Green North Energy has business operations outside of the EU and, as such, also has to process personal data outside of the EU. Outside of the EU we adhere to the EU’s general data protection regulations.mukaisesti.
1. FOR WHAT PURPOSES IS PERSONAL DATA COLLECTED AND USED?
We collect, store and process your personal data only for predefined purposes. The main purposes for processing personal data are:
- Targeting our services and know-how
- Development of our web pages
- Customer communications and responding to contact requests
- Fulfilling our contractual obligations and offer operations
- Fulfilling legal obligations and responding to legal claims
- Development of our business and services
2. WHAT DATA DO YOU COLLECT ABOUT ME AND FROM WHICH SOURCES?
We collect personal data about you when you are in contact with Green North Energy or you make use of Green North Energy’s web pages or later use our services or participate in our events. In addition, we may collect data from public sources and registers, such as Suomen Asiakastieto.
We collect and analyse data about our website visitors and their behaviour with Google Analytics, SiteImprove and Salesfoce on www.greennorth.energy and resource.elomatic.com so that we can develop our services, web pages, expert content and events to be more relevant for our customers. We respect your privacy and we are committed to protect it. More information about data storage security in section 6. We do not collect and store personal data related to political affiliations, religious orientation and health, or similar personal data.
turvallisuudesta lisää luvussa 6. Emme kerää ja tallenna sellaista dataa, kuten esimerkiksi: poliittista, uskonnollista, terveydellistä tai muita näihin rinnastettavia henkilökohtaisia tietoja.
Typically, we may get following personal data directly from you:
- Name and surname
- Email address
- Phone number
- IP address
- Your company’s address
- Areas of interest and purchasing history
- Your actions on our web pages
Data collected from public sources:
- The user names of social media accounts
- Your company’s turnover and other financial figures
- Your company’s number of personnel
- Your company’s address and location
- Your company’s Business ID
- Your company’s bulletins and news
With your consent we may also process:
- Email marketing targeted at you
- Your areas of interest and actions on our web pages
- Content ordered from our web pages and related actions
- Registration for our events and actions related to events
- Newsletter subscriptions
3. WHAT IS THE BASIS FOR STORING YOUR PERSONAL DATA?
We make sure that we always process your personal data on the basis of the EU regulations. We may process your data on several different bases.
- We may process your data to fulfil and execute a contract – in accordance with article 6, 1b, when we act obligated by the contract between our companies.
- You are a potential or current customer and we offer you services. For this reason, we collect your personal data to further our legitimate interests in accordance with article 6, 1f. It is our legitimate interest to offer our services and operate and develop our business.
- Your personal data, to which you have given your consent to us, is processed in accordance with article 6,1a.
REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL – article 6
3.1. WHO PROCESSES MY PERSONAL DATA AND IS IT TRANSFERRED TO THIRD PARTIES?
Your personal data in our marketing and customer register is primarily processed by Green North Energy personnel in the performance of their business-related duties.
We may also outsource some parts of the processing to third parties, such as the data systems used to store and process personal data. In these situations, we make sure with contracts that the confidentiality of your personal data is secured and data is otherwise processed lawfully. We conclude data protection contracts with our outsourcing partners in such cases.
We may also disclose information to fulfil our other contractual or legal obligations or when a legal authority requires a disclosure. We may also disclose your personal data if we are a party to a business sale, such as a merger or an acquisition. Green North Energy does not sell personal data and does not disclose it to third parties.
4. IS MY DATA TRANSFERRED OUTSIDE THE EU?
Your personal information is stored in registers governed by the EU’s general data protection regulations. Green North Energy’s daughter companies outside the EU also have access to the registers. These companies adhere to the EU’s general data protection regulations. Green North Energy does not sell personal data and does not disclose it to third parties.
Possible other disclosures outside of the EU are only related to situations where the servers of our systems are located outside of the EU. In such cases, we ensure that your personal data is processed, transferred and stored as required by law and with sufficient security mechanisms. We also use systems that have servers outside of the EU. These services are covered in section 5.
4.1 HOW LONG IS MY DATA STORED?
We will not store your personal data for longer than is necessary for its purpose or as required by contract or regulations. The storage times for personal data may vary based on its purpose and the situation.
Potential customer data is stored from a few weeks to several months and even years. Our customer data is stored for as long as the customership is active.
5. HOW IS MY DATA STORED AND KEPT SECURE?
Your data is stored on the servers provided by our service providers and on Green North Energy’s servers, which are secured according to general standards and practices. The personal data we collect and process is kept confidential and we do not disclose it to third parties, other than those who need it for their work or confidentially to our suppliers based on service and data protection contracts we have made with them. Access to your personal data has been protected with user-specific logins, passwords and user rights. All our service suppliers adhere to the EU’s data protection principles.
A list of our service providers and links to their data privacy policies is provided below.
* The servers are located in the EU.
6. PROVISION OF DATA
If you use our services that require registration, we oblige you to register for our services with your correct information.
With the help of cookies, you are able to use the functionalities of our pages and also access protected and registered areas. If cookies are disabled, certain pages or restricted and certain pages may not function in the right manner.
8. WHAT RIGHTS DO I HAVE RELATING MY PERSONAL DATA?
Withdraw your consent
If we process personal data based on your consent, you can at any time withdraw your consent by notifying us by sending email to email@example.com.
Access to data
You have the right to confirmation as to whether we are processing your personal data and also to know what data we have about you. In addition, you have right to supplementary information about the principles of personal data processing. (Article 15)
Right to have errors corrected
Sinulla on oikeus pyytää, että korjaamme sinua koskevat virheelliset tai vanhentuneet taikka muuten puutteelliset henkilötiedot. (Artikla 16)
Right to prohibit direct marketing
You have the right to request that your personal data is not processed for direct marketing purposes by sending us email to firstname.lastname@example.org.
Right to object to processing
If we process your personal data based on public interest or our legitimate interest, you have the right to object to processing of your data, to the extent that there is no such significant other reason that would override your rights or the processing is not necessary for handling legal claims. Please note that in this case we most likely will not be able to serve you anymore. (Article 21)
Right to restrict processing
In certain situations, you have the right to require that we restrict processing of your personal data. (Article 18)
Right to data portability
If we process your personal data based on your consent or fulfilling of a contract, you have the right to require transfer of the data you have provided to us or to another services provider in a commonly used electronic format
8.1. HOW CAN I USE MY RIGHTS?
You can execute and use your rights by contacting us by sending an email to email@example.com. We request that you provide your name, email address as well as your and your company’s phone number. You should also be prepared to prove your identity, so that we may ensure that that we are processing the right person’s information.
If you consider that the processing of your personal data is not lawful, you can always notify a supervisory authority. In Finland, the supervisory authority is the Data Protection Ombudsman.
10. WHO CAN I CONTACT IN PRIVACY MATTERS?
Marketing and customer register related contacts