This is a translation of our privacy policy. Our binding privacy policy is the Finnish version, which you can find at: https://roadari.fi/tietosuojaseloste/
This notice contains the information required by Articles 13 and 14 of the EU General Data Protection Regulation (2016/679) about the personal data we process in relation to our roadari.fi website (the “Service”).
1.
Roadari Oy
Business ID: 2536172-6
Address: Hämeentie 19
00500
Domicile: Helsinki
Data protection contact person: Nina Westerlund
E-mail: nina.westerlund@roadari.fi
2. Categories of data subjects
This notice applies to personal data that we process about users of the Service and/or contact persons of business users and other persons whose personal data are processed for the purposes of providing and receiving the Service.
3. Purposes of the processing
Personal data is processed primarily for the purposes of providing the Service and for the purposes of managing and maintaining the customer relationship. The data may also be used to monitor and investigate irregularities and to plan and develop the controller’s business and services. To the extent permitted by law, we may also process personal data for marketing purposes.
4. Legal grounds for processing
The processing of personal data described in this Privacy Statement is based mainly on the implementation of our website service and our legitimate interest in processing personal data for the provision of the Service and for the operation and development of our business. For individual data, processing may also be based on your consent or our legal obligation to process your personal data, for example for tax or accounting purposes.
5. Information processed
We process the following data relating to users:
the name, email address, other contact details and other information provided by the user or contact person, as well as the user’s IP address
usage and contract history, including, for example, information on reservations, orders, and any feedback, contacts, billing and collection
Technical information concerning the use of the Service, such as browsing and search information (e.g. information collected by cookies)
information relating to customer communications, marketing and other communications (including direct marketing prohibitions and consents)
6. Disclosures
The Service is a website service. Placing orders and reservations on the Service may require the disclosure of personal data to third parties who process the data independently for the purposes of fulfilling the order or reservation and for any other purposes they may specify.
In addition, our subcontractors and service providers may process your data to the extent necessary for the performance of the Service. In addition, information may be disclosed to our service providers for routine data processing, financial management and other business services and to competent authorities or other third parties if we believe disclosure is necessary under applicable law or regulation or to exercise or defend our legal rights or protect the vital interests of any person.
As a general rule, the Controller does not need to transfer your data outside the European Union or the European Economic Area in order to provide the Service. However, in individual cases, your data may, to the extent permitted by law, be transferred outside the EU or EEA based on your consent or the need to transfer data in order to perform a contract with you or in your interest, or in other situations permitted by applicable law.
7. Retention of data
Personal data will only be kept for as long as we have a legitimate need to do so for the purposes of the processing mentioned above.
We will regularly assess the existence of such needs in relation to the personal data we hold and, where we consider that the need has ceased, we will delete the personal data from the system or anonymise it, or where this is not possible (for example, where the data is stored in back-up archives), we will store it securely and prevent further processing until it is possible to delete the data.
As a general rule, we will only retain personal data relating to the customer relationship for the duration of the active customer relationship and for a reasonable period thereafter to respond to any queries and contacts relating to the customer relationship. However, to the extent that the data is subject to a retention obligation, for example under accounting or tax law, the data will in any case be retained for a minimum period of time in accordance with that obligation.
8. Data protection
Access to the data is restricted to employees of the controller and service providers who are authorised to access the data on the basis of their duties. The controller shall implement appropriate technical and organisational measures to protect the data against unauthorised access, alteration, disclosure, destruction or other unlawful forms of processing. The controller shall require all service providers it uses to respect confidentiality, appropriate data security and to adhere to the requirements and principles of the applicable data protection legislation.
9. Rights of the data subject
As a data subject, you have the following rights under the applicable data protection legislation:
The right to obtain confirmation from us as to whether we are processing personal data concerning you and, if so, the right to know what personal data we are processing.
The right to ask us to rectify the data we hold about you and, in certain cases, the right to request the erasure of your personal data, the restriction of processing or to object to the processing of your personal data.
The right to opt-out of direct marketing communications that we send to you.
To the extent that the processing of your personal data is based on consent, the right to withdraw your consent to the processing of your personal data at any time.
You can exercise your rights by contacting us using the contact details in this notice.
10.
We may update this Privacy Notice from time to time due to changes in legislation or changes in our business. We will endeavour to inform data subjects of changes in a manner appropriate to their significance.
