Privacy policy

This is the register and privacy statement of autonlaturit.com / PJ-Yhtiöt Oy in accordance with the EU General Data Protection Regulation (GDPR). Prepared 12 May 2023. Last updated 12 May 2023.

1. Data controller

PJ-Yhtiöt Oy
Vatsoilantie 26
37500 Lempäälä
Business ID (Y-tunnus): 3217662-5

2. Contact person responsible for the register

Peter Joukainen / +358 50 547 5954 / info@autonlaturit.com

3. Name of the register

autonlaturit.com customer register

4. Legal basis and purpose of processing personal data

The legal basis for processing personal data under the EU General Data Protection Regulation is:

• the data subject’s consent.

The purpose of processing personal data is to communicate with customers, maintain the customer relationship and for marketing. The data are not used for automated decision-making or profiling.

5. Contents of the register

The register may contain the following information: person’s name, position, company/organisation, contact details (telephone number, email address, postal address), website addresses, IP address of the web connection, social media account/profile identifiers, information about services ordered and any changes to them, invoicing/billing information, and other information related to the customer relationship and ordered services.

IP addresses of website visitors and cookies necessary for the functioning of the service are processed on the basis of legitimate interest for purposes such as maintaining security and collecting visitor statistics where such information may be considered personal data. Consent for third-party cookies will be requested separately where required.

6. Regular sources of data

Information stored in the register is obtained from the data subject, for example via messages sent through website forms, by email, by telephone, via social media services, through contracts, customer meetings and other situations in which the customer provides their information.

Contact details of persons representing companies and other organisations may also be collected from public sources such as websites, directory services and other companies.

7. Regular disclosures of data and transfers outside the EU/EEA

Data are not disclosed regularly to other parties. Data may be published to the extent agreed with the customer.

The controller may transfer data outside the EU or EEA. Data will not be transferred to the United States without the explicit consent of the data subject.

8. Principles for protecting the register

The register is handled with care and information processed in information systems is protected appropriately. Where register data are stored on Internet servers, appropriate physical and digital security measures are taken for the hardware. The data controller ensures that stored data as well as server access rights and other information critical to the security of personal data are treated confidentially and only by those employees whose job duties require such access.

9. Right of access and right to rectification

Every person in the register has the right to check the personal data stored about them and to demand correction of any inaccurate data or completion of incomplete data. Requests to inspect or correct personal data should be sent in writing to the data controller. The data controller may, if necessary, request that the requester prove their identity. The data controller will respond to the data subject within the timeframes set out in the EU GDPR (generally within one month).

10. Other rights related to processing of personal data

A data subject has the right to request deletion of their personal data from the register (“right to be forgotten”). Data subjects also have other rights under the EU GDPR, such as the right to request restriction of processing in certain circumstances. Requests should be submitted in writing to the data controller. The data controller may, if necessary, request that the requester prove their identity. The data controller will respond to the data subject within the timeframes set out in the EU GDPR (generally within one month).