Fira Group Oy
Address: c/o Fira Group Oy, Teknobulevardi 3-5, 001530 Vantaa, Finland
Business ID: 1773404-3
Contact person: Anni Tölli, email@example.com
Name of register
Consumer Customer Register (“Register”)
Fira Group Oy and its subsidiaries (“Fira” or “we”) collect personal data for the Consumer Customer Register for the purposes of sales activities and customer service.
Purpose of and grounds for processing
We may use your personal data for the following purposes:
- To provide services and to fulfil our contractual obligations such as customer service and communicating service-related information to the users
- To improve quality, analyse trends and for the purposes of customer service
- We can process your data to improve the quality of our services and products by analysing various trends related to the use of the services, for example. Whenever possible, we aim to use anonymous data from which individuals cannot be identified. We can use the data in managing the customer relationship and for customer service and communications.
Fira processes your personal data to fulfil its contractual obligations towards its contractual partners and to act according to statutory requirements. We also process personal data to develop our consumer services.
Data storage period
The processed data and its sources
We collect user data for the Register from the users themselves, from third parties (e.g. building management companies and credit reporting agencies) and in connection with the use of the service.
Collected data may include:
– personal identity code
– email address
– phone number
– IP address
– project address
– project identifier
– information related to project scheduling (e.g. apartment-specific dates)
– additional work and modifications to apartment
Transfer and disclosure of personal data
- system providers
Our services use Google Analytics and other analysis tools to create reports on the use of our website, so that we can improve our website and service. For further information on Google Analytics, go to http://www.google.com/analytics. You can opt out of the collection of data by Google Analytics by downloading the browser add-on available at https://tools.google.com/dlpage/gaoptout.
In such cases, personal data is processed in accordance with valid legislation.
We may also use third party service providers, for example providers of payment services, collection services and analytics services, to carry out certain tasks that include processing personal data on our behalf.
We can furthermore transfer or disclose personal data to our group companies and any party continuing our business operations as a result of corporate arrangements or the disposal, merger, de-merger, bankruptcy or liquidation of business operations.
Otherwise we will not sell or disclose your data to third parties. We also do not transfer data outside of the EEA.
Should applicable laws so require, personal data can also be transferred or disclosed to the authorities.
Right of access
Fira offers you right of access to your personal data processed by us. You can contact us to request access to the personal data we process with regard to you and the grounds for such processing. If less than 12 months have passed since your previous request for access, we can charge a fee for carrying out the measures related to the request.
Right to request rectification of data
You are also entitled to have erroneous, incomplete, outdated or unnecessary data rectified or supplemented by contacting us.
Right to request removal of data
You can also ask us to remove your personal data from our systems. We will carry out the measures in accordance with your request unless we have a justified reason for not removing your data, for example to fulfil our statutory obligations. The data may not necessarily be removed immediately from all backup copies or other equivalent systems in our use.
Right to oppose
You can also request restrictions to the processing of your personal data if the data is processed for purposes other than the performance of our services or for the fulfilment of a statutory obligation. You can also state your opposition to any further processing of your personal data, even if the processing were based on previous consent from you. Opposition to the processing of personal data may lead to more limited possibilities to use our website and services.
Right to restrict processing of data
You can ask us to restrict the processing of certain personal data. A request concerning the restriction of the processing of your personal data may lead to more limited possibilities to use our website and services.
Right to transfer data from one system to another
You are entitled to receive your personal data from us in an analysed and commonly employed format so that you can pass the data on to another controller.
Exercising your rights
You can exercise your above-mentioned rights by sending a message using the above-mentioned contact details. We have to be able to identify you in order to respond to your request. We may request additional information necessary to verify your identity. We may reject requests that are repeated unreasonably often or that are excessive or groundless. If you believe that the processing of your personal data conflicts with the applicable legislation, you can submit a complaint to the local authority that supervises data protection, especially in the member state where you have permanent residence or workplace or where the alleged breach of the personal data regulation took place. In Finland, the supervisory authority is the Data Protection Ombudsman. http://www.tietosuoja.fi/fi/index/yhteystiedot/nainkysytneuvoa.html
We have protected our register of personal data from unauthorised access with a variety of technical and organisational means and arrangements. The personal data is saved on servers and systems protected with a firewall and passwords. The servers are protected from third parties. Personal data is processed only by people committed to non-disclosure who have a justified reason for processing the data based on their job. We nevertheless wish to emphasise that no service provided through the internet is perfectly secure.