Privacy Policy, Business partner register

Personal Data Act (523/1999) section 10

Date of drafting: 24.5.2018
Updated: 15.08.2019

Rockrobot Oy Business partner register

Rockrobot Oy

org nr/VAT ID: FI25831337

Visitor address: Skaffarinkatu 7, 32800 KOKEMÄKI, FINLAND

Postal address: Vesimyllynkatu 2, 33310 TAMPERE, FINLAND

The purpose for processing the personal data / the purpose for the use of a register is to develop and maintain potential and present business partnerships. This is based on the following prerequisites in the personal data act 523/1999 8§.

This business partner register may include one of the following data or all of them: the name of a person, the name of a company or organisation that he/she represents, phone numbers, addresses (visitor, postal, construction site/work area, delivery, e-mail, social media addresses), title, contact type (present/potential partnership etc), description of business partnerhip related tasks and equipment.

Regular sources of information are business partnership related contacts (meetings, phone, e-mail, social media, Outlook, Messenger and other similar messaging applications, contacts using web contact sheet).

The business partner register data is not delivered to other organisations or individuals.

Data is transferred outside the European Union and the Europen Economic Area, because most of the equipment and applications are manufactured and controlled outside the European Union. For example mobiles, that are used to contact business partners, have applications, which use servers outside the Europe and which may read address book, pictures and other information in the phone. During updates data may be transferred due to backups.

A. Manual register
Manual register is held in a locked storage cabinet. Only the authorized people in the company can access the cabinet.

B. Data register
Communication devices, that are used to contact the contact business partners, read or process the personal data, have a password or a PIN enquiry or another means of restricting unauthorized users to access the data. They are connected only to known networks, that have a firewall enabled. The communication devices have a security software installed. Part of the register is located in Finland in premises that fulfill the requirements set by Finnish Communications Regulatory Authority according to 48A/2003 concerning “Important premises”. It defines the demand for physical protection of communication network against fire, water and burglary. The network is also protected by a firewall. The other parts of register are also located in Finland. The server is protected by a firewall and the server lies in Level 2 segmented network. Only the authorized people can access these servers.

Most of the devices and the installed applications are manufactured and controlled outside the European Union. For example mobiles, that are used to contact business partners, have applications, which use servers outside the Europe and which may read address book, pictures and other information in the phone. Data may be transferred during updates due to backups.

This right of subject access means that you can make a request under the Data Protection Act to any organisation processing your personal data. Concerning this sponsorship register you can do that by sending a written request to register’s contact person (see 2. in this file) including your full name, address and contact telephone number; any information used by the organisation to identify you (account numbers, unique ID’s etc), details of the specific information you require and any relevant dates, for example emails in a specified time frame.

You have the right to demand the correction of incorrect or inaccurate data related to you in this register. Concerning this sponsorship register you can do that by sending a written correction request to register’s contact person (see 2. in this file) including your full name, address and contact telephone number; any information used by the organisation to identify you (account numbers, unique ID’s etc), details of the specific information you require to be changed, a correction and any relevant dates.

You can deny partly or entirely the use of your personal data for example for marketing.