Privacy Statement

Register keeper

Suomen Aluerakennuttaja Oy (later “SARA”)
business ID: 2298160-4
Åkerlundinkatu 11 B, 33100 Tampere, Finland
http://www.sara.fi

Contact

Timo Kamppuri
+358 50 433 6035
timo.kamppuri@sara.fi
Åkerlundinkatu 11 B, 33100 Tampere, Finland

Name of register

The client register of SARA

The basis and meaning of handling personal information

The processing of personal data is based on SARAs legitimate interest, contract, or other legitimate connection. The purpose of processing personal data is to manage, maintain, develop, analyze, and compile statistics related to the customer relationship between SARA and its customers. Additionally, the information may be used for direct marketing purposes (including newsletter subscription) by SARA and its group companies and partners, organizing marketing competitions, profiling, distance selling, as well as opinion and market research. The information may also be used for planning and developing SARAs business operations and services.

Data contents of register

The register contains the following personal information of decision-makers and contact persons of companies and organizations:

• Name, title, company, postal office, email address, phone number
• Client history (e.g., contacts, orders, feedback, billing and collection-related information)
• Interests and profiling information
• Customer feedback and contacts
• Direct marketing opt-outs
• Any other necessary information for the purposes of the register

Routine information sources

The information in the register is collected on a regular basis from the customers themselves, based on the information provided during the use of services, online services, or other interactions, as well as during the conclusion and duration of the agreement.

Personal information may also be collected and updated from the population register, credit information register, and other similar public and private registers.

Routine data disclosures and transfer of data outside the EU or EEA

SARA does not routinely disclose the registry information to external parties. However, information may be occasionally disclosed in accordance with Finnish law.

SARA uses cooperation partners outside the European Union and the European Economic Area to provide its services. As a result, usage data and personal data related to the use of the service may be transferred partially outside the European Economic Area. Sufficient data protection level in data processing is ensured by using the European Commission’s standard contractual clauses.

Principles of the register’s protection and information storing time

Only those employees who have the right to process customer data in the course of their work are authorized to access the system containing customer information. Each user has their own username and password for the system. The information is stored in databases that are protected by firewalls, passwords, and other technical means. The databases and their backups are located in locked premises, and access to the data is limited to specifically designated individuals.

Personal data is retained for as long as necessary for the purpose of processing the personal data, taking into account the storage periods required by law, such as consumer protection, accounting, and prepayment laws.

Checking rights and the right to demand correction for the data

The data subject has the right to inspect the personal data concerning themselves that is stored in the personal register, as well as the right to request correction or deletion of the data. Requests regarding these matters should be submitted personally or in writing to the contact person mentioned in section 2.

Other rights related to handling personal information

The data subject has the right to prohibit the data controller from processing their personal data for direct marketing, market research, and opinion polling purposes. Such a prohibition can be submitted at any time to the contact person mentioned in section 2, via the designated contact method, such as a spam filter service.

In accordance with the General Data Protection Regulation (effective from May 25, 2018), the data subject has the right to object to or request restriction of the processing of their personal data, as well as the right to lodge a complaint regarding the processing of personal data to the supervisory authority.

Storing time of personal information

In accordance with the EU General Data Protection Regulation, personal data in a register may only be retained for as long as it is necessary for the purpose of the register.

Right to be forgotten

At the customer’s request, their personal data can be deleted or anonymized from SARAs register. The deletion and anonymization process is irreversible, and we cannot recover deleted data.

Requests related to the above can be submitted either by email to timo.kamppuri@sara.fi or by mail to:

Suomen Aluerakennuttaja Oy / Removal of user account / Right to be forgotten,
Åkerlundinkatu 11 B, 33100 Tampere
Finland