We comply with the EU General Data Protection Regulation (EU Regulation 2016/679).
- Register operator / Data controller
Elopellontie 1 G
- Collection of personal data
We collect and process personal data about the User in various ways as described below. Most of the personal data we process is obtained directly from the User. We may also collect personal data in connection with the provision of our Service. We also use public data sources to verify the accuracy of personal data, such as the Postal Address Service and the Population Register Centre.
- Personal data provided by the user at the time of registration
First name and surname
The User also has the possibility to provide us with other personal information to facilitate the use of the Service, such as address or phone number. When our customer is a company, we also collect basic information about contact persons and company representatives, as well as information about Users. The provision of this personal information is voluntary. However, this personal information may be required to access all features of the Service.
- Information related to the use and deployment of the Service
We may also collect information automatically when a User uses our Service. This information includes: Accounting transaction information for the User; Subscription information, such as billing information and the collection of the User’s monthly subscription fees; The User’s periodic license fees are billed at agreed times using the Netvisor accounting software.
- How we process our personal data
We process personal data for three main purposes, described below.
- Provision of the service
Some areas of our Service require the processing of personal data in order to provide services to the User. For example, processing may involve information that is necessary for us to provide the Service to the User and to provide customer service or to bill the User. The data processing in this case is based on a contract between the User or business customer and EPSE.
- Service development and research
We may use personal data to improve the quality of the Service, to solve problems identified in the Service and to improve the features of the Service for Users. This processing is based on our genuine interest in improving our Service and its features and content. We may also provide anonymous statistical information for research purposes, including business intelligence.
- Marketing and communications
We may use personal information to send you important information about the Service. Personal data may also be used for the purposes of advertising, marketing, direct marketing and personalized marketing to Users. We may create general profiles of Users to provide better content and advertising. This is based on our genuine interest in keeping Users informed about our Service and in marketing new and relevant products and services to our Users. The User has the right to opt-out of direct marketing at any time.
- Sharing of personal data
We may share personal data with third parties:
When permitted or required by law; when trusted service providers provide services to us on our behalf and in accordance with our instructions. However, we will control and be responsible for the use of User’s personal information in all circumstances; where EPSE is involved in a merger, acquisition, or sale of a business or part of a business; when we believe in good faith that disclosure is necessary to protect our rights, the safety of the User or others, to investigate fraud, or to comply with governmental requests.
EPSE does not sell Users’ personal information to third parties.
- Transfer of personal data outside the EU/EEA
We do not transfer Users’ personal data outside the EU/EEA.
- Retention of personal data
- User’s data protection rights
The User has the right to access the personal data that we hold about that User. The User has the right to access, rectify, update, amend or delete the personal data at any time. However, certain information is essential to fulfill the purposes set out in this Policy and may also be required by law. Accordingly, the User may not delete such personal data.
The User may request the personal data we hold by contacting firstname.lastname@example.org.
The User has the right to object to certain data processing, such as profiling for marketing purposes. The User also has the right to restrict the processing to the extent required by applicable data protection law. The User has the right, to the extent required by law, to data portability, i.e., the right to receive their personal data in a structured, commonly used, machine-readable format and to transfer their personal data to another controller.
The User may correct, delete, or otherwise process personal data in the Service or contact EPSE’s customer service to make a change. You can contact us using the contact details provided in the section on “2. Register operator / Data controller” or by sending us an email at email@example.com.
If the User perceives a problem with our data processing practices, the User has the right to lodge a complaint with the User’s national data protection authority in the EU/EEA. In Finland, this authority is the Data Protection Ombudsman. The contact details of the Finnish Data Protection Ombudsman can be found via this link: https://tietosuoja.fi/en/home.
- Personal data concerning children
Our service is not directed to children. If you become aware that a child under the age of 16 has provided us with their personal data, please contact us using the contact details provided in the “2. Register operator / Data controller” section or by sending us an email at firstname.lastname@example.org.
We may change this policy from time to time. If we do, we will post a notice on our website.
- Contacting us