This is a privacy and data protection statement in accordance with the EU General Data Protection Regulation (GDPR).
Updated 7.12.2022
1. Name of the register
Maxreal.fi Max Real Oy’s customer data register:
Register of customer data
Register of contact form submissions
2. Data controller
Name: Maxreal.fi Max Real Oy / Petri Nietosvaara
EU VAT identification number: FI22830371
Street address: Laivastokatu 4 A 5
Postal code: 00160
City: Helsinki
Country: Finland
Phone number: +358405333055
Email address: petri.nietosvaara@maxreal.fi
3. Purpose of the register
The personal data collected will be used for:
Maintaining customer relations and approval based communication.
4. The basis for data collection and processing
Customer data is collected and processed with the customer’s consent, or for the purpose of implementing a contract with the customer.
5. Data content of the register
Register of customer data:
Company name, EU VAT identification number, email address, phone number, name, address and creation date.
Register of contact form submissions:
Phone number, name, email address, date, message subject and message.
6. Data retention period
Personal data will be kept for as long as necessary for the performance of a contract with a customer or for the development of customer service. Communication related data can be removed via a separate written & signed request. Otherwise data retention periods enforced by law are followed.
7. Regular data sources
The register is used to collect data:
From the person himself/herself. From the person himself/herself, from registers held by the public authority to the extent permitted by law (e.g. ytj.fi).
8. Regular disclosures and transfers of data outside the EU or the European Economic Area
There is no regular transfer of data outside the company. Some of the third-party service or software providers used by the company may store data outside the EU or the European Economic Area.
With the customer’s consent, data may be disclosed to joint partners of the customer and Maxreal.fi Max Real Oy in order to deliver products and services ordered by the customer.
We regularly use the following service providers:
- Microsoft
- Domainhotelli Oy
- Procountor
9. Register security
Data is transferred over an SSL-secured connection.
Electronic data is protected by a firewall, usernames, and passwords.
Access to the data is restricted to those persons employed by the controller who needs the data for their tasks.
10. Automated decision-making
No automated individual decisions (Article 22 of the EU General Data Protection Regulation) are taken.
11. Rights of the data subject
The data subject has the right to check what data relating to him or her have been recorded in the personal data file. A written request for inspection must be signed and sent to the person responsible for the register.
The right of inspection is free of charge and is exercised no more than once a year.
The data subject has the right to request the rectification or erasure of inaccurate or outdated data or the transfer of data from one system to another. They also have the right to restrict or object to the processing of their data in accordance with Articles 18 and 21 of the EU General Data Protection Regulation.
Data subjects have the right to withdraw their prior consent to the processing of their data or to lodge a complaint with a supervisory authority about the processing of their personal data.
Data subjects also have the right to object to the use of their data for direct marketing purposes.
12. Updating the Privacy Policy
This Privacy Policy might be updated to reflect changes in legislation or if otherwise deemed necessary.