Privacy Policy

1. Data Controller

Rope Access Finland Oy
3193156-1
Paakakatu 7, 90520 Oulu

2. Contact Person for Data Protection Matters

Wille Seitamo
info@ropac.fi
+358 45 676 3932

3. Name of the Register

Customer Register

4. Legal Basis and Purpose of Processing

We process personal data for the following purposes:

• Managing customer relationships
• Developing services, statistics and direct marketing.

5. Data Content of the Register

The following information may be stored:

• Name, company
• Address, telephone number, email address

6. Regular Sources of Data

Data is regularly collected:

• Directly from the data subject when entering into an agreement, placing an order or contacting us.
• Through the website using forms or cookies.

7. Regular Disclosure of Data and Transfers Outside the EU or EEA

Data is not disclosed to third parties for marketing purposes. Data is not transferred outside the EU or EEA.

8. Principles of Data Protection

Personal data is processed with due care and protected appropriately:

• Digital material: data is stored in systems protected by firewalls and passwords. Access is limited to persons who need the data for their work.
• Manual material: paper documents are stored in locked premises accessible only to authorised persons.

9. Data Retention Period

We retain personal data only for as long as necessary for the purposes described in this policy:

• Customer data is retained for as long as it is necessary for managing the customer relationship. Once the customer relationship has ended, the data is deleted when there is no longer a justified purpose for its use.
• Accounting material is retained for the statutory period of six years after the end of the financial year.

10. Rights of the Data Subject

The data subject has the right to:

• Access personal data stored about them.
• Request correction of inaccurate or incomplete data.
• Request deletion of their data (“right to be forgotten”) where there is no lawful basis for processing.
• Object to or restrict processing (e.g. direct marketing).
• Lodge a complaint with the Data Protection Ombudsman if they believe their data is being processed unlawfully.

Requests concerning these rights must be submitted in writing to the contact person specified in section 2.