1. Controller and responsible person
Name: Valtavalo Oy
Business ID: 2239453-0
Address: Konekuja 2, 90620 Oulu, Finland
Telephone: +358 207 789 880
Responsible person: Maija Alasalmi
2. Purpose of use of the register
We use the collected data for customer communication as well as to offer a good customer experience and develop our customer service.
3. Grounds for collecting and processing data
We collect personal data when customers visit the valtavalo.com website, subscribe to a newsletter, use the energy savings calculator or complete the contact information form.
We collect personal data from customers for our newsletter and other customer communication material. We collect and process data on the basis of customer consent. We also apply the ‘legitimate interest’ to collecting and processing personal data. According to ‘legitimate interest’, we have the right to disclose information about products and services to customers whose tasks include the products and services offered.
4. Data content of the register
We use Google Analytics and Apsis Lead analytics tools on our website to obtain information about people who visited the valtavalo.com website. We collect the following data: Name, address, telephone number and URL of the visiting company and information about visits to the page (page loads, time spent on the website).
5. Data storage period
Personal data is stored for as long as it is needed in order to carry out an agreement signed with a customer or to develop customer service.
6. Regular sources of data
We collect data directly from persons or from registers maintained by authorities as permitted by the legislation. We also collect data using Google Analytics and Apsis Lead.
7. Regular disclosure of data and transfer of data outside the EU or EEA
We are responsible for the personal data we collect. We do not disclose or sell any personal data to third parties. Furthermore, we use our partners and third parties for the processing and storage of data and for marketing. No personal data is transferred outside the EU/EEA, unless it is necessary considering the technical implementation of Valtavalo or one of its partners.
Personal data of registered users can be erased at the request of a user, unless it is prevented by the legislation.
We use the Google Analytics and Apsis Lead tools to analyse site traffic. They collect the following data about visitors: Location, domain, IP address, browser type, operating system, date and time of the visit, duration of the visit and other data related to navigation on the website. More detailed information is available from Google and Apsis.
10. Protection of the register
Data is transferred across an SSL-protected connection. Electronic data is protected by means of a firewall, usernames and passwords. Persons who are employed by the controller and need data in their work-related tasks only have the right to use data.
The requirements set out in the EU General Data Protection Regulation (GDPR) to be applied starting from 25 May 2018 have been taken into account in the processing of personal data. All access to personal data is controlled in accordance with good practices.
11. Rights of data subjects
Data subjects have the right to view the data about them saved in the personal data register. A written and signed request to view data must be sent to the person responsible for the register. The right to view data is free of charge at most once a year.
Data subjects have the right to demand that any incorrect or expired data be rectified or erased. In addition, they have the right to restrict or object the processing of their personal data in accordance with articles 18 and 21 of the EU GDPR.
Furthermore, data subjects have the right to withdraw any previous consent to the processing of data or to refuse the use of their data for direct marketing purposes.