Privacy policy - Ponsse webshop customer register

Controller

Ponsse Plc
Business ID: FI-09342090
Ponssentie 22
74200 Vieremä, Finland,
Tel. +358 20 768 800
www.ponsse.com

Contact information for register-related matters

Laura Kouvalainen

Team Leader, Ponsse Brand Experience, Global marketing
laura.kouvalainen@ponsse.com
tel. +358 40 7211548

Name of the register

Ponsse webshop customer register

Grounds for and purpose of the processing of personal data

Grounds for the processing of personal data:

Agreement, the processing is necessary for the delivery and management of customer orders.
Consent, the processing is necessary for marketing and customer communications.

Personal data are collected and processed for the administration of the Ponsse Plc webshop and for marketing and customer communications. Personal data are collected and maintained for the following purposes:

Customer relationship management
Delivering, processing and archiving orders
Webshop and service development
Improving the customer experience
Analysis and statistics
Producing targeted content and advertisements
Preventing misuse
Improving customer service

The collected personal data may be used for profiling.

Data content of the register

The following customer data may be saved in the register:

Personal details: name, address, phone number and email address
Customer’s username and password
Information on customer orders
Information related to analysing the use of the system

Data sources of the register

Personal data are collected directly from the data subjects in connection with creating a webshop account and/or purchases.

Disclosure of data

Data on the data subjects can be disclosed to other Ponsse Group companies, partners and/or subcontractors to fulfil the abovementioned purposes.

Data processing under this privacy policy can be subcontracted from parties that contribute to the administration of the webshop and/or carrying out marketing and the data processing related to these. Regardless of any subcontracting chain, Ponsse Plc remains, at all times, the controller of the personal data described in this privacy policy and is responsible for the activities of its subcontractors as for its own activities. Ponsse Plc will enter into data processing agreements with its subcontractors to ensure that they are committed to protecting the personal data of data subjects as described in this privacy policy.

For technical reasons and the method of processing personal data, data may be held by the subcontractor or the data may otherwise be processed via a technical remote connection.

We may transfer personal data outside the EU/EEA. Whenever personal data are processed outside the EU or the EEA, we will ensure that the subcontractor in question is committed to complying with the EU Commission’s standard contractual clauses concerning the processing of personal data and/or that the subcontractor is a participant of the Privacy Shield program.

Protection and retention of data

Only our employees who have the right to process data subjects’ data as part of their duties are entitled to use systems containing personal data. The register is protected by necessary technical and organisational means. Each user has their own username and password for systems. Data are collected into databases protected with firewalls, passwords and other technical means. Databases and their backup copies are located in locked premises, and only persons designated in advance have access to the data.

Personal data subject to this privacy policy is retained for the time necessary to fulfil the purposes described in this policy. In addition, some data may be retained for a longer period insofar as they are required to fulfil legal obligations, such as obligations related to accounting or consumer trade, and for demonstrating appropriate compliance with the obligations.

When the use of personal data is no longer necessary for the aforementioned purposes, the data will be erased from the webshop register automatically.

Rights of data subjects

Data subjects have the right to access their personal data saved in the register and to request any incorrect data to be rectified or erased. Requests concerning the matter must be submitted in person or in writing to the contact person stated in Section 2.

As a data subject, you have the right to object to the processing of your personal data within the limits required by law or to request the processing of your personal data to be restricted, and to lodge an appeal on the processing of personal data with the supervisory authority.

For specific personal reasons, you also have the right to object to the processing of your data when data are processed on the grounds of legitimate interests. When submitting your request, you need to indicate the specific situation based on which you object to the processing of data. We may only refuse to fulfil your request in which you object to the processing of data on legal grounds.

Contact

With regard to all questions and requests concerning personal data, the data subject should contact the person responsible for Ponsse’s personal data file referred to in item 2.