Privacy policy
DATA CONTROLLER
Amos Attorneys at Law Oy, Business ID: 2997843-2
Annakatu 29 A 7, 00100 Helsinki
045 1115577
CONTACT PERSON FOR MATTERS CONCERNING THE REGISTER
Tuula Rainto
Annakatu 29 A 7, 00100 Helsinki
[email protected]
THE PURPOSE OF PROCESSING PERSONAL DATA
We only collect and process personal data that is necessary for the operation of our business, the management of the customer relationship and for relevant commercial purposes. Data subjects have a customer relationship with amoslaki.fi.
Information about the customer is obtained on a regular basis:
- from the customer via the internet, by telephone, by using a loyalty card, by e-mail or by any other similar means; and
- using cookies or other similar technologies. We process your personal data for the following purposes.
Service delivery and customer relationship management
We process personal data primarily to provide and market our services and products to you or the company/entity you represent. In order to do so, we maintain and manage the customer relationship between you or the company/entity you represent and us. In this case, the processing of personal data is based on a contract between you or the company/entity you represent and us.
Service and product development, security and internal reporting
We also process personal data to ensure the security of our services, products and website, to improve the quality of our services and website and to develop our services and products. We may also use personal data to compile internal reports for management and our various business units for the proper management of our business. We segment our customers for marketing purposes based on, for example, their use of our services and/or their behaviour on our website. In these cases, the processing of personal data is based on our legitimate interest in ensuring the appropriate security of our services and websites and in obtaining sufficient and relevant information to develop our services and manage our business.
Complying with the law
We may process your personal data in order to fulfil our legal obligations, for example in relation to accounting or to comply with requests for information from public authorities (such as the tax authorities).
Customer profiling
We collect statistics, such as on-site usage of services and when you visit our website, for customer segmentation to help us improve our sales processes and services and products.
Marketing
We may contact you to tell you about new features of the service or to market and sell you other services. We may also process your personal data for marketing research and customer surveys. The processing of personal data is based on our legitimate interest in providing information as part of the Service and to market our other services to you. You have the right to object at any time to the processing of your personal data for direct marketing purposes (see the section of this notice entitled ”Your Rights”).
THE CONTENT OF THE REGISTER
Your personal data may be collected in different ways. As a general rule, we collect and process personal data that:
- you have given us when you communicate or deal with us, for example, when you purchase or register for our services, subscribe to our newsletter or contact us to request a quote or information,
- are generated when you use the service or visit the website, for example, when you log in to the service and
- from other sources, to the extent permitted by applicable law, such as the Register of Commerce, the Population Information System, the Business and Community Information System or the Postal Address Information System, without limiting the sources to those listed above.
You are not obliged to provide us with your personal data, but if you choose to do so, we may not be able to provide our services to you.
For example, we collect and process the following categories of personal data:
- basic information such as name, contact details (email address, address and telephone number, gender, age), name and business ID of the organisation and the language used,
- customer relationship information, such as service and/or product and order information, payment information, billing information, marketing authorisations and prohibitions,
- customer contacts and related correspondence and records of data subjects' rights,
- personal data generated by the use of our service or collected in connection with the use of our website, such as usernames, passwords, identification data, log data relating to the use of the service, data collected from our website using cookies or similar technologies (device ID and type, operating system and application settings) and other information as determined on a case-by-case basis, based on your consent, including, where applicable, information necessary to provide the service.
TRANSFERS AND DISCLOSURES OF PERSONAL DATA
We may disclose personal data to other companies within our group to the extent permitted by applicable law for the purposes described in this Privacy Notice, including for marketing their products and services. Personal data may also be transferred between group companies for internal administrative purposes, such as for reporting purposes and to run our business efficiently, such as to operate our centralised information and communication systems. The transfer of personal data within the Group is based on our legitimate interest in conducting our business and managing our customer relationships effectively and informing customers about the services of other Group companies.
We may also disclose personal data to third parties:
- to the extent permitted or required by law, for example, to comply with a request for information made by a competent authority or in connection with legal proceedings,
- when our partners process personal data on our behalf and in accordance with our instructions. We will always ensure that your personal data is processed properly,
- if we are involved in a merger, acquisition or sale of a business or part of a business,
- when we believe disclosure is necessary to exercise our rights, protect your safety or the safety of others, investigate wrongdoing or respond to a request from a public authority,
- if your user information is subscribed to and/or linked by and/or to your employer's data, we will, for example, share your performance data with designated contact persons; and
- with your consent, to the parties to whom the consent applies.
The data will not be disclosed or transferred/transferred outside the EU or the European Economic Area.
PRINCIPLES OF REGISTER PROTECTION
Personal data will be kept confidential and only for as long as necessary to fulfil the purposes of use specified in this notice.
The data network and the hardware of the controller and its possible IT partners on which the register is located are protected by firewalls and other necessary technical measures.
Personal data is stored for the duration of the customer relationship. Personal data may also be stored, where necessary, after the end of the customer relationship to the extent permitted or required by applicable law. For example, after the end of the customer relationship, we typically retain personal data that is necessary to respond to claims or lawsuits under applicable statute of limitations provisions. We may also, for example, retain personal data to the extent necessary to comply with a direct marketing injunction you have given us and to develop our services.
Personal data will be deleted when its retention is no longer necessary to fulfil the law or the rights or obligations of either party.
YOUR RIGHTS
You have the right to inspect your personal data. You may also request at any time that your personal data be corrected, updated or deleted. Please note, however, that personal data that is necessary for the purposes of the use specified in this notice or that is required to be kept by law cannot be deleted.
You have the right to object to or restrict the processing of your personal data to the extent required by applicable law.
When we process your personal data on the basis of consent, you have the right to withdraw your consent at any time. We will not process the personal data thereafter unless there is no other legal basis for the processing.
You can exercise your rights by sending a request to us at [email protected] or by visiting our office.
The data subject has the right to check what data concerning him or her has been recorded in the register. The request for inspection should be sent in writing to the person responsible for the register or by presenting a request for inspection at our office.
INFORMATION SECURITY
We take appropriate measures (including physical, digital and administrative measures) to protect personal data against loss, destruction, misuse and unauthorised access or disclosure. For example, personal data is only accessible to persons who need it for the performance of their duties.
Please note that even appropriate measures cannot prevent all possible security breaches. In the event of a personal data breach, we will notify you in accordance with applicable laws.
EVIDENCE
We use cookies and similar technologies on our website. Cookies are small text files placed on your device to collect and remember useful information to improve the functionality and usability of our website. We may also use cookies and other similar technologies for statistical purposes, such as compiling statistics about the use of the website to understand how users use the website and to improve the user experience.
You can block the setting of cookies, restrict the use of cookies or delete cookies from your browser. As cookies enable our website to function, restricting the use of cookies may affect the usability of the website.
AMENDMENT OF THE SUMMARY
We reserve the right to change this leaflet.
CONTACT US
You can ask questions about this notice or the processing of your personal data by contacting us at [email protected] or by visiting our office.
Updated 10.10.2019
