Data Protection Privacy Notice
This is our EU General Data Protection Regulation (GDPR) compliant privacy notice for Cus- tomers and Partners. Effective date 22.5.2018.
Address: Teollisuustie 30, 96300 Rovaniemi, Finland
Phone: +358 16 3311300
Yrjö Trög, CEO
Norrhydro Oy’s Contact Information Registry
Purpose on contact information processing
We use contact information of you as a presentative of your organization to ensure that our business relationship related obligations and rights will comply with applicable legislation and contracts.
Your contact information is used to enforce contractual obligations and rights, to develop and improve products and services, manufacturing and delivery, business development, quality management, sales and marketing purposes, customer relationship management, billing and other financial purposes.
Legal basis of business relationship contact information processing is mainly based on data protection legislation and other legislation in context of business relationship. Contact information processing in Norrhydro is based on:
a) Data processing for a contractual relationship between business partners to establish, execute and terminate a contracts.
b) Data processing required or authorized by law
c) Data processing based on legitimate interest to develop and secure the continuity of our business, for example direct marketing or other commercial interest.
d) Your consent to data processing if legal basis does not match items a, b or c
We do not use your contact data for automated individual decisions.
Typically, we collect, store and use your contact information in the context of business relationship as follows:
a) Name, decision/job role, company/organization/department information, address, phone number, email address and other contact information.
b) Offers, quotations, orders, billing history, purchased products and services and other business or contractual relationship related information
c) Communication and marketing related information which you have given to us by direct contacts, customer surveys, marketing campaigns, market analysis, sweepstakes, contests, or other promotional activities or events.
d) Technical information of contacts like contacting dates, duration and quantity, possible costs and contact channels.
e) Photos, surveillance camera material, user names, ip-addresses and other information in context of access control, information technology, security and safety on our premises.
We erase personal data if the retention of the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed and no statutory retention obligations under applicable law require us to further retain personal data.
Regular Sources of Data
We collect contact information directly from you or other persons representing your company, from publicly available sources and from employees and other persons working for or representing Norrhydro Oy.
Regular Disclosures of Data and Transfer of Data to countries outside EU and/or EEA
Contact information is shared regularly only with parties which we have obligation by legislation or by contractual basis. We will ensure that your information is safe, processed confidentially and information is only used for purposes collected for and in applicable scope.
Contact information is not transferred outside EU or EEA.
Information security of contact information registry and confidentiality, integrity and availability of contact information is ensured by appropriate technical and administrative security measures.
Information and services are protected by means of firewall arrangements, appropriate encryption of telecommunication and messages as well as use of secure and monitored equipment and server rooms to prevent your personal information from being accidentally lost or destroyed, altered, disclosed or used or accessed in an unauthorized way.
In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
Under applicable data protection legislation, you have rights as a data subject at any time to:
a) request information of your personal data processing (This privacy notice);
b) object to the processing of your contact data for purposes of direct marketing or market research and opinion polls;
c) on grounds relating to your particular situation, object the processing of your contact information when lawfulness of processing is based on legitimate interest of Norrhydro Oy.
d) access the contact information on you and at request, receive a copy of the contact information and related supplementary information concerning contact information processing as required by the law;
e) request correction of your inaccurate or incomplete contact information;
f) request erasure of your unnecessary, outdated or obsolete contact information;
g) withdraw consent and object to processing your contact information when processing is based on your consent.
h) receive the contact information concerning you in a structured, commonly used and machine-readable format, which you have provided to us and we are processing automatically based on contract or your consent.
We may ask you to specify your request more closely and confirm your identity before pro- cessing of your request. The request may be declined where allowed or required by the law.
If you wish to make a compliant about how your personal data is being processed by Norrhydro Oy, you have always right to make a complaint with Finnish supervisory authority (The Office of the Data Protection Ombudsman) or authority in another member state of EU where your place of employment or residence is.
In order to use these rights, you have to send your requests in writing or by email to this address with this information.
Data Privacy Request – Contact Information
We will answer to data privacy requests within one month of receiving the request if there is not any other reason to extend answering time.