Privacy Notice

Controller


AutoParkki Norden Oy
Business ID: Y-1819487-8
PL 336, 00101 Helsinki

Contact person on register matters


tietosuoja@autoparkki.fi

Name of Register


Technical parking and customer -register

What is the legal basis of the processing of personal data and what is the purpose of the processing?


The legal basis of the processing of personal data is the legitimate interest of Autoparkki Norden Oy based on a customer relationship and/or other appropriate connection and the implementation of a contract.

The purpose of the processing of personal data is:

  • To provide and develop our products and services
  • The management and invoicing of parking contracts and parking rights
  • Parking control and the control of parking rights
  • The processing of complaints
  • Opinion polls and market surveys

Other matters relating to the management of our customer relations

What types of data do we process?


We process the following personal data of customers and other data subjects, such as trainees, in connection with the customer register:

  • The data subject’s basic information such as their name, social security number, customer number
  • The data subject’s contact information such as their email address, phone number, address information
  • Information on businesses and their contact persons such as business ID and the names and contact information of their contact persons
  • Information related to customer relationships and contracts such as information on past and present contracts, orders, phone recordings, correspondence with the customer/data subject and other communications, cookies and information on their usage
  • Register number of vehicles
  •  The brand, model and register number of the vehicle as well as digital photographs of the vehicle in connection with parking control

Handing of personal data is necessary to form a contract and/or a customer relationship. We are unable to deliver the product and/or service without the necessary personal data.

From where do we receive personal data?


We receive personal data primarily from the following sources: the data subject itself, authorities, credit register companies and the websites of business customers. In addition, we receive data from data subjects that register themselves when lodging complaints.  

Personal data may be collected and updated for purposes defined in this Privacy Notice with information received from publicly available sources, authorities or third parties within applicable law. Such information is updated manually or automatically.

To whom do we disclose data to, and do we transfer data outside the EU or EEA?


Data stored in the register can be disclosed to collection agencies operating in Finland for collecting receivables.

We use subcontractors acting on our behalf when processing personal data. We have outsourced IT management to an external service provider. The personal data is archived on a server managed and protected by the external service provider.

We do not disclose personal data outside the EU/EEA.

How do we protect the data and how long do we store it?


Only our employees who have the right to process customer data based on their work duties are permitted to use systems containing personal data. Each user has their own username and password for the system. The data is collected to databases that are protected by firewalls, passwords and other technical means. Databases and their backups are located in locked premises. The data can only be accessed by persons who are specifically authorized to process the data.

We regularly evaluate the necessity of storing data considering the applicable legislation.  In addition, we will take reasonable steps to ensure that personal data regarding data subjects that are incompatible, out of date or inaccurate for the purposes of processing are not stored in the register. We will correct or erase such data without delay.

What are your rights as a data subject?


As a data subject you have the right to inspect the personal data stored in the register concerning yourself and the right to demand rectification or erasure of inaccurate, outdated, unnecessary or unlawful data. If you have access to the data, you may edit the data yourself. If the processing is based on your consent, you also have the right to withdraw your consent or change it.

As a data subject, you have the right to object or to demand the restriction of the processing of your data and to lodge a complaint with the supervisory authority.

To the extent that the data subject itself has provided data to the customer register which is processed based on the consent or mandate given by the data subject, the data subject has the right to obtain this data primarily in a machine-readable form as well as the right to transmit this data to another controller.

On grounds relating to your particular situation you also have the right to object other processing activities when the legal basis of processing is legitimate interest. In connection with your request, you shall identify the specific situation, based on which you object to the processing. We can refuse the request of objection only on legal grounds.

Changes in the Privacy Notice


Should we make changes to this privacy notice we will indicate the changes in this notice dated. If the changes are significant, we may also inform of this by other means such as by sending an email or placing a bulletin on our website. We kindly recommend you to regularly visit our website and to take note of any changes in our privacy notice.