Privacy Notice

Basic terms and conditions for processing personal data of customers and service users

Data controller

iDiD Oy
Yliopistonkatu 60 A
33100 Tampere
puh. 010 281 4350

Contact person responsible for data protection matters

Data protection officer
Timo Portimojärvi
Sähköposti: etunimi@idid.fi%74%69%6D%6F%40%69%64%69%64%2Eç%66%69

Basis and purpose of processing personal data

When processing personal data, iDiD Oy may act as a data controller or a data processor.

The legal basis for processing personal data is

  • Consent given by the data subject to the processing of personal data
  • Contractual relationship between the data subject and the data controller
  • Contractual relationship between processor and controller
  • Fulfilment of the controller's legal obligations
  • The legitimate interest of the controller, which is based on the customer relationship between the data subject and the controller

Registered personal data is used in iDiD Oy's customer relationship, i.e.

  • To enable the service to the customer
  • To send the customer and partner newsletter
  • To register participants for training and demo events and send invitations

Regular sources of information

Information relevant to the personal register is regularly obtained from:

  • From the registered person himself
  • From the contract customer

Disclosure of personal data

When processing personal data, iDiD Oy does not disclose personal data to third parties and personal data is therefore not transferred by iDiD Oy outside the EU and the European Economic Area.

As the controller, iDiD Oy uses cloud services to store personal data in some registers, which may be located outside the EU and the European Economic Area.

However, data may be disclosed, for example, to authorities based on a legal requirement.

Profiling

Personal data is not used for profiling or other automated decision-making.

Data subject rights

Right to access personal data

Right to access personal data

Right to rectification of data

The data subject has the right to request that inaccurate and incorrect personal data concerning him or her to be corrected. The data subject also has the right to have incomplete personal data completed by providing the necessary additional information.

Right to erasure of data

Rekisteröidyllä on oikeus pyytää itseään koskevien henkilötietojen poistamista, jos

The data subject has the right to request the erasure of personal data concerning him or her if

  1. the personal data are no longer necessary for the purposes for which they were collected;
  2. the data subject withdraws the consent on which the processing of the personal data was based and there is no other legal basis for the processing; or
  3. the personal data have been processed unlawfully.

Right to restriction of processing

The data subject has the right to restrict the processing of personal data concerning him or her if

  1. the data subject disputes the accuracy of the personal data;
  2. the processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; or
  3. the controller no longer needs the personal data for the original purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims.

Right to object

The data subject shall have the right, on grounds relating to his or her particular situation, to object at any time to processing of personal data concerning him or her.

The controller shall no longer process the personal data concerning the data subject unless the controller can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, including profiling when it is related to such direct marketing.

Right to withdraw consent

The data subject has the right to withdraw his/her consent to the processing of his/her personal data at any time.

Right to transfer data from one system to another

The data subject has the right to receive the personal data concerning him/her and provided by him/her in a structured, commonly used and machine-readable format and the right to transfer those data to another controller.

Right to lodge a complaint with a supervisory authority

The data subject has the right to refer their matter to a supervisory authority if the data subject considers that the processing of personal data concerning them violates the relevant legislation. The national supervisory authority for personal data matters is the Data Protection Commissioner, which operates under the Ministry of Justice.

Contacts

In all questions related to the processing of personal data and in situations related to the exercise of their rights, the data subject should contact iDiD Oy's data protection officer.

Registers in use

iDiD users

ROLE: Processor, in some cases controller
BASIS: Contractual relationship (customer agreement)
PURPOSE: Use of the iDiD system, support, announcements
DATA DISCLOSURE: As a processor, data is not disclosed. To the newsletter register of customers and sales partners, Invoicing contacts to the invoicing customer register

Users logged in to the Support site

ROLE: Data controller
BASIS: Contractual relationship (customer agreement), consent of the person to data processing
PURPOSE: Use of the iDiD support website
DATA DISCLOSURE: Cloud service

Customer newsletter register

ROLE: Data controller
BASIS: Contractual relationship (customer agreement), consent of the individual to the processing of data
PURPOSE: Distribution of news related to the iDiD software and the company
DATA DISCLOSURE: Cloud service

Sales partner newsletter register

ROLE: Data controller
BASIS: Contractual relationship (resale agreement)
PURPOSE: Distribution of news related to iDiD software and the company
DATA DISCLOSURE: Cloud service

Invoicing customer register

ROLE: Data controller
BASIS: Contractual relationship (customer agreement)
PURPOSE: Invoicing
DATA DISCLOSURE: Cloud service, Online invoicing

Training and event register

ROLE: Data controller
BASIS: Contractual relationship (customer agreement), consent of the person to process the data
PURPOSE: Registration for training and/or events, temporary register
DATA DISCLOSURE: None

Demo register

ROLE: Data controller
BASIS: Contractual relationship (customer agreement), consent of the person to data processing
PURPOSE: Registration for demo events, temporary register
DATA DISCLOSURE: None