Privacy Policy
This is a statement on the processing of personal data in accordance with the EU General Data Protection Regulation (679/2016).
Data Controller
Accounting Services Meri-Kärnä Ltd.
Business ID: 2307285-9
Address: Väinöntie 11 A, 01420 VANTAA, Finland
Tel. +358505706089
Email: meri@karna.fi
Contact for Data Protection Matters
Katri Meri-Kärnä
Tel. +358505706089
Email: meri@karna.fi
For all questions related to the processing of personal data and for exercising your rights, please contact the above-mentioned contact person.
Legal Basis and Purpose of Processing Personal Data
The legal basis for processing personal data is:
- Consent given by the data subject for the processing of personal data
- A contractual relationship between the data subject and the data controller
- Fulfillment of the data controller's legal obligations
- Legitimate interest of the data controller
The purpose of processing personal data is to enable the provision of our services.
Personal Data Processed
The data controller only collects personal data that is relevant and necessary for the purposes described in this privacy policy. In each situation, only such personal data is processed that is necessary for the particular situation.
Data Retention Period
Personal data is retained only for as long as necessary to fulfill the purpose of use.
The data controller may be obligated to process some personal data included in the register for a longer period than stated above in order to comply with legislation or regulatory requirements.
Personal data in the marketing register will be deleted once there is no longer a need to retain it.
Rights of the Data Subject
Right of Access to Personal Data
The data subject has the right to obtain confirmation as to whether their personal data is being processed, and if so, the right to obtain a copy of their personal data.
Right to Rectification
The data subject has the right to request that inaccurate and erroneous personal data concerning them be corrected. The data subject also has the right to have incomplete personal data completed by providing the necessary additional information.
Right to Erasure
The data subject has the right to request the erasure of their personal data if:
- the personal data is no longer needed for the purposes for which it was collected;
- the data subject withdraws the consent on which the processing was based and there is no other legal basis for the processing; or
- the personal data has been processed unlawfully.
Right to Restriction of Processing
The data subject has the right to restrict the processing of their personal data if:
- the data subject contests the accuracy of their personal data;
- the processing is unlawful, and the data subject opposes the erasure of personal data and instead requests the restriction of their use; or
- the data controller no longer needs the personal data for the original purposes of processing, but the data subject needs them for the establishment, exercise, or defense of legal claims.
Right to Object
The data subject has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them.
The data controller may no longer process the data subject's personal data unless the data controller can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or if it is necessary for the establishment, exercise, or defense of legal claims.
If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing, including profiling insofar as it relates to such direct marketing.
Right to Withdraw Consent
The data subject has the right to withdraw their consent to processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Data Portability
The data subject has the right to receive their personal data, which they have provided, in a structured, commonly used, and machine-readable format, and the right to transmit that data to another data controller.
Right to Lodge a Complaint with a Supervisory Authority
The national supervisory authority for personal data matters is the Office of the Data Protection Ombudsman, which operates in connection with the Ministry of Justice. You have the right to refer your case to the supervisory authority if you consider that the processing of your personal data violates applicable legislation.