Data Protection Policy – Customer relations

Date: 29th June 2021

CONTROLLER

Black Donuts Engineering Oy
Business ID: FI2352555-5

CONTACT PERSON FOR REGISTER QUERIES

Marko Ylitolva
Head of ICT
Myllyhaantie 6 E
33960 Pirkkala
Finland
firstname.lastname@blackdonuts.com

NAME OF The personal data file

Black Donuts Engineering’s Customer and Marketing register

PURPOSE OF PROCESSING THE PERSONAL DATA

The primary grounds for processing personal data is a customer relationship between Black Donuts Engineering Oy and the data subject’s employer, Black Donuts Engineering’s justified interest (marketing purposes) or the data subject’s consent.

Personal data in Black Donuts Engineering Customer and Marketing register may be processed for the following purposes:

Managing, developing, targeting and monitoring marketing, communications and sales activities of Black Donuts Engineering.

Analyzing customer relationships and customer service.

Analyzing, grouping, reporting and other purposes relating to development of customer relationship and Black Donuts Engineering’s business.

Collecting and processing customer feedback.

Implementation of marketing research and opinion surveys.

Processing tasks can be outsourced to external service providers in accordance with and within the limits set by the data protection legislation.

REGISTER’S DATA CONTENT

Information stored on the data subject may include, for example, the following:

Name, position, language, telephone number, e-mail address and other necessary contact information of the contact person

Information on mailing lists

Information on offering, purchasing or using services as well as on marketing and sales.

Other information relevant for maintaining and improving customer relationship.

STORAGE TIME OF PERSONAL DATA

The data will be stored in Black Donuts Engineering’s Customer and Marketing register unless the data subject’s employer terminates its customer relationship with Black Donuts Engineering and/or the data subject has prohibited direct marketing. In such case the prohibition of direct marketing will be maintained in the register.

REGULAR SOURCES OF INFORMATION

Information is received primarily from the following sources:

The data subject themselves.

Black Donuts Engineering’s interest groups and external service providers, such as database service providers and public registers.

REGULAR DISCLOSURE OF DATA AND THE RECIPIENT GROUPS

Data will not be disclosed to parties other than those participating in the production, development or maintenance of services or communications of Black Donuts Engineering, except when based on an agreement, separate consent and/or explicit regulations.

TRANSFER OF DATA OUTSIDE THE EU OR THE EEA

The data will not be handed over outside the company or transferred outside the EU or the EEA.

PRINCIPLES IN ACCORDANCE WITH WHICH THE DATA FILE HAS BEEN PROTECTED

Material can only be accessed by employees, practitioners or co-operation partners specifically entitled to do so with a personal user ID and password.
The servers and backup files are in premises that are locked and have passage control.

RIGHTS OF THE DATA SUBJECT REGARDING THE PROCESSING OF PERSONAL DATA

The data subject has the right to inspect what information on him or her has been stored
The data subject also has the right to demand rectification or erasing of data or a restriction on processing data.

If the personal data is being processed on the basis of the data subject’s consent, the data subject has the right to cancel the consent. The data subject has the right to access such data mainly in machine-readable format and the right to transfer such data to another controller.