subject must specify the special situation based on which they are objecting to the processing. The controller may refuse to fulfil the request concerning the objection on grounds provided by law.
Any requests for the erasure of data should be sent by email to tietosuoja@oomi.fi.
Right to request rectification or erasure of data or restriction of processing
Data subjects have the right to request that Oomi Solar Oy rectify, erase or complete any personal data in the register that is incorrect, unnecessary, insufficient or outdated for the purpose of processing.
Data subjects also have the right to request that the controller restrict the processing of their personal data in situations such as when the data subject is waiting for the controller to reply to their request regarding the rectification or erasure of their data.
Data subjects are personally responsible for the correctness of the data they provide. Data subjects must notify the controller of any changes to the data they have provided. Any requests for rectification or erasure of data or restriction of processing should be sent by email to tietosuoja@oomi.fi.
Right to withdraw consent
If the personal data processing is based on the data subject’s consent, the data subject has the right to withdraw their consent by notifying Oomi Solar Oy of this.
Right to transfer data from one system to another
In so far as the data subject has personally provided the register with data that is processed in order to fulfil the contract between the data subject and Oomi Solar Oy or based on consent given by the data subject, the data subject generally has the right to receive the data in machine-readable format or transfer it to another controller. Any requests to transfer data to another system should be sent by email to tietosuoja@oomi.fi.
11 Filing a complaint with the data protection supervisory authority
If the data subject deems that the processing of personal data is in breach of the applicable legislation or that the data subject’s statutory rights have been infringed upon, they may file a complaint about the matter with the relevant data protection supervisory authority. In Finland, the lawfulness of the processing of personal data is monitored by the Data Protection Ombudsman, whose contact information can be found at the following address: www.tietosuoja.fi/en/home.
12 Changes to the privacy statement
We retain the right to change and update this privacy statement. The up-to-date privacy statements are available on our website at oomisolar.fi/en/privacy-statements/.
3 October 2024