Privacy notice

Name of register

Terrafame Oy’s register for external stakeholders.

Controller and contact details

Terrafame Oy (reg. no: 2695013-5)
Malmitie 66, 88120 Tuhkakylä, Finland
privacy@terrafame.fi
tel.: +358 20 7130 800 (switchboard)

Purpose and legal grounds of the processing of personal data

Registered data is collected and retained for the purposes of communication, contact and surveys. The register includes data about the contact people of Terrafame’s external stakeholders and commercial partners. In addition, the register includes data about individuals whose task or position in civic society, business life or public administration is essential considering contact or is otherwise associated with these individuals’ work activities or positions of trust. The controller’s legitimate interests form the legal grounds of processing.

Personal data groups

Terrafame’s external stakeholders include commercial parties, associations, media services and the authorities.

The following contact details of contact people who represent the aforementioned parties are processed in the register: name, contact details (email address and telephone number), represented company and position in the company.

Sources of personal data

The register’s data content is collected from data subjects and public data sources.

Recipients and recipient groups of personal data

Personal data can be transferred to Terrafame Ltd’s business partners that are committed to complying with confidentiality and data processing obligations, including communication agencies and research institutions that contact stakeholders by technical means on behalf and as agreed with Terrafame.

Transfer of data to third countries

In the processing of data related to stakeholders, Terrafame uses external companies whose data servers are located in the EU. Terrafame does not transfer any personal data outside the EU.

Retention of personal data

Personal data will be retained for as long as data subjects work in a position to which the processing of personal data in accordance with this privacy notice is related. Personal data can be retained longer if a longer retention time is defined in imperative legal provisions.

Rights of data subjects

Data subjects have the right to know what data has been registered about them and request any incorrect data to be rectified or supplemented. Data subjects can also request their personal data to be erased and the processing of their personal data to be restricted. In addition, data subjects can object to the processing of their personal data.

Fulfilment of information security

Terrafame Ltd only permits data to be processed by trained employees who are responsible for the processing of personal data and have received guidance regarding their tasks. Terrafame’s servers and data connections are protected with firewalls and other hardware and software. Facilities of Terrafame and its service providers are always monitored using an access control system. Terrafame’s data system service suppliers are committed to maintaining and ensuring up-to-date information security of a high level of quality.

Supervisory authority

Data subjects have the right to file a complaint regarding the register with their country’s supervisory authority. In the EU, a complaint can be filed in the member state, in which the data subject has a permanent place of residence or business, or in which any breach of the EU General Data Protection Regulation has taken place. In Finland, the supervisory authority is the Data Protection Ombudsman.