Privacy policy

1. Data Controller

Name: WEIVI Oy
Business ID: 300840-4
Phone Number: 010 5794400
Email Address: contact@weivi.fi

2. Person Responsible for Register Matters

Company: WEIVI Oy
Name: Alia Dannenberg
Phone Number: 010 5794400
Email Address: alia@weivi.fi

3. Data Protection Officer

Company: WEIVI Oy
Name: Alia Dannenberg
Phone Number: 010 5794400
Email Address: alia@weivi.fi

4. Purpose of the Register

The register contains information about customers, potential customers, and business partners. This includes suppliers of goods and services, subcontractors, and representatives of external stakeholders. Collected personal data is used for customer identification, access rights management, order fulfillment for registered users, and maintaining and improving customer relationships.

5. Basis for Data Collection and Processing

Customer or business partner information is collected and processed based on consent or for the performance of contracts with customers or business partners, as well as for informing about our services.

6. Content of the Register

The register may contain the following information:

Contact details:

  • Name
  • Personal identification number
  • Company name
  • Business ID
  • Address
  • Email address
  • Phone number

Customer information:

  • Details of purchased products/services
  • Information necessary for successful customer relationship management (depending on the nature of the relationship, this may include sensitive data)

Login information:

  • Username
  • Password

7. Retention Period

Personal data is retained as long as necessary for contract fulfillment with customers, development of customer or business relationships, or improvement of customer service. However, it should be noted that the data controller may have a legal or other right or obligation to retain information even after the termination of customer or business relationships.

8. Regular Sources of Information

Customer information is typically obtained from:

  • The customer directly during the establishment and duration of the customer relationship.
  • The customer through online forms or other communication channels.
  • Public organisation websites or announcements related to potential customers.
  • Google Analytics tool.

9. Regular Disclosures and Transfers of Data within or outside the EU/EEA

Data is not disclosed to any purposes outside WEIVI except for disclosures necessary for successful customer or business relationship management as agreed with the customer. Personal data is not transferred outside the EU/EEA by WEIVI. However, some external service or software providers used by WEIVI may retain data outside the EU/EEA.

10. Use of Cookies

We use a feature called cookies on our website. A cookie is a small text file sent to and stored on the user’s computer, allowing the website administrator to identify frequent visitors, facilitate user logins, and compile aggregated information about visitors. This feedback helps us continuously improve our website content. Cookies do not harm users’ computers or files. We use them to provide personalised information and services based on individual needs.

If a user visiting our site does not want us to collect the aforementioned information through cookies, most web browsers allow disabling cookie functionality. This can usually be done through browser settings.

However, it’s essential to consider that cookies may be necessary for the proper functioning of some pages we maintain and the services we offer.

11. Register Protection

Data is transmitted over an SSL-secured connection.

Electronic data is protected by antivirus software, firewalls, user credentials, and passwords.

Access to data is restricted to personnel employed by the data controller who need the information for their tasks.

12. Automated Decision-Making

No automated individual decisions (as defined in Article 22 of the EU General Data Protection Regulation) are made.

13. Rights of the Data Subject

The data subject has the following rights, and requests related to exercising these rights should be sent to contact@weivi.fi:

Right of Access

The data subject can review the personal data we have stored. A written request for access should be sent, signed, to the person responsible for register matters. Access is free once a year.

Right to Rectification

The data subject can request correction of inaccurate or incomplete information.

Right to Object

The data subject can object to the processing of personal data if they believe it has been processed unlawfully.

Right to Opt-Out of Direct Marketing

The data subject has the right to prevent their information from being used for direct marketing.

Right to Erasure

The data subject can request deletion of their data if processing is no longer necessary. We will either delete the information or provide a justified reason if deletion is not possible.

  • Note that legal or other obligations may prevent us from deleting requested information.
  • Additionally, fulfilling a deletion request may impact our ability to provide certain services or content.
Withdrawal of Consent

If processing is based solely on consent (not related to customer or membership relationships), the data subject can withdraw their consent.

Complaints and Appeals

The data subject has the right to complain to the Data Protection Ombudsman if they believe we are violating applicable data protection laws.

14. Reporting Security Breaches and Risk Assessment

Security breaches are immediately reported to the police and affected customers upon detection or receipt of information.

The level of protection used has been assessed as sufficient against typical hacking attempts.