Controller

Metatavu Oy
Hallituskatu 7 A 2 krs.
50100 Mikkeli
Business ID 2771822-3
[email protected]

Contact person for matters concerning the register

Taneli Selin 

[email protected],

p.050 3798 745

Data Protection Officer

Metatavu Oy’s Data Protection Officer is Taneli Selin, [email protected], tel.050 3798 745

Name of the register

General privacy policy for services provided and maintained by Metatavu Oy.

Purpose of processing personal data

Personal data is collected for a specific, explicit and legitimate purpose by the services operated by Metatavu.

Personal data is collected in accordance with this Privacy Policy and will not be used, modified or transferred in any way other than as set out in this Privacy Policy. Personal data will only be collected in a pre-agreed manner that is made clear to customers prior to collection and verifiable consent has been obtained from them for the collection and processing of the data.

Metatavu Oy collects, stores and uses personal data in accordance with this Privacy Policy as the registry administrator in order to provide and develop its own products (online services, mobile applications, feedback systems, form systems, etc.). This Privacy Policy covers all services provided and maintained by Metatavu Oy, through which you consent to the processing, use and possible disclosure of your personal data.

Data content of the register

The register contains personal data collected in the services operated by Metatavu Oy, which, depending on the service, may include one or more of the following: first name, surname, email address, telephone number, date of birth, the purpose of the service, and indicator data related to the use of the services, such as. The purpose of the use of the service, the type of service, the type of service, the type of information used, the age, the type of service, the type of service, and indicators such as the reason for use.

Regular disclosures of data

Metatavu Oy has made a decision not to disclose the information held to third parties or automatically to other partners of Metatavu Oy. Metatavu Oy will disclose customer data to a designated party in individual cases if the person concerned requests Metatavu Oy to act in the above manner or if, based on legislation, a legally binding authority requires Metatavu Oy to disclose separately identified data from a database held by Metatavu Oy.

Transfer of data to a third country or international organisation

Metatavu Oy has made a decision not to automatically transfer data held by Metatavu Oy to third countries or to an international organisation. Metatavu Oy will in individual cases transfer data to third countries or international organisations if the customer or stakeholder has given Metatavu Oy a mandate to act in the above-mentioned manner for this purpose and Metatavu Oy, together with the Data Protection Officer and the Finnish Data Protection Authority, has carried out an assessment of the risk criteria and quality system of the actual level of data security in the third country.

Principles for the protection of the register

Metatavu Oy protects the personal data mentioned in this Privacy Policy based on the outcome of the risk assessment of the required level of security. The Data Protection Officer will be involved in the risk assessment process and will provide an objective opinion on the final decision regarding the protection of the data, which will be followed by Metatavu Oy. Metatavu Oy takes into account technical security and administrative and IT requirements in the protection of personal data.

Right of access

The data subject has the right to check what data concerning him or her has been recorded in the register. In addition, the data subject has the right of access to the data concerning him or her and to the data contained in the records, following a sufficiently precise and specific request for inspection. The request for inspection must be made in writing, signed and addressed to:

Metatavu Oy
Hallituskatu 7 A 21a
50100 Mikkeli

The right to request the correction and deletion of information

The controller must correct any inaccurate information in the register of personal data pointed out by the person concerned. The controller also has an obligation, through its own activities, to check the accuracy and timeliness of the data in the register. The data subject may also request the controller to delete data concerning him or her from the register. The Data Protection Officer will be in charge of the processing of the action.

Other rights related to the processing of personal data

The data subject has the right to request the restriction of the processing of personal data. The data subject also has the right to receive the personal data concerning him or her which he or she has provided to the controller in a structured, commonly used and machine-readable format and the right to transmit such data to another controller. In addition, the data subject has the right to object to processing, automated decision-making and profiling.

Data erasure and retention period

Metatavu Oy deletes personal data from the register when there is no longer a business reason for processing the data or if the data subject himself or herself requests Metatavu Oy to delete the data concerning him or her on the basis of the law. The data will be destroyed by overwriting when there is no longer any justification for processing or storing the data. However, the data will not be deleted if the law provides otherwise, or if a competent authority has initiated proceedings requiring Metatavu Oy to retain the data, or if another party has applied to Finnish law for a data protection decision.

Approval of the Privacy Statement

The Privacy Policy has been approved on an ongoing basis and reviewed on 9.3.2022.