1. GENERAL

This Privacy Policy is an information document applicable to the customer register of Aava Shipping Oy (hereinafter also referred to as the ”Controller”). This Privacy Policy describes the personal data collected by the Registrar and how it is processed when you visit the Registrar's website or use the Registrar's services through it. For the purposes of this Privacy Policy, the term ”personal data” means any information from which you can be identified and which you have provided when using the services of the Controller and/or which the Controller has obtained through other channels.

2. THE CONTROLLER

Aava Shipping Ltd
3156847-5
Karjarannantie 33, 28100 Pori

3. THE CONTACT PERSON FOR MATTERS CONCERNING THE REGISTER

Niilo Peltomäki
[email protected]
+358 40 519 0445

4. THE NAME OF THE REGISTER

Aava Shipping Oy's customer and marketing register.

5. GROUNDS FOR KEEPING THE REGISTER

Personal data is processed on the basis of a contractual relationship with a customer, a legitimate interest, the consent of the data subject, a legal obligation or any other material connection.

6. PURPOSE OF PROCESSING PERSONAL DATA

Registered personal data is processed for the management, maintenance, development, analysis and statistics of customer relationships related to the services of the Controller, as well as for the production, provision and development of services.

The data contained in the register may be used for communication, advertising, marketing and direct marketing between the Controller and the data subject within the limits permitted by law. The data subject has the right to object at any time to direct marketing concerning him or her.

Personal data is also processed in order to comply with legal and regulatory obligations to retain, report and inquire about personal data.

The controller also collects data to identify the customer and to prevent abuse. The controller does not use personal data for automated decision-making or profiling.

7. CONTENT OF THE REGISTER

The register consists of registers kept by IT systems and manually kept files. The register may contain information relating to the data subject:

  • Basic information about the data subject, such as name, personal identification number, postal address, e-mail address, telephone number, language and nationality.

  • Name, postal address, e-mail address, telephone number, language and nationality of the contact person

  • Name of the employer company, name of the branch, business ID, postal address, VAT number

  • Information relating to the contractual relationship or other material connection and information on the use of services

  • Information related to invoicing

  • Information on communication related to customer service situations

The controller applies the principle of data minimisation when processing personal data.

8. REGULAR SOURCES OF INFORMATION

As a rule, personal data concerning the data subject is collected and updated only on the basis of information received from the data subject himself/herself and on the basis of documents and records relating to the management of the customer relationship. Personal data may also be collected and updated from the Controller's partners, from contacts with the Controller's staff - or staff of a company acting on the Controller's behalf - by telephone, e-mail, letters, marketing events or occasions, mailing list registrations and from various public and private registers, such as trade registers and databases of industry service providers.

9. REGULAR DISCLOSURES OF PERSONAL DATA

Information from the register will only be disclosed to third parties in exceptional cases.

As a general rule, the controller will not disclose data from its register to third parties in Finland, the EU or outside the EU, unless this is necessary for the purposes of the register or the technical implementation of the data processing, in which case the transfer of data will comply with the requirements of personal data legislation.

Information from the register is only disclosed with the customer's consent or when the disclosure is specifically provided for, for example to tax, enforcement, police or social authorities. The data subject will always be informed of any request for personal data, where permitted by law.

10. TRANSFER OF PERSONAL DATA OUTSIDE THE EU OR ETA

No personal data from the register will be disclosed or transferred outside the EU or the European Economic Area, unless this is necessary for the performance of a service related to a customer relationship or other material connection.

11. PRINCIPLES OF REGISTER PROTECTION

The electronically processed data contained in the register are protected by firewalls, passwords and other generally accepted technical means. The databases and their backups are located in locked and controlled premises with restricted access. Other physical filing cabinets are located in restricted areas.

Only identified employees of the Controller and IT support staff acting on behalf of the Controller have access to the data contained in the register, with access rights granted by the Controller.

12. RIGHTS OF THE DATA SUBJECT

The data subject has the right to:

  • be informed about the processing of their personal data

  • have access to and check personal data concerning him or her

  • have incorrect information corrected or incomplete information completed

  • object to the processing of personal data as unlawful

  • request the restriction of the processing of personal data

Requests to exercise the rights of the data subject should be made by contacting the Controller. The controller may ask for the request to be specified in writing and for verification of identity before processing.

AMENDMENT OF THE SUMMARY

Aava Shipping Ltd is constantly developing its business and reserves the right to change this document. Changes may also be based on changes in legislation and will be published on this website.