Privacy policy

Customer, User, and Marketing Register

1. Data Controller
   Suomen Rakettitukku Oy (2411195-2)
   Hakamaantie 20, 90440 Kempele
   Tel. +358 20 785 6680
   info@rakettitukku.fi
   www.rakettitukku.fi

2. Contact Person
   Register Contact: Jorma Peltokorpi
   Tel. +358 20 785 6680
   info@rakettitukku.fi (requests regarding registered rights)
   www.rakettitukku.fi

3. Register Name
   Suomen Rakettitukku Oy’s Customer, User, and Marketing Register

4. Purpose of the Register
   Personal data is processed to manage the customer relationship between Suomen Rakettitukku Oy and its customers and to provide and develop products and services.

   The register is also used for maintaining customer information for purposes of customer relationship management, billing, error correction, creditworthiness checks, reporting, verification of company information, and the marketing and communication of products and services offered by Suomen Rakettitukku Oy.

   The register's information may also be used internally by Suomen Rakettitukku Oy for purposes such as audits, data analysis, research, improving products and services, and customer communications.

5. Content and Categories of Personal Data
   Data subjects whose information may be processed in the register include contacts from employer organizations that are or have been customers, contacts of potential customers, individuals who have contacted the data controller, users of Rakettitukku’s services, or those who have granted marketing consent. The register may process data necessary for its purposes, including but not limited to the following categories:

   • Basic information such as name and contact details (address, email address, phone number, billing address) and the names and contact details of contacts.
   • Customer relationship information, such as contract and order details, billing information, meeting records, any direct marketing permissions or prohibitions, customer feedback, product and service-related information, and other communication between parties.

   Personal data is accessible to Suomen Rakettitukku Oy employees and subcontractors processing data on behalf of the company.

6. Data Retention
   Data is retained in the register for the duration of the customer relationship or until the registered person requests its deletion unless the data controller has a statutory obligation to continue processing personal data. After the customer relationship ends, personal data is retained for up to one year. Potential customer data is retained in the direct marketing register as long as the individual is in a role relevant to the marketed product or service, provided they have not opted out of direct marketing. In such cases, an opt-out record may still be kept in the register.

7. Regular Data Sources
   Regular data sources include data provided during the establishment of the customer relationship, data provided during sales promotion, information given during contract preparation and completion, transaction data generated during the customer relationship, and information provided during other communications between the data controller and the data subject. Additionally, data may be obtained from service providers handling personal data and public authorities, such as ytj.fi (customer address and billing information) and tieke.fi (e-invoicing addresses).

8. Regular Data Transfers
   Information contained in the register may be shared within Suomen Rakettitukku Oy and with its subcontractors for the provision of services. Suomen Rakettitukku Oy may be required to disclose personal data by law, either in connection with legal proceedings or at the request of authorities.

9. Data Transfer Outside the EU or EEA
   Suomen Rakettitukku Oy may outsource certain data processing to companies that may be located outside the EU or EEA, such as the United States. These companies may access personal data to provide their services. In such cases, adequate data security and register handling are ensured through the EU-US Privacy Shield arrangement or by using the EU's standard contractual clauses for data transfer to third countries (Commission Decision C (2010) 593).

10. Principles of Register Security
    Access to personal data and systems containing such data is granted only to employees of Suomen Rakettitukku Oy or its subcontractors authorized by the company, who have the right to process data in the register as part of their work and need it for their duties. We ensure that data is processed confidentially, respecting individual privacy and data security by engaging employees to adhere to privacy and security guidelines. All data processors are bound by confidentiality obligations.

11. Right to Access and Modify Register Information
    Individuals in the register have the right to inspect the information held about them, the right to obtain information about data processing, the right to rectify information, the right to restrict processing, the right to object to processing, and the right to withdraw consent. Data subjects also have the right to be forgotten if the data controller has no statutory obligations to continue processing personal data. All requests concerning data subject rights should be directed to the data controller via email at info@rakettitukku.fi or by mail to Suomen Rakettitukku Oy, Hakamaantie 20, 90440 Kempele.

Suomen Rakettitukku Oy may update its privacy practices periodically. If we make significant changes, we will inform our customers through newsletters or our website.