Privacy policy
DATA CONTROLLER
Oy Interfii Ltd.
Vähäheikkiläntie 56 B, 2nd floor, FI-20810 Turku, Finland
PURPOSES OF PROCESSING PERSONAL DATA
Interfii processes personal data in order to provide services to our customers and to respond to inquiries from potential customers. We process messages sent via the contact form based on the consent of the data subject. (Additionally, we process inquiries submitted through quotation request forms to prepare a potential agreement at the request of the data subject.) We process billing information related to the services we provide as part of accounting records in compliance with the Accounting Act. We process job applications sent to us based on the consent of the applicant.
We collect statistics on the use of our websites using Google Analytics. The data collected through these statistics is used to develop and improve our websites. The processing of usage statistics is based on our legitimate interest in developing the services we offer.
If you submit a request to exercise your rights as a data subject, we will record the request and any actions taken in response, in order to fulfill the accountability obligations under the General Data Protection Regulation (GDPR). In addition, we process personal data to ensure the security of data processing based on legal obligations.
Interfii does not use automated decision-making in personal data processing.
PERSONAL DATA PROCESSED
We process the following personal data:
- Identification and contact information
- Information related to services
- Content of inquiries and other communications
- Electronic identifiers and information about the use of our websites
- Billing information
We primarily receive personal data directly from the data subjects. Information marked as mandatory in forms is necessary for providing the requested services.
RETENTION PERIODS OF PERSONAL DATA
We retain personal data as follows:
- Inquiries and quotation requests sent to us: 1 year
- Information related to accounting: as required by the Accounting Act
- Website usage statistics: 26 months
- Records of exercising data subject rights: 2 years
- Other personal data: up to two years after the end of active processing activities
RECIPIENTS OF PERSONAL DATA
Personal data is processed by our employees whose job duties require it. In addition, we transfer or disclose personal data to the following recipients to the extent necessary for the purposes of processing:
- Google (for the Analytics service)
- Partners necessary for providing services
- Billing and accounting service providers
- Authorities as required by law
- Other partners or processors necessary for the purposes of processing
Recipients of personal data located or operating in Europe are bound by GDPR obligations regarding the processing of personal data. Personal data is transferred outside Europe only to recipients who have implemented appropriate safeguards.
DATA SUBJECT RIGHTS
Data subjects have the right to obtain information about the processing of their personal data and the right to access their personal data. Under certain conditions, data subjects also have the right to rectify or erase personal data, the right to restrict or object to processing, and the right to data portability. Data subjects also have the right to withdraw consent and to lodge a complaint with a supervisory authority.
To exercise your rights, please contact the data controller in writing. Exercising data subject rights requires identification of the data subject, so please provide the necessary information for identification. Interfii processes requests regarding data subject rights in accordance with GDPR and retains information on the exercise of these rights for two years.