Updated 30.5.2018
This document is a description of the processing of (a registered’s) personal data stored in Gasre’s customer and marketing register. It is in accordance with the EU General Data Protection Regulation.
Table of contents
Controller
Personal data processing and legitimacy
Processed data (information obtained from third party / non-registered user)
Transfer of personal information and data disclosure
Retention period of personal data
Rights of the data subject
Changes to this Privacy Notice
Controller
Gasre Oy
Contact information:
Gasre Oy
Kumitehtaankatu 5
04260 Kerava
FINLAND
p. +358-40-5546355
info@GASRE.com
Personal data processing and legitimacy
The collected personal data is used for maintaining customer information, billing, carrying out projects, project related communication, maintaining and developing potential customer relationships, processing contact requests, and direct marketing.
Legal basis for data processing: The legitimacy of processing personal data is based on the agreement between the customer and Gasre and its implementation. With regard to the marketing register, the legal basis is the customer’s consent and Gasre’s legitimate interest to approach customer candidates with direct marketing purposes.
All and any personal information processed by the customer register has been obtained solely from the registered customers themselves.
The sources for data in the marketing register are contact forms and search engines.
Profiling and automatic decision making
There is no profiling of personal data to evaluate personal qualities of the data subjects. There is no automatic decision-making process whereby decisions with legal effects or other significant effects to the data subjects would be made that would be based solely on automated data processing.
Processed data (information obtained from third party / non-registered user)
We maintain, manage and process the following information for marketing purposes:
- Company name and address
- Contact person’s name, email address and phone number
Transfer of personal information and data disclosure
Personal data is transferred to billing software, accounting software and to the subcontractor responsible for accountancy when necessary.
Data processing takes place in its software that is located on a subcontractor’s server in Finland (Nebula).
Data will only be used for Gasre’s own and statutory needs. Data will not be disclosed to third parties. Data will only be processed within the EU.
Retention period of personal data
The data collected on the basis of the privacy notice is stored for a minimum of six (6) years based on accounting legislation.
The personal information provided in the contact forms / contact requests will be stored until the conclusion of the request.
In the marketing register, data is stored for six (6) years.
Rights of the data subject
The data subject has the right to inspect and rectify the personal data concerning him or her that has been stored in the personal data register.
The data subject has the right to access and rectify the personal data concerning him/her. The data subject has a right to request the deletion of his/her personal information any time, unless the requrements of the law prevent personal data from being removed.
The data subject can excercise these rights by sending a request to info@gasre.com.
The data subject has a right to withdraw his/her consent to direct marketing, which can be done by contacting the email address mentioned above under ”Controller”.
Right of appeal to data protection officer
The data subject has the right to file a complaint with the supervisory authority or with the data protection officer of the Member State of the European Union where the data subject is a resident or where his/her workplace is located, if the data subject considers that the personal data has not been processed in accordance with applicable data protection legislation.
Changes to this Privacy Notice
This privacy notice is subject to updates as services evolve and legislation changes. Data subjects will be informed of all major privacy notice and terms of service updates.
