1. Data controller
Name: VAK Oy
Business ID: 0636524-6
Address: Paattistentie 57, 21310 Vahto, Finland
2. Contact person for issues concerning the register
Name: Matti Niemelä
Phone: +358 20 7656 321
3. Name of the register
VAK Oy’s customer register.
4. Purpose for processing personal data
The data provided by the data subject is used for the identification and service of the customer. The overall personal data is used for the management and development of the customer relationship.
5. Data content of the register
The data content of the register is determined by the data collected by the forms on the website. The data subject’s personal consent is used as the legal basis for the collection of all data in the register. The register includes the following personal data as per each form:
Contact form: name and email address
Spare parts’ order form: first name, last name, email address and email address for the order confirmation of the spare parts, phone number, invoicing address, delivery address and trailer registration plate number
Customer magazine subscription form: name, postal address, postal code and city
6. Regular data sources
Personal data is collected via the forms on the data controller’s website.
7. Regular disclosure of data
Personal data is processed by the data controller as well as personal data processors on behalf of the data controller. Personal data is not disclosed to third parties, with the exception of regulatory entities in legal circumstances.
8. Transferring data outside the EU or the European Economic Area
The data of the customer register shall not be disclosed to third parties other than the data controller and personal data processors. The servers used for processing data are owned and managed by a third-party service provider outsourced by the data controller. The service provider outsourced by the data controller is responsible for ensuring that the data remains in the EU or the European Economic Area.
9. Retention of personal details
Personal data is stored for as long as it is necessary. Unnecessary data shall be deleted.
10. Protection principles of the register
The service provider of the website server outsourced by the data controller is responsible for the appropriate protection of the server.
The actual register is also owned and managed by the third-party service provider, and the service provider is responsible for the technical protection of the register. The actual register is subject to identification.
11. The data subject’s right to rectify, review and prohibit data
The data subject has the right to review what data has been stored about them in the customer register. The right to review can be exercised free of charge on an annual basis. The data subject also has the right to request for their data to be rectified or deleted.
The request to rectify, review or prohibit data must be made in writing to the contact person of the register, and the identity shall be confirmed with an official and valid photo ID document.
The data controller’s website uses its own cookies and third-party cookies to improve user-friendliness. The cookies collect information, for example, about visits and activity of visitors on the website. Some cookies may be mandatory in terms of the data controller’s website functionality.
13. Third-party services and registers
Third-party services may collect information about visitors in accordance with their prevailing terms and conditions.