Register of customers and decision makers

2. Contact

In matters related to the register, please contact tietosuoja@avila.fi

3. Register name

Avila’s customer and decision maker register.

4. Storage and processing of personal data

The purpose of processing the personal data of business customers and decision makers is the execution, analysis and statistics of assignments. In addition, the information is used to manage and develop the customer relationship.

Personal data is processed either on the basis of a legitimate interest, or on the basis of the customer’s own consent and/or the cooperation agreement between Avila and the customer.

Personal data is also used for Avila’s marketing, targeting of advertising, market research and development of Avila’s services.

5. Data content of the register

The register can contain information about decision makers and other stakeholders of companies and client companies. The register may contain the following information:

• Name, role and job description, company, phone number, email.
• Information provided by the registrant himself.
• Information about the person’s participation in the services purchased from Avila.
• Customer feedback and contacts.
• Other possible information required by Avila’s services and information necessary for the purpose of use of this register.

6. Data sources of the register

Avila only collects such personal data from registered users that is essential and necessary for the purposes presented in this privacy statement. This applies to data provided by the data subjects themselves and data collected from other possible sources.

Information in the customer register is recollected from those registered by phone, online, in meetings and in other similar situations. Data can also be collected from generally available data sources, such as the client company’s website, public and private registers.

7. Data transfers

Information will not be disclosed to third parties or used for other purposes without the permission of the data provider, unless it is a matter of information disclosure in accordance with the requirements of legislation or official regulations.

The processing of personal data does not take place outside the European Union or the European Economic Area. All our partners are committed to complying with the requirements of the EU data protection regulation.

8. Register protection principles and data processing security

Avila processes customers’ personal data in a way that aims to ensure appropriate security of personal data, including protection against unauthorized processing and accidental loss, destruction or damage.

Customer information is kept confidential. The use of systems and tools containing customer and personal data is limited only to those persons who have the right to process the data for their work.

Based on the Employment Contracts Act and the confidentiality clauses of contracts, all entities that process personal data have a duty of confidentiality regarding matters related to the processing of registered personal data.

Avila uses appropriate technical and organizational security measures to secure this, including firewalls, limited data read, send and delete rights, passwords, two-step authentication and other technical security measures.

In accordance with this privacy statement, Avila can outsource the development and maintenance work of information systems that contain personal data to different service providers. Avila ensures with sufficient contractual obligations that personal data is processed appropriately and in accordance with the law.

Personal data is stored as long as is necessary due to the purpose of use of the personal data.

9. Rights of the data subject

In accordance with the legislation, the registrant has the right to be informed of what information about him has been stored in Avila’s register. The person also has the right to delete or correct information. The data will be deleted according to the request if the law does not require their retention.

If the processing of personal data is based on the consent given by the data subject, the data subject has the right to withdraw his consent. The cancellation has no effect on the processing carried out before it.

Requests regarding the rights of the registered are made electronically, and they are sent to the e-mail address of the data controller mentioned in this privacy statement.

The registered person has the right to withdraw his consent at any time or to object to the processing of his data. The registered person also has the right to file a complaint with the supervisory authority.

10. Changes to data protection

This privacy statement can be changed and updated as necessary. The changes may be based on the development, improvement of our services or changes in data protection legislation.