Privacy and Data Protection Statement

This is the privacy and data protection statement of autonlaturit.com / PJ-Yhtiöt Oy, prepared in accordance with the EU General Data Protection Regulation (GDPR).
Prepared on May 12, 2023. Last updated on May 12, 2023.

1. Data Controller

PJ-Yhtiöt Oy
Vatsoilantie 26
37500 Lempäälä, Finland
Business ID: 3217662-5

2. Contact Person for Register Matters

Peter Joukainen
Phone: +358 50 547 5954
Email: info@autonlaturit.com

3. Name of the Register

autonlaturit.com Customer Register

4. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data in accordance with the EU General Data Protection Regulation is:

  • Consent of the individual.

The purpose of processing personal data is customer communication, customer relationship management, and marketing.
Personal data is not used for automated decision-making or profiling.

5. Data Content of the Register

The register may include the following information:

  • Name
  • Position
  • Company/organization
  • Contact details (phone number, email address, address)
  • Website addresses
  • IP address of network connection
  • Social media service identifiers/profiles
  • Information on subscribed services and changes to them
  • Billing information
  • Other information related to the customer relationship and subscribed services

The IP addresses of website visitors and cookies necessary for the functionality of the service are processed based on legitimate interest, for example, for security purposes and for collecting website visitor statistics when they can be considered personal data.
Consent is requested separately for third-party cookies when necessary.

6. Regular Sources of Data

Data stored in the register is collected from customers through:

  • Messages sent via website forms
  • Email
  • Phone
  • Social media services
  • Contracts
  • Customer meetings
  • Other situations where the customer voluntarily provides their information

Information about the contact persons of companies and other organizations may also be collected from public sources, such as websites, directory services, and other companies.

7. Regular Disclosures of Data and Transfers Outside the EU or EEA

Data is not regularly disclosed to third parties. Data may be published to the extent agreed with the customer.

Data may be transferred outside the EU or EEA by the data controller. Data will not be transferred to the United States without the explicit consent of the registered individuals.

8. Principles of Register Protection

The processing of the register is carried out with care, and data processed via information systems is properly protected.

If register data is stored on internet servers, appropriate physical and digital security measures are taken to protect the equipment. The data controller ensures that stored data, server access rights, and other critical personal data are handled confidentially and only by employees whose job description includes handling such data.

9. Right to Access and Request Correction of Data

Each individual registered in the register has the right to review their stored personal data and request correction of any incorrect or incomplete data.

If an individual wishes to review their stored data or request corrections, a written request must be submitted to the data controller. The data controller may require the requester to prove their identity.

The data controller will respond within the timeframe specified in the EU General Data Protection Regulation (typically within one month).

10. Other Rights Related to Personal Data Processing

Individuals in the register have the right to request the deletion of their personal data (“right to be forgotten”). Additionally, registered individuals have other rights under the EU General Data Protection Regulation, such as the right to restrict processing in certain situations.

Requests must be submitted in writing to the data controller. The data controller may require the requester to prove their identity.

The data controller will respond within the timeframe specified in the EU General Data Protection Regulation (typically within one month).