Privacy Policy
Newsletter policy
By joining Finn-Korkki’s newsletter service, you will receive newsletters up to 6 times a year. Any personal data received from you is only used in Finn-Korkki and is not passed on or sold to any third party. A third party may be used to process the data.
In cases where a subscriber wishes to unsubscribe to the Finn-Korkki Newsletter, this will be done immediately and unconditionally. You can unsubscribe from the newsletter by clicking on the link at the end of every newsletter or contact Finn-Korkki Oy.
Personal Data Policy
Any personal data received, for example from a business card or by submitting a web form, is controlled and processed by Finn-Korkki Oy and is not passed on or sold to any third party. The data may however be processed by a third party on Finn-Korkki’s behalf, for example by a cloud-based service. Personal data collected is kept to a minimum for the purpose of marketing, sales and aftersales service to our customers and prospective customers. Personal data may be collected for commercial purposes from agents, suppliers and other stakeholders.
Finn-Korkki Oy has not appointed a data protection person. You can request a copy of your personal data, correction of your personal data, destruction of your personal data or ask questions by contacting Finn-Korkki Oy. Our contact details are:
This email address is being protected from spambots. You need JavaScript enabled to view it.
What is personal data?
Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data.
Examples of personal data used by Finn-Korkki are: first name, surname, postal address, an email address such as This email address is being protected from spambots. You need JavaScript enabled to view it., location data, an Internet Protocol (IP) address, a cookie ID, the advertising identifier of a device.
See these webpages for a more detailed list of what is personal data.
https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-personal-data_en or
https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-personal-data_fi
Finn-Korkki is the controller of the personal data and in this role processes personal data. Third parties may be used to process personal data, for instance email providers, CRM providers and software as a service providers. In this role the third party is the processor of personal data.
What is processing?
Processing covers a wide range of operations performed on personal data, including by manual or automated means. It includes the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
A lawful basis for collecting data
The GDPR aims to strengthen individuals’ rights and freedoms related to their personal data, requiring organisations to identify and document a lawful basis for collecting personal data. There are several different reasons for collecting personal data. Here are reasons Finn-Korkki legally collect personal data.
- Consent: you give us permission to collect and use some of your personal data for a specific reason, for example, opting in to receive the Finn-Korkki newsletter. You can withdraw consent whenever you want.
- A contract: personal data is collected to fulfil the obligations and responsibilities of a contract, for example, to supply goods or services. This is called 'performance of contract'.
- Legitimate interests: This means we can collect and use your personal data for legitimate business reasons. For instance, Finn-Korkki has a genuine and legitimate reason, including commercial benefit, to process personal data without consent. Provided it is not outweighed by negative effects to the individual’s rights and freedoms.
- Compliance with a legal obligation: when processing data for a particular purpose is a legal requirement, like a court order or to fulfil the requirements of a law.
Regulation demands the lawful basis is recorded.
Personal data received is initially recorded under the lawful basis of legitimate interest. Later the lawful basis may come to include performance of contract or / and consent. The lawful basis of consent is always for a specific purpose.
Security of personal data
Personal data is processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or / and organisational measures.
Transparency
Finn-Korkki for the purposes of transparency have described above how personal data is collected and used. Personal data is kept until there is no commercial benefit in keeping the personal data, this can be indefinitely. When a request to delete personal data is received the personal data is deleted in a reasonable time. However, it may be necessary to retain a copy of your personal data to meet legal obligations.