Our company stores and processes personal data as required by the EU General Data Protection Regulation (GDPR). The content of the privacy statement can be changed by publishing a new version online.
Registrar:
Package Testing & Research Oy/Sense N Insight
Business ID: 2790563-5
Address: Iskoskuja 3 A 19, 01600 Vantaa, Finland
Phone: +358-400-697973
Email: contact (at) ptr.fi
Person responsible for registry matters:
Name: Virpi Korhonen
Email: virpi.korhonen (at) ptr.fi
Registers
- Registers related to the company’s customer contacts
- Marketing register
- Register of participants in consumer surveys
The basis for keeping the register
The storage of information in the register is based either on a contractual relationship with our company, consent received from a person to store data, or our company’s legitimate interest in collecting information to conduct business.
We collect and store information about customer relationships or potential new customers related to the business. The collection of data on new potential customers is based on business activity, and we collect the data ourselves. In addition, personal data can also be obtained from other sources to the extent permitted by applicable laws, for example, such as the trade register, company and community information systems, or the postal address information system, or through services that maintain customer registers.
The register of participants in consumer research is related to the implementation and reporting of consumer research. Participants’ names or contact information will not be combined with the research results, and the data will be destroyed after each research is reported. We do not maintain our own consumer panel, but mainly buy recruitment services from an external service provider.
Purpose of use of personal data
We process personal data in relation to customer service, or other communications or marketing purposes, as well as research results analyses.
Our operations are based on legal business, so we also comply with EU legislation on the storage of personal data:
- The information we store about any individual (person) is legal, reasonable, and transparent in terms of processing. This means that you can access your personal information at any time.
- The information is always tied to a purpose of use – for example, the information we collect about individuals is only tied to a specific purpose of use. We will not disclose your personal information to third parties without an appropriate reason.
- We minimize the information we store – we only store what is necessary for the specified purpose.
- We strive to keep our information accurate.
- We limit the storage of data – the data has a defined useful life, after which it is either automatically or routinely deleted, unless a legal reason for further storage exists.
- We store correct and reliable information, and we strive to keep the information accurate.
Information content of the customer register (fields of personal information forms)
- First and last name
- Employer and job description
- Contact information
- Other textual information related to the customer
- Marketing authorization or prohibition
- Information collected through cookies
- Information collected from social media channels
We store the minimum amount of information related to the customer relationship, which typically includes the person’s unique name, possibly the company, and contact information such as e-mail address and phone number.
Information content of the consumer survey participant register
- First and last name
- Gender and age
- Occupation
- Telephone number, e-mail address and, if necessary, address information, if the information is related to defining the target group or reaching the participant
- Other textual/numerical information to be collected in connection with the definition of the study’s target group
Information sources
We collect customer data in connection with personal meetings, as well as through services that maintain customer registers. In addition, in connection with the business, for example in the acquisition of new customers, we may use names extracted from the media, that we can contact in a business sense. We receive the background and contact information of the participants of consumer surveys either as reported by the consumers themselves, or from the company responsible for recruiting said participants. The data is destroyed after the conclusion of each study.
Duration of processing
Personal data is stored only for as long as is necessary to fulfill the purposes defined in the registers.
You can unsubscribe from our marketing register via the link in our marketing e-mail sent to you, or, if there is no link in the e-mail, by requesting removal from the register in writing.
Personal data processors
The controller and its employees process personal data. We may also partially outsource the processing of personal data to a third party, in which case we guarantee through contractual arrangements that personal data will be processed in accordance with valid data protection legislation, and otherwise appropriately.
Disclosure and transfer of information
Based on the discretion of the data controller, data can be disclosed to our partners within the limits permitted and required by the legislation in force at any given time, unless the data subject has prohibited the disclosure of data. Information is handed over to partners only for purposes that support the registry’s operating concept.
We hand over limited personal data to other parties – this practically means:
We use e–mail marketing tools. Only names, titles, companies and e-mail addresses are stored in these tools.
The personal information of those who participated in consumer surveys will not be disclosed to parties outside of the surveys.
Transfer of information outside the EU or EEA
Information will not be disclosed to parties operating outside the territory of the member states of the European Union or the European Economic Area.
Protection of registers
The information contained in the registers is protected by firewalls, passwords, and other technical means generally accepted in the information security industry. The information contained in the marketing register is stored in the service provider’s systems. Manually collected material (recruitment forms of consumers participating in survey groups) is stored in a locked cabinet in a locked room. Access to the location requires a pass and keys to the company’s premises. Only those persons who in their work need personal data stored in the register are authorized to process such data.
Right of inspection
You have the right to check your personal data. You can also request to correct, update or delete your personal data at any time. Please note, however, that such personal data, which are necessary to implement the purposes defined in this Statement, or whose retention is required by law, cannot be deleted.
You have the right to object to or limit the processing of your personal data to the extent required by applicable law.
In accordance with the applicable law, in certain cases you have the right to transfer the personal data you have provided to us from one system to another, i.e. the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer your personal data to another data controller.
When we process your personal data on the basis of consent, you have the right to withdraw your consent at any time. After that, we will not process your personal data, unless there is another legal basis for the processing.
You can exercise your rights by sending us a request to contact (at) ptr.fi
If you feel that the processing of your personal data is not appropriate, you have the right to contact the data protection officer. You can find the contact information of the data protection officer here: https://tietosuoja.fi/en/home
