1. The processing of personal data
Arrant-Light Oy (hereinafter referred to as “Arrant”) is dedicated to protecting personal data and privacy. It is important for Arrant that all personal data received during the course of daily operations will be protected. The processing of personal data is carried out according to the provisions of Finnish data protection laws and General Data Protection Regulation (Regulation (EU) 2016/679). The directions and recommendations of the Finnish Data Protection Ombudsman are also taken into consideration. The aim of this Privacy Statement is to explain why Arrant collects personal data and to provide information on how to contact Arrant with regard to any questions about the collecting of personal data.
Business ID: 0580543-0
Rajakivenkatu 8 20740 TURKU, FINLAND
3. Contact person in matters concerning the Register
4. The purpose of collecting and processing personal data
Personal data means information that allows the identification and contacting of the individual. The majority of personal data is provided voluntarily or on a contractual basis. If you decide not to provide personal data, Arrant may not be able to provide all services available or cannot provide services at all.
Personal data in the Register is mainly collected on the grounds of client relationship, employer obligations and partnership. In addition, using the websites and other social media or contacting Arrant provides Arrant with personal data, such as name, address phone number and e-mail address. The access control system used in Arrant premises may also store personal data about visitors. Arrant may occasionally receive personal data from superiors or colleagues as well.
Depending from the source of information, website, social media channel, service, application or other context of usage the information may be used for:
- making announcements
- customer service and operational development
- fulfilling contractual and public authority requirements
- compilation of statistics and training
- controlling the security of Arrant premises
- observing user activity on the websites
- developing user experience on the websites
The processing of personal data carried out by Arrant is based on consent and complying with the requirements provided by law. The purpose of processing personal data is to protect client interests as well as legitimate interests of Arrant. These interests of Arrant are, including but not limited to, ensuring the safety of the data system and operational environment, developing product and service quality, company management and marketing.
5. Your rights related to data
Right of access
You are entitled to obtain information as to what personal data is being processed in the Register. Right of access may be denied under conditions provided for by law. As a principal rule, right of access shall be provided for free.
Right to restriction of processing
You are at any time entitled to deny the processing of personal data or ask the processing of personal data to be restricted provided that Arrant does not have reasonable grounds for processing personal data. However, please note that the right to restrict the processing shall not apply where the processing of personal data is necessary due to mandatory or statutory requirements.
Right to erasure (’right to be forgotten’)
You are entitled to the rectification of inaccurate personal data, the completing of incomplete personal data and the erasure of personal data concerning you. However, right to erasure shall not apply where the processing and storing of personal data is necessary due to mandatory statutory requirements.
Right to data portability
Provided that certain conditions are met, you are entitled to receive your personal data which you have provided to us and to transmit this data to another controller.
Right to opt out of direct marketing
You are at any time entitled to object the processing of personal data concerning you for direct marketing.
Right to lodge complaint
You are entitled to lodge a complaint with the competent supervisory authority if you feel that Arrant has not appropriately followed the applicable data protection rules and regulations.
Provided that the processing of personal data is dependent on your consent you are entitled to revoke the consent at any time. The revoking of consent is done by way of notifying the controller as specified in section 6.
6. Contacting Arrant
All communication and requests concerning your rights related to data must be of a written form or be sent by e-mail to the address specified in section 3.
Arrant may ask you to specify the request and to verify your identity before processing the request. Arrant may refuse to fulfil the request provided that such refusal is based on applicable law.
Arrant shall provide the information within one month of receipt of the request. The period may be extended only on specific reasons.
7. Categories of personal data
Information about the company’s and its subcontractors’ personnel, contact persons of clients, companies and partners as well as users of the Arrant website may be stored in the Register. The data collected may vary depending on the method of communication, choices you have made regarding privacy settings and the applications used. Arrant may collect and process, including but not limited to, following information:
- Name and title of the person (data subject)
- Contact information (phone number and e-mail address)
- Name, contact information and line of business of the company
- Information regarding online activity
- Information stored based on technical surveillance
- Technical information and information regarding cookies
8. Access to personal data
In Arrant, the processing of personal data is limited so that only appropriate staff members, based on their role and duties in the company, have access to personal data. The marketing and sales professionals have access to personal data in matters regarding client relationship, whereas other administrative personnel have access to personal data in matters related to employment, contracts and payment transactions.
Cookies may be disabled in browser settings. However, disabling cookies might affect the websites in that they slow down or that access to them is denied.
10. Disclosure and transfer of personal data
Arrant may use subcontractors and service providers to assist with maintenance of the production line, customer service, administrating and analyzing user information, research, client communication and campaigns.
Additionally, we use MailChimp –service for news bulletins and administration of email lists. All related information is hosted by MailChimp –server located in controlled data center.
Personal data may be disclosed or transferred to subcontractors and service providers but only to the extent that these parties are involved in production or administrative processes of Arrant.
Third parties are not allowed to use personal data for purposes other than those mentioned in this Privacy Statement or specifically defined by Arrant. It is required of these third parties that personal data remains confidential and that adequate measures are taken to ensure protection and privacy of personal data disclosed or transferred.
Personal data may be processed by third party service providers. Provided that the service provider has access to personal data from outside the EU or EEA area, Arrant ensures that the processing is carried out in an appropriate manner and according to applicable data protection laws.
Personal data may be disclosed or transferred to authorities as requested for by competent authorities or by law.
11. Duration of processing personal data
Arrant stores personal data only to the extent that it is necessary for the attainment of purposes specified in this Privacy Statement. Personal data may be stored longer where required for by applicable law.
Arrant has taken adequate measures to ensure all personal data is relevant by way of deleting unnecessary information and updating personal data. Information in the Register is stored as it is received and updated Arrant is notified about the changes in personal data.
12. Automated decision-making and profiling
Profiling means automated processing of personal data to assess the characteristics of individuals. Arrant does not use personal data for automated decision-making or profiling.
13. Changes to Privacy Statement
Arrant may change this Privacy Statement as the services and operations develop. Changes may also occur due to changes in the regulatory framework. Any changes will be announced on the websites or in another appropriate manner. Arrant recommends everyone to review the latest Privacy Statement on a regular basis.
Privacy Statement updated 14.06.2018