Register
ID North Oy:s Customer- and Partner register
Controller and the contact person of the register
ID North Oy (“ID North)
2578204-5
Ilmalanportti 4, 00240 HELSINKI
Sanna Pimiä (sanna.pimia@id-north.com)
Description of the processing activities
The Personal Data in the register is processed to enable co-operation and business activities between ID North and it’s Customers and Partners, to comply with contractual and statutory obligations and to improve ID North´s business, sales and marketing.
Processing Personal Data refers to all the processing activities such as collecting, processing and storing, carried out by ID North.
Personal Data is any information that is related to an identifiable person, Data Subject. For example name, image, personnel ID, contact information, title or IP address.
In this Privacy Policy we explain, how and to what purposes we process Personal Data of our Customers and Partners, potential Customers (“Marketing Customers”) and visitors of ID North internet pages. You can also find information of how to use your rights as a Data Subject.
Out of the Data we process, we may create profiles to be able to market and offer improved products and services to fulfill our Customers’ business needs.
Purpose and legal basis of the processing
ID North uses the Personal Data of this register to:
- Comply with contractual obligations between ID North and its Customers and Partners
- Pursue ID North´s legitimate interest
- Comply with ID North´s statutory obligations
- Based on a Data Subject’s consent
For certain type of Personal Data (such as Data related to international business activities, events or customer satisfaction surveys) the Data Controller may also be another company of the Allurity group such as Allurity AB or ID North AB.
Legitimate interest
The processing of Data in the register is based on ID North´s legitimate interest to improve, market and sell its products and services and process Personal Data of its Customers and Partners regarding the following processing activities:
- Maintain Customer and Partner relations
- Co-ordinate and offer events and related marketing
- Collect feedback
- Improve ID North´s business, sales and marketing
- Profile Customers and Partners and optimize network visits of our internet sites for targeted marketing
Consent
The Processing of Personal Data is based on a separate consent for the following processing activities:
- Digital Marketing
- Photographing, use of images, videos or voice recordings
The Data Subject does have a right to withdraw a given consent by contacting the contact person of the register or a representative of ID North to whom the consent was given to.
Source of data
The Data in the Register is collected directly from Data Subjects or from another representative or employee of the Customer / Partner. The data may also be collected from public registers and sources and is used to sales, marketing and co-operation purposes.
We use Cookies on our internet sites, www.id-north.fi and www.id-north.com, to collect various types of information. Some of this information can be considered as Personal Data. More information is available on our internet site and can be found here.
The Data collected for marketing or feedback purposes is optional and Data Subject may only give the Data he / she volunteers.
Groups of data subjects
- Representatives and employees of the potential Customers (“Marketing Customers”) and Partners
- Representatives and employees of the Customers and Partners
- Visitors of our internet pages (www.id-north.fi, www.id-north.com)
Groups of personal data
ID North stores and processes Personal Data of the Data Subjects limited to at most the following information:
- First and last name
- The company name, position (title) in the company
- Contact details
- Company address and the contact person
- Areas of interest (Products, Services)
- Customer-, purchase and co-operation history
- Information and interest related to material, newsletters and planned and visited events
- Username and password information to access ID North´s digital platforms / services including usage history and logs
- Images, videos and voice recordings, based on a separate consent
- Cookies, IP-addresses and other data collected when visiting our internet sites www.id-north.fi / www.id-north.com
- Other data provided to ID North by Data Subject or his/her employer/representative
We may also combine some of this Data to perform other processing activities defined in this Privacy Policy.
Recipients and recipient groups of personal data
The Personal Data is processed, transferred and disclosed in accordance with the applicable Data Protection Legislation. Transfers and disclosures are governed by a Data Processing Agreements, clause or other legal act that is binding on the Processor with regard to the Controller and that sets out the subject-matter and duration of the processing, the nature and purpose of the processing, the type of Personal Data, categories of Data Subjects and the obligations and rights of the Controller.
We may appoint external suppliers and partners to perform tasks on our behalf, such as providing support to our digital platforms and services or helping us in marketing and surveying activities. We also may disclose your Personal Data to authorities in case we are required to disclose such Data by law or authority decision.
ID North is not selling any Personal Data to other companies or third parties.
International transfers and disclosures of personal data
Special safeguards are taken with regard to partners outside the EU/EEA, such as signing agreements that include the standard model clauses for Data transfers adopted by the EU Commission and which are available on the EU Commission’s website. Our digital incident management system and the CRM system do contain Personal Data of our Customer´s and Partner´s employees / representatives, that in some occasions is processed in US.
Otherwise Data will not be transferred or disclosed outside the EU / EEA unless the Customer or Partner is located outside the EU or EEA territory and transferring / disclosing due to that is necessary.
Data subject’s rights
According to applicable Data Protection Legislation, the Controller is responsible for processing your Personal Data. In case you have questions or want to use any of you rights as a Data Subject, please reach out to a Contact Person of this register.
As a Data Subject you have the right to:
- Know that your Data is collected and processed and the purposes of the processing
- Know what Data has been collected and the period for which the Data is stored
- Have inaccurate Data corrected
- Have your Data deleted / have the right to be forgotten if there are no longer legal basis for processing the Data
- Restrict the processing of your Data for specific purposes
- Oppose the use your Personal Data on digital marketing or processing activities where legitimate interest is used as a legal basis
- Transfer the Data from a register to another, when applicable
- Receive information about a Personal Data breach towards the Controller, if it poses remarkable risk to your rights and freedoms
- Claim compensation for damages caused to you by the breach
- Lodge a complaint with a supervisory authority regarding the processing of your Personal Data
Data security
ID North safeguards your Personal Data with a high level of security and has taken appropriate technical and organizational security measures to protect your data from unauthorised access, amendment, dissemination or destruction
The register is maintained mainly in digital form. The manual material is stored in a locked and access controlled space.
The digital Data is protected by firewalls, usernames, passwords and other technical security measures. The rights to access the Data are predefined and limited and the destruction of Data is executed appropriately with care
Data retention
ID North retains Personal Data in accordance with the law.
The Personal Data of Customer´s and Partner´s representatives and employees is stored only as long as necessary, mainly for as long as cooperation between ID North and Customer / Partner exist and / or contractual or statutory obligations require.
The Data necessary for executing digital marketing and offering digital platforms / services is stored as long as the data subject continues to opt-in for digital marketing from ID North or stays registered into services.
Images, videos and voice recordings are stored for 5 years from the date they are produced.
