Privacy Policy
1. Data Controller
Crasman Oy
Perämiehenkatu 12 E
00150 Helsinki
Business ID: 1045259-6
2. Register Matters and Contact Person
Crasman Oy's customer service assists with register matters on weekdays from 9 am to 5 pm. Samuli Hokkanen at Crasman Oy is responsible for marketing and customer register matters. For inquiries related to register matters, contact via email at crasman@crasman.fi or by phone at +358 10 217 6989.
3. Name of the Register
Crasman Oy's marketing and customer register.
4. Basis and Purpose of Maintaining the Register
Crasman Oy maintains the marketing and customer register for managing, maintaining, and developing customer relationships or other legitimate connections, targeting and analyzing supply, producing, offering, and developing services, as well as for market research and other statistical purposes.
Register information may be used for marketing between Crasman Oy and a customer or potential customer (including electronic direct marketing) within the limits allowed by law.
Authorized contact persons at the customer company have the right to define the contact persons to be stored in Crasman Oy's marketing and customer register concerning that customer relationship.
5. Information Contained in the Register
Information stored in Crasman Oy's marketing and customer register does not contain personal data of contact persons unless necessary for the current or potential future customer relationship or identical to the company's data.
The register may contain the following information about customer company contact persons:
first and last name
mobile phone number
landline number
email address
language
position and/or role at the company
interests
marketing permissions and prohibitions
information regarding the customer relationship (for example, billing and payment information, product and order information, customer feedback, and inquiries).
In addition to the above, the register may contain information related to the contact person from the customer company or potential customer company, such as
information about upcoming events (meeting times and locations)
historical information about past events (contact, offer, meeting, and conference information)
information about the use of Crasman Oy's marketing content.
6. Regular Data Sources
Crasman Oy collects personal data during the customer relationship and during the work to establish a potential customer relationship.
Data can be collected and supplemented with the person's consent (for example, using cookies), from the population register, and other third-party registers.
Data is also collected during various marketing activities such as electronic direct marketing and events, as well as from public sources.
7. Disclosure or Transfer of Data
Crasman Oy discloses personal data only when there is a justified need and always in accordance with the requirements of the law. For carrying out tasks according to the privacy notice, Crasman Oy uses selected subcontractors with whom agreements have been made for processing personal data on behalf of Crasman Oy. Such data processing agreements have been made, for example, with IT and analytics service providers and marketing and communication service companies.
Personal data may be transferred outside the European Union or the European Economic Area in accordance with data protection legislation and within its limits. We have ensured an adequate level of data protection compliant with the requirements of the EU General Data Protection Regulation, even in situations where data is transferred outside the EU or EEA, by following the equivalence decisions issued by the European Commission and, where necessary, using the standard contractual clauses approved by the European Commission and additional protective measures when needed.
8. Principles of Register Protection
Personal data contained in Crasman Oy's marketing and customer register is handled reliably in a closed and protected information system. Access to the register is protected with user-specific IDs, passwords, and access rights, and the register is handled via a secure connection.
Crasman Oy has given its employees binding written instructions concerning the processing of personal data, data security, and data protection, and employees are committed to following these instructions.
Regarding external partners and service providers, Crasman Oy always has a valid Data Processing Agreement (DPA) in place, and the data is processed according to documented instructions.
9. Data Retention Period
Crasman Oy processes and retains data only as long as it is necessary for the pre-defined purpose of the personal data.
Data that has become unnecessary, for which there is no longer a basis for retention or processing, is regularly deleted in accordance with Crasman Oy's own privacy practices.
Personal data has become unnecessary, for example, when a customer, business, partnership, or contractual relationship has ended, and Crasman Oy does not consider the formation of a new business relationship likely.
Data is retained no longer than 12 months after the end of necessity. Register data cleanup is performed annually.
10. Rights of the Data Subject
The data subject has all the rights according to the regulation to inspect and manage their own data.
Right to Inspect Data
The data subject has the right to inspect what data concerning them is stored in Crasman Oy's marketing and customer register. A request to inspect data can be sent via email to the data controller. The request must clearly specify the data allowing the identification of the data subject.
Right to Correct Data and Restrict Processing
The data subject has the right to request the correction or deletion of incorrect, incomplete, unnecessary, or outdated data by notifying Crasman Oy. Additionally, in certain situations, the data subject has the right to request the restriction of personal data processing or otherwise object to processing.
Right to Request Data Deletion or Object to Data Processing
The data subject has the right to request the deletion of personal data or object to its processing when it is based on legitimate interest. The data subject always has the right to object to direct marketing via the link found at the end of an email sent by Crasman Oy or by contacting Crasman Oy.
Right to Lodge a Complaint with a Supervisory Authority
The data subject can lodge a complaint regarding the processing of personal data with the supervisory authority, which is the data protection ombudsman.
All the aforementioned requests should be directed to the addresses found in sections 1 and 2 of this notice.
11. Cookies and User Tracking
Crasman Oy uses cookies on its website. See current information on the use of cookies.
If you wish to modify your cookie preferences, you can do so via the cookie settings.
We use Leadoo user tracking to monitor how our users interact with our website and combine this data with user information collected, for example, through chat interactions. Leadoo employs etag tracking, which technically differs from cookie-based tracking but is subject to the same legal principles as cookies. Check Leadoo Marketing Technologies Oy's privacy policy to know more about what is tracked within the system. From a GDPR perspective, we act as the controller and Leadoo as the data processor. If you do not wish to be tracked, you can clear your browser's cache. More about how Leadoo works.