Privacy Policy, GDPR
1. Data Controller
Hioma Production Oy Ab
Business ID: FI31908441
Jakarintie 451
07320 Jakari, Finland
myynti@hioma.fi
+358 40 767 1977
2. Data Protection Officer
The company does not have a designated Data Protection Officer, but privacy-related inquiries can be directed via email to: helena.nymark@hioma.fi
3. Purpose of Processing Personal Data
Personal data is processed for the following purposes:
- Customer relationship management and communication
- Drafting and execution of contracts
- Invoicing and accounting
- Direct marketing targeted at business customers
- Service development and improvement of customer experience
- Management of supplier relationships and related contracts
4. Data Subjects and Processed Data
Data subjects include contact persons of client companies, potential customers and partners, suppliers, subcontractors, and other service providers. Processed data may include:
- Name
- Job title and position within the company
- Email address
- Phone number
- Company name and address
- Customer communication and history
- Contract information
- Billing information
5. Regular Sources of Data
Data is obtained from:
- The data subject themselves (e.g., through inquiries, website forms, or contracts)
- Public sources (e.g., business registries, websites)
- The employer or a business partner
6. Data Recipients and Processors
Personal data may be shared with the following parties:
- Email service providers
- Customer relationship management systems (CRM)
- Providers of accounting and invoicing services
Data is not disclosed to other third parties without a legal basis.
7. Transfer of Data Outside the EU/EEA
As a rule, personal data is not transferred outside the EU/EEA. If such transfer occurs (e.g., in the case of cloud services), an adequate level of data protection is ensured, for example, through EU Standard Contractual Clauses.
8. Data Retention Period
Personal data is retained for the duration of the customer relationship and for up to five (5) years after the end of the contract or last contact, unless legislation (e.g., the Accounting Act) requires longer retention.
9. Rights of the Data Subject
The data subject has the following rights:
- To access their personal data
- To request correction or deletion of their data
- To object to or restrict data processing
- To object to direct marketing
- To request data transfer from one system to another, if processing is based on consent or contract
These rights can be exercised by contacting: helena.nymark@hioma.fi
10. Right to Lodge a Complaint with a Supervisory Authority
The data subject has the right to lodge a complaint with a data protection authority if they believe their data has been processed unlawfully.