Mentura Group Customer Register

Personal Data Act (523/1999) section 10§ and 24§

1. Controller

Mentura Group Oy
Ahventie 4
02170 Espoo
+358 42 4480 1
www.menturagroup.com

2. The person in charge of the registry

Mentura Group Oy
Sami Honkaniemi
Ahventie 4
02170 Espoo
privacy@menturagroup.com

3. Name of the register

Mentura Group Customer Register

4. Content of the register

The following information is handled in the register:

• Contact information: Customer’s name, title, rank, company, address, phone numbers, email addresses
• Profiling data given by the customer; gender, date of birth, language, as well as information given by the customer regarding the use of the services
• Data subject’s areas of interest and content preferences
• Origin of the information

5. The purpose for processing the personal data

Mentura Group processes personal data for the purpose of managing, taking care of, maintaining and developing customer relationships. The personal data is primarily processed for the following purposes:

• Plan and carry out projects and efficient customer care
• Processing and delivering orders
• Invoicing of the services
• Sending notifications related to Services
• Management and maintenance of a customer relationship
• Business and products development
• Analysis and statistic purposes

6. Regular sources of information

• The register’s details are obtained when the customer relationship is formed and from data provided by the customer to the controller during the customer relationship.
• The register’s details are obtained when subscribed to Mentura Group´s services or when making preparations for purchasing / purchasing Mentura Group´s products.
• Personal data and updates can also be collected from the registrar´s partners, and from authorities and companies that offer services related to personal data.

7. Recipients of the personal data

The content of the register is used by Mentura Group´s personnel.

Mentura Group may provide third parties with such personal data which is needed by a third party in order to provide Mentura Group with technical services related to Mentura Group Customer Register or other similar processing purposes or for collaboration with Mentura Group which requires joint efforts in customer communication.

Each provision of data is done in accordance with requirements of GDPR and applicable legislation.

8. Transferring data to countries outside the European Union or the European Economic Area

Mentura Group will not transfer data outside the European Union or the European Economic Area unless it is necessary for the performance of a service related to a customer relationship or any other relevant connection. In such cases, each provision of data is done in accordance with requirements of GDPR and applicable legislation Act.

9. Period for which the personal data is stored

We will retain your personal data for the period necessary to fulfil the purposes outlined in this privacy policy unless a longer retention period is required or permitted by applicable law. Retention of anonymized data is not governed by such limitations or requirements.

We aim not to keep outdated or unnecessary information and to make sure that the personal data and other customer information are up-to-date and correct.

10. Principles of protection of the register

Technical and organizational security arrangements are in place to protect any unauthorized access to personal data.

Personal data is stored in a technically secure location and the access is prevented by means of e.g. firewalls and other technical protection measures. Physical access to the data is restricted by means of access control and other security measures.

The information system’s users have a right to access to only such files, data, media, systems, areas of the data communications network and other resources they are entitled to use due to their work assignments. The information system’s users are bound by confidentiality obligations.

11. Rights of a data subject

The data subjects have the following rights that they can always establish by contacting Mentura Group in writing, preferably by email. Some of the rights may be subject to limitations, in accordance with GDPR and applicable legislation.

In matters of data subject rights, please contact:
Mentura Group Oy
Jarno Taskinen
Ahventie 4
02170 Espoo
privacy@menturagroup.com

Mentura Group may request further information or documentation in order to verify person’s identity.

Rights to inspect
The data subject has the right of access to personal data on him/her which is held in the Mentura Group Customer Register.

Rights to ratify
The data subjects have the right to obtain from the controller rectification of inaccurate personal data concerning him or her, and the right to have incomplete personal data completed.

Rights to object
The data subject object to certain use of your personal data if such data are processed for other purposes than necessary for the performance of our services or for compliance with a legal obligation. The data subject may also object any further processing of their personal data after prior given consent.

The data subject has the right to prohibit us from using your personal data for direct marketing purposes, market research and profiling by contacting us on the addresses indicated above.

Right to prohibit the processing of data
The data subject has the right to prohibit the controller of the register from processing his/her personal data, as set forth in GDPR legislation.

Rights to erase
The data subjects have the right to obtain from the controller the erasure of personal data concerning him or her, to the extent permitted by law.