Person file description in accordance with section 10 and 24 of the Personal Data Act (523/1999)
Controller and contact person
Business ID 2761878-3
21900 Yläne, Finland
Tel. +358 2 275 4444
Contact person Eeva Gröhn
Purpose and criteria for processing personal data
The purpose of processing the personal data is managing customer relationships and other cooperation relationships, administration, marketing and distance selling, as well as planning and developing the business activities of Mepu Oy. Criterion is controller’s legitimate interest.
Information stored in the register
The register may include following information:
- Contact information: first and last name, address, phone number, email address
- Customer information: customer number, order history, billing and debt information
- Customer feedback
- Information on the marketing permissions and bans
- Any other information necessary for the purpose of the register
Regular sources of data
Personal information is mainly collected from the people whose data is being registered. Data can also be collected and updated from public and commercial registers.
Regular data extraditions and transfers outside EU / EEA
Where possible, Mepu Oy stores personal data in a selected and secure data centre located in Europe. Some of the service providers may use backup servers located outside the EU/EEA.
Principles for the protection of data files
Only persons whose job assignments require managing the data in the register have access to it. The register is protected with personal user identifiers and passwords.
Rights of the data subject
The data subject has a right to review and request for fixing or deleting the data relating to him/her that is saved to the personal data file. The request for such has to be made in written form to the person in charge of the data issues. The request has to be signed. The request may also be presented at the controller’s main office at Mepu Oy, Mynämäentie 59, 21900 Yläne, Finland.