Personal Data Act of Finland (523/1999), Section 10
Please read this privacy notice carefully before visiting the reviiri.org website. This privacy notice concerns the processing of personal data collected from the reviiri.org website.
By registering and logging in to the service, you accept the terms of this privacy notice and give Natlink Oy your explicit consent to process your personal data as described in this privacy notice. If you do not accept the processing of your personal data as described in this privacy notice, do not register or log in to the service and do not use the service.
If you are under 18 years of age, or under the legal age in your country of residence, please ask your legal guardian to register for the service on your behalf.
Natlink Oy reserves the right to change this privacy notice. Natlink Oy will notify you of any material changes by email to the email address you have provided. You are responsible for keeping your contact information up to date. After receiving a change notification, you will be deemed to have accepted the changes if you continue using the service.
1. Data Controller
Natlink Oy
Takatie 6
90440 Kempele
Finland
2. Representative of the Data Controller
The Data Protection Officer (DPO) handles all matters related to data protection; you can contact them by email: GDPR@natlink.fi
3. Name of the Register Containing Personal Data
The register containing personal data is called the “Reviiri Customer Data Register”.
4. Purpose of Processing Personal Data
The purpose of processing personal data is to manage and maintain customer relationships between Natlink Oy and its customers. Personal data is used to identify users of the service and for the implementation, operation, administration and billing of the service, as well as for delivering information and notifications to customers. In addition, personal data may be used for direct marketing and for investigating and monitoring misuse cases. Personal data may also be used for planning and developing Natlink Oy’s business and services and for monitoring the number of customers using the service. In addition, Natlink Oy may use and disclose personal data contained in the register for justified purposes (for example direct marketing, telesales, other direct advertising as well as opinion or market research) in accordance with the Finnish Personal Data Act, the Information Society Code (7 November 2014/917) and other applicable laws.
5. Contents of the Register
The personal data register contains the following information:
Customer data:
First names, last name, email address, address, phone number, and other information the customer may provide.
Usage data:
Customer visits to the services as well as the customer’s actions and navigation within the service (time, location within the service and IP address), transitions to the service from another website and from the service to another website, and a device-specific identifier (identifier relating to the computer from which the customer has logged into the service).
6. Regular Sources of Data
Personal data in the customer data register is obtained from the customer when they register as a user of the service or update their own information. In addition, personal data is obtained when the customer uses the service in other ways. Natlink Oy may also use cookies to collect personal data.
7. Regular Disclosure of Personal Data
Natlink Oy does not regularly disclose personal data contained in the customer data register to third parties. However, personal data may occasionally be disclosed in accordance with Finnish law. In addition, personal data may be disclosed for research and marketing purposes (including direct marketing).
Natlink Oy has the right to use subcontractors for providing and delivering the service. To this extent, personal data may be transferred to subcontractors to the extent necessary for delivering the services (for example, storing data on a server maintained by a third party on behalf of Natlink Oy).
Personal data contained in the customer data register will not be transferred outside the European Union or the European Economic Area.
8. Accuracy of Data
Natlink Oy does not verify the accuracy of the personal data provided by the customer. After registering for the service, each customer has the right to review their own customer information by logging into the service with their username and password. The customer may change, supplement and delete their customer data either by logging into the service or by contacting Natlink Oy’s customer service. Data related to the use of the service is not available to customers.
Data related to the use of the service will be separated from the customer’s identification information once retaining it is no longer necessary.
9. Security of the Personal Data Register
A customer can log in to the service only with their personal username and password. Passwords related to usernames are stored in a secure format.
Access to the personal data register is limited only to persons who must be able to process the data in order to perform their work duties in accordance with the purposes of this customer data register and for technical maintenance of the register. All data contained in the customer data register is protected in accordance with general industry practices.
10. Links to Third-Party Websites
The service may contain links to third-party websites. The linked websites are not under Natlink Oy’s control, and Natlink Oy is not responsible for the content of third-party websites or for any links contained on such websites. If a customer visits a linked website, they should review that website’s privacy policy and other applicable terms of use.
11. Location Data
Natlink’s location-based services and features use satellite-based location data as well as Wi-Fi, IP address, or other network-based location data. The use of the above technologies involves sharing location data, phone numbers and other identifying information with Natlink. All location-related data is stored in a Virtual Private Cloud (VPC) maintained by a third party, operated and maintained by Natlink. Natlink does not use this data to personally identify you.
12. Further Information
If you have any questions about this privacy notice regarding the personal data register, please contact the person mentioned in section 2.