Privacy Statement
Updated June 8, 2023
Data controller and contact person
DAOS Technologies Ltd, Valimotie 13a, 00380 Helsinki, Finland
tel. +358 40 5558818
Contact person: Virpi Salminen
Customer register
Data subjects
In our register we process the personal data of current and former private customers and contact persons of customer organizations.
Basis and purpose of processing personal data
The purpose of our register is the correct and up-to-date management of the registered customers’ data during the customer relationship, the maintenance and development of the customer register, and the management of complaints.
The processing of personal data is based on:
- Basis for fulfilling the contract
- Legitimate interest of the data controller, good customer care, for example informing the customer about legislative changes
Personal data processed
We process our customers’ personal data and contact information as well as other necessary information related to the management of the customer relationship. This information includes:
- Name
- Job description
- Social security number
- Mailing address
- Telephone number
- E-mail address
- E-invoicing address or billing email address
Regular sources of information
The data is collected from the data subjects themselves.
Other sources of information
Information is also obtained from customer companies, website contact forms and subcontractors. Data can also be acquired from suppliers selling information services.
Protection and security of personal data
The personal data processed digitally is protected and stored in DAOS Technologies Ltd’s system, access to which is restricted only to persons who need the data in question to perform their duties. These persons have personal usernames and passwords.
The personal data is protected from external use. Workstations and storage media used in the processing are encrypted.
Regular disclosures and transfers of personal data
As a rule, data is not disclosed to third parties. An exception is the transfer of invoices to collection.
The personal data is disclosed to the register administrator, who acts as the processor of personal data. The data may be transferred to a new system administrator when changing the register service provider.
The controller’s partner carrying out the technical maintenance and processing of the personal data file may transfer the personal data in accordance with applicable legislation and this Privacy Statement.
The personal data will not be transferred outside the EU.
Retention period of personal data
The customer data is stored in the register for as long as the data subject is a customer of DAOS Technologies Ltd and for a contractual complaint liability period. After the end of the customer relationship, personal data will be stored for a maximum of ten years from the end of the customer relationship. Data based on consent will be stored until the consent is withdrawn.
Rights of the data subject
The data subject has at any time the right to object to the processing of their personal data for direct marketing purposes. The data subject may give channel-specific consents and prohibitions concerning direct marketing to DAOS Technologies Ltd.
In addition, in accordance with applicable data protection legislation, the data subject has at any time the right to:
- be informed of the processing of their personal data;
- access their own data and to check the personal data concerning themselves processed by DAOS Technologies Ltd;
- request the rectification and completion of inaccurate and incorrect personal data;
- request the erasure of their personal data;
- withdraw their consent and object to the processing of their personal data insofar as the processing of personal data is based on the consent of the data subject;
- object to the processing of their personal data on grounds relating to their particular situation, insofar as the processing of personal data is based on DAOS Technologies Ltd’s legitimate interest;
- receive their personal data in machine-readable format and transfer such data to another controller, DAOS Technologies Ltd processes such personal data based on the consent of the data subject and the processing is carried out automatically;
- request the restriction of processing of their personal data.
The data subject must submit a request for the implementation of the rights in accordance with the “Contacts” section of this Privacy Statement. DAOS Technologies Ltd may request the data subject to specify their request in writing and verify their identity before processing the request. DAOS Technologies Ltd may refuse to comply with the request on the grounds provided by applicable legislation.
Right to complain to a supervisory authority
Every data subject has the right to lodge a complaint with the relevant supervisory authority or with the supervisory authority of the Member State of the European Union where the data subject resides or has their place of work if the data subject considers that their personal data have not been processed in accordance with the applicable legislation.
Mandatory information
Basic customer information and identification information, based on applicable laws.
Parties in contractual relationships: Basic information of the contractual partner, information required for credit collection in a credit relationship (social security number).
Consequence if data is not disclosed
A customer relationship cannot be started without the above-mentioned mandatory information.
Contacts
Requests concerning the exercise of the rights of the data subject, questions about this Privacy Statement and other contacts should be made by e-mail to info@daostechnologies.com. The data subject may also contact us personally or in writing at: Valimotie 13 a, 00380 Helsinki, Finland.
Changes to this Privacy Statement
This Privacy Statement may be updated from time to time, for example when legislation changes. This notice was last updated on 08/06/2023.