Newsletter register privacy policy

1. Controller

TA-Yhtymä Oy and Maapohjola Oy (on behalf of all subsidiaries of the TA-Yhtymä and Maapohjola Groups, hereinafter referred to as “TA”)
Kutojantie 6-8, 02630 Espoo
Tel. 04577343777
info@ta.fi

2. Contact person in matters concerning the Register

Lawyer Liisa Salmela
Kutojantie 6-8, 02630 Espoo
Tel. 0409222860
tietosuoja@ta.fi

3. Register name

TA newsletter register (hereinafter referred to as “the Register”).

4. Legal basis for the processing of personal data

The processing of personal data is based on the consent provided by the subscriber. Subscribers have the right to withdraw their consent at any time.

5. Purposes of processing personal data

TA processes the data on the subscriber for the purpose of delivering digital newsletters.

6. Personal data to be processed

The Register may contain the following data on the subscriber:

• Name
• Email address
• Telephone number
• Organisation in which the subscriber is employed
• Job title/position

7. Sources of obtaining personal data

TA receives the data directly from the subscriber. The subscriber may remove themselves from the mailing list with a subscription cancellation link included in the newsletter.

8. Disclosure and transfer of personal data

TA does not publish any personal data it collects and complies with the confidentiality obligation with regard to personal data, unless required otherwise by legislation or for the establishment, exercise or defence of legal claims.

The data are not transferred outside TA with the exception of service providers that send out newsletters, event invitations or similar messages on behalf of TA.

9. Storage periods of personal data

The data used for the purpose of delivering the newsletter are stored as long as the subscribed newsletter is published or until the subscriber withdraws their consent. Each newsletter includes a link through which the subscriber can withdraw their consent. If the consent is withdrawn, the subscriber’s data are removed from the mailing list.

10. Register protection principles

TA complies with the legislative and official provisions and the TA data protection and data security policy with regard to the protection of the personal data of the subscribers. The data can only be processed by persons required to access the data for the purpose of carrying out their duties.

TA does not have any manual material pertaining to the Register. Only persons appointed by TA can access the digital material with a personal username and password. Access rights to the Register are specified based on duties. TA’s internal processes are applied in the specification of access rights. The databases and networks used to store the data are protected with organisational and technical measures. The supervision and protection of the Register comply with the provisions applied in the EU.

11. Subscriber’s rights

Right to withdraw consent

Subscribers have the right to withdraw their consent at any time.

Subscriber’s right to access their data

The subscriber has the right to know whether TA is processing personal data on them, and if so, the subscriber has the right to inspect what personal data on them have been stored by TA. TA may request the subscriber to sufficiently specify what personal data or processing operations the subscriber’s request applies to. The subscriber’s right to obtain the personal data may be limited by virtue of the General Data Protection Regulation, or it can be rejected if the provision of personal data would have a harmful effect on the rights and freedoms of others. Such protected rights include TA’s business secrets and the personal data of another person. The subscriber’s right may also be limited by national legislation.

The right to inspection is enforced without delay with a maximum deadline of three months from the presentation of the request. If the subscriber’s right to inspection is manifestly unfounded or unreasonable, especially if the subscriber presents inspection requests repeatedly or requests several copies, TA may collect a fee based on the administrative costs of carrying out the request or refuse to act on the request.

Right to rectification

The subscriber has the right to request TA to rectify any inaccurate and incorrect personal data on them without undue delay. Any incorrect personal data detected can be rectified once TA receives the correct personal data from the subscriber or another reliable source. After receiving information about or detecting incorrect data, the subscriber must without undue delay rectify, delete or complete any personal data contrary to the purpose of the Register and any incorrect, unnecessary, incomplete or obsolete personal data on their own initiative.

Right to erasure (right to be forgotten) and the right to restriction of processing

Upon the subscriber’s request, TA must delete any personal data on the subscriber without undue delay.

Upon the subscriber’s request, TA must restrict the active processing of the personal data as provided for in the legislation.

Right to object to processing of personal data

The subscriber has the right to object to the use of the personal data on them for the purpose of direct marketing at any time. If the subscriber objects to the processing of personal data for direct marketing purposes, the personal data shall no longer be processed for such purposes.

Right to data portability

Insofar as the subscriber themselves have provided TA with personal data processed with the assistance of automated information processing and based on the consent of the subscriber, the subscriber has the right to obtain these personal data primarily in a machine-readable format and to transmit the personal data from TA to another controller, if technically possible.

Right to lodge a complaint with a supervisory authority

The subscriber has the right to lodge a complaint with a competent supervisory authority if the subscriber considers that TA has not complied with the applicable data protection regulations in its activities. The Office of the Data Protection Ombudsman’s phone number is +358 (0)29 5666 700 and the street address is Lintulahdenkuja 4, 00530 Helsinki. The website of the Data Protection Ombudsman can be accessed at https://tietosuoja.fi/en/home.

12. Requests related to the exercise of the subscriber’s rights

In any matters related to the processing of personal data and the exercise of personal rights, the subscriber may contact the TA contact person specified in section 2.

Requests related to the right to inspection or the exercise of other rights of the subscriber must be made in writing by email at tietosuoja@ta.fi or mailed to the address TA-Yhtiöt/Tietosuoja, Knitter Business Park, Kutojantie 6–8, 02630 Espoo. Requests can also be presented in person at any TA office. An inspection request template can be found on the TA website, and it can be picked up from any TA office.

To ensure that the subscriber’s personal data are not disclosed to anyone but the subscriber themselves, TA may ask the party presenting the request to verify their identity with an official identity card or another reliable manner.

Privacy policy updated on 3 July 2023