Privacy Policy

Privacy Notice

This privacy notice describes how Invecom oy (2886184-9) processes personal data, what personal data the company collects, for what purposes the data is used, to which parties the data can be disclosed, and how the data subject can influence the processing. This privacy notice is in accordance with the EU's General Data Protection Regulation (GDPR).

We reserve the right to make changes and updates to the privacy notice. The latest version was published on 22.1.2023.

iii. Purpose and Legal Basis for Processing Personal Data

3.1. We collect and process personal data for the following purposes

• For customer relationships,
• For customer service,
• For customer communication,
• For maintaining customer and partnership relationships,
• For marketing purposes,
• For targeting marketing to customers and potential customers,
• For reservations and orders of products and/or services,
• For the production, maintenance, development, and quality assurance of services/products

3.2. Personal data is collected

• From the individual or company itself, who provides the information

3.3. The company processes the following information

• Information about the person or company
• Contact information
• Billing or payment information
• Information related to the customer relationship
• Product and order information
• Customer feedback
• Contacts and communications
• Complaints
• Consents related to marketing
• Information related to online behavior

iv. Regular disclosures of information and data transfer

4.1. We exercise care in the storage and processing of data and ensure data security with firewalls, passwords, and various generally accepted technical methods. Manually maintained materials are stored in locked premises, to which access by unauthorized persons is prevented. Data storage and processing occur through service providers known to be secure. Data is protected with strictly defined access rights and is processed only for the purpose for which it was collected. All personal data is handled confidentially.

4.2 Data can be disclosed or transferred to third parties in accordance with this description.

4.3 Data can be regularly disclosed to other parties. Data can also be transferred outside the EU or EEA if necessary.

v. Storage of personal data

5.1 Personal data can be deleted at the customer's own request after the termination of the relationship. After receiving the customer's request, the data will be deleted within 1 month. We reserve the right to notify separately of either a shorter or longer retention period.

5.2 Personal data may be used for profiling if there is a legal basis for it. We do not use personal data for automated decision-making.

vi. Rights of the data subject

6.1. The data subject has the right to obtain and inspect their own data. They can request the data to be provided in writing or electronically.

6.2. Correction and deletion of data

The data subject has the right to request the correction of incorrect or inaccurate data and to request the deletion of their data.

6.3. Data inspection

The data controller actively ensures the removal, correction, and supplementation of incorrect, unnecessary, incomplete, or outdated personal data for the purpose of processing.

6.4. Data transfer

The data subject has the right to request the transfer of their data to another data controller. They can also request the restriction of the processing of their personal data in certain situations.

6.5. Objecting to the use of data

The data subject has the right to object to the use of their data for certain purposes. They can prohibit the disclosure and processing of their data for direct marketing purposes.

6.6. Withdrawal of consent

If the processing of personal data is based on consent, the data subject has the right to withdraw their consent at any time. This does not affect processing carried out before withdrawal.

6.7. Requests concerning the rights of data subjects

All requests concerning the rights of registered individuals are made electronically and addressed to the data protection officer. Identity is verified before providing information. Requests are processed within a reasonable time, no later than 1 month from the presentation of the request and verification of identity. If the request cannot be granted, the registered individual will be notified in writing.