Seating Chart Maker
2. Name of the filing system
Seating Chart Maker's customer and marketing filing system
3. Contact for matters concerning the filing system
4. Purpose of and grounds for the filing system
Personal data is processed for the following purposes:
- Customer relationship and customer service management
- Purposes related to the products and services of the controller, such as the development, provision, implementation and marketing of products and services
- Implementation of the rights and obligations of the customer and the controller
- Remarketing based on website behavior online and on social media
Depending on the purpose of the processing, the legal grounds for the processing of personal data are the legal obligations of the controller, contract, consent and the legitimate interest of the controller.
The legitimate interest of the controller is the grounds for the processing when there is relevant connection between the data subject and the controller. Such a relevant connection may be formed, for example, when the data subject has on his/her own initiative contacted the controller, or when the controller processes the data subject’s personal data in connection with business or cooperation between the data subject’s employer and the controller, for example.
On basis of its legitimate interest, the controller may also save to its customer filing system personal data of contact persons and representatives of potentials clients which can be, on reasonable grounds, expected to be interested to acquire products and services provided by the controller.
Personal data is processed based on the consent of the data subject. The data subject has the right to withdraw his/her consent for the processing of personal data at any time by using the contact methods indicated in this privacy statement.
5. Data content of the filing system
The filing system contains data on the following persons:
- The controller’s customers (registered users of the service)
The following data is processed on the data subject:
The controller shall process and store personal data only for as long as is necessary for the predetermined purpose of the personal data. Personal data which has become redundant and which the controller no longer has the grounds to store or process will be erased at regular intervals in accordance with the controller’s own data protection practices.
6. Regular data sources
Personal data is generally obtained from the following data sources:
- Directly from the data subject
- From the data subject via a third party authentication service (such as Google login)
7. Disclosure and transfer of data
In principle, the controller will not disclose the personal data of data subjects to third parties unless legally required to do so by authorities or if compulsory legislation so requires. In addition, in the technical implementation of its services, the controller uses reliable service providers that process personal data on behalf of the controller. Any transfers of personal data are always carried out in compliance with applicable data protection legislation.
8. Protection and data security of the filing system
Access rights to the filing system are restricted to persons who need the data in the course of their duties. We have ensured that our partners comply with data protection legislation.
9. Rights of the data subject
The data subject has the following rights applicable on a case-by-case basis:
|Right of access to personal data||The data subject has the right to obtain confirmation from the controller on whether personal data concerning him/her is being processed or not. If personal data is being processed, the person has the right to access the data.|
|Right to demand data rectification, erasure or restriction of processing||The data subject has the right to object to the processing of his/her personal data relating to his/her particular situation when the controller is processing personal data on the basis of a legitimate interest.The data subject has the right to request the controller to rectify inaccurate data concerning him/her and to erase some personal data concerning him/her, or to request that the processing be restricted on the grounds provided by law.|
|Right to object||The data subject has the right to object to the processing of his/her personal data relating to his/her particular situation when the controller is processing personal data on the basis of a legitimate interest.|
|Right to lodge a complaint with a supervisory authority||In Finland, the supervisory authority is the Office of the Data Protection Ombudsman, whose contact information and instructions are available at www.tietosuoja.fi/en.|
The data subject may exercise his/her rights by contacting the controller using the contact information provided in section 3. We strive to reply to you as soon as possible and, if necessary, provide additional instructions or ask further questions on account of your request. Please note that before implementing the request, we have the right and obligation to verify your identity, which means that we must be able to identify you in an adequate way. If your request is blatantly unfounded or unreasonable, we may either charge a reasonable fee based on administrative costs for the implementation of the request or refuse to carry out the requested action.
11. Additional information
If you have any questions regarding our processing of personal data, you can contact us using the contact information provided in section 3 of this privacy statement.