Signal Group Oy
Updated: 18.12.2024

1. THE CONTROLLER

Signal Group Oy
Business ID: 3477030-2
Postal address: Junakatu 9, 20100 Turku
Email: asiakaspalvelu@signalgroup.fi
Website: www.signalgroup.fi

2. CONTACT PERSON FOR DATA PROTECTION MATTERS

Signal Group Oy
Email: asiakaspalvelu@signalgroup.fi
Postal address: Junakatu 9, 20100 Turku

3. THE NAME OF THE REGISTER

Signal Group Oy's customer and contact information register

4. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

Personal data is processed for the following purposes:

• Managing and maintaining customer relationships
• Responding to requests for tenders and contacts
• Implementing customer service
• Business development
• Meeting legal obligations

Legal grounds:

• Performance of the contract or pre-contractual measures (Art. 6(1)(b) GDPR)
• Legitimate interest of the controller (GDPR Article 6(1)(f)): customer relations and business development
• Consent of the data subject (Article 6(1)(a) GDPR)
• Compliance with a legal obligation (Article 6(1)(c) GDPR)

5. CONTENT OF THE REGISTER

The register may contain the following information:

• Name (first and last name)
• Company/organisation
• Contact information (email address, phone number, postal address)
• Messages and other content provided in customer communications
• Customer relationship information (offers, contracts, projects)
• Technical information related to the use of the website (IP address, cookies, browser type)

6. REGULAR SOURCES OF INFORMATION

Personal data are collected:

• From the data subject (contact form, email, phone)
• From public sources (business registers, websites)
• About data generated in the context of the customer relationship

7. REGULAR DISCLOSURES AND TRANSFERS OF DATA OUTSIDE THE EU OR THE ETA

Personal data may be disclosed:

• to companies belonging to the Signal Group to run their business
• IT service providers (e.g. cloud services, email services)
• For public authorities to fulfil their legal obligations

Data can only be transferred outside the EU or EEA if:

• The target country has been approved by an EU Commission decision to provide an adequate level of data protection, or
• Data transfers based on EU approved standard contractual clauses or other safeguards under the GDPR

8. PRINCIPLES OF REGISTER PROTECTION

Personal data is properly protected:

• Data is stored on secure servers and databases
• Access to the data is restricted to those who need it for their job description
• Technical safeguards are in place, such as firewalls, encryption and access management
• Staff trained in data protection and confidentiality
• Paper files are stored in locked rooms

9. DATA RETENTION PERIOD

Personal data will only be kept for as long as necessary for the purposes for which it is processed:

• Customer relationship records are retained for the duration of the customer relationship and for the period required by accounting legislation (typically 6 years) after the end of the customer relationship.
• Data related to requests for quotations will be kept for 2 years, unless they give rise to a customer relationship.
• Marketing consents are kept until consent is withdrawn

10. RIGHTS OF THE DATA SUBJECT

You have the right:

Right of access (GDPR Art. 15)

You have the right to check what personal data we hold about you.

Right to rectification (GDPR Article 16)

You can ask for incorrect or incomplete information to be corrected.

Right to data erasure (GDPR Art. 17)

You can ask for your data to be deleted if:

• The data are no longer needed for the original purpose of the processing
• You withdraw your consent and there is no other lawful basis for the processing
• Data has been unlawfully processed
• Data must be erased to comply with a legal obligation

Right to restriction of processing (Art. 18 GDPR)

You can request restriction of the processing of your data in certain circumstances.

Right to object (GDPR Art. 21)

You can object to the processing of your data if the processing is based on a legitimate interest or direct marketing.

Right to data portability (GDPR Article 20)

You have the right to receive the personal data you provide in machine-readable form and to transfer it to another controller.

Right to withdraw consent

If the processing is based on consent, you can withdraw your consent at any time.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the Office of the Data Protection Ombudsman if you believe that your personal data is being processed in breach of data protection law.

Office of the Data Protection Ombudsman:
Visiting address: Lintulahdenkuja 4, 00530 Helsinki
Postal address: P.O. Box 800, 00531 Helsinki
Switchboard: 029 566 6700
Email: tietosuoja@oikeus.fi
Website: www.tietosuoja.fi

11. REQUESTS FOR CONTACT

Requests and questions relating to data protection should be sent to:

Signal Group Oy
Junakatu 9, 20100 Turku
Email: asiakaspalvelu@signalgroup.fi

We will respond to requests no later than one month after receiving the request. If necessary, we may extend the response time by two months due to the complexity of the request or the number of requests. We will notify you of any extension within one month of receipt of the request.

12. COOKIES (COOKIES)

Our website uses cookies to improve the functionality and user experience of the site. You can control the use of cookies in your browser settings. For more information about cookies, please see our separate Cookie Policy.

This Privacy Policy has been prepared in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection legislation.