Business ID: 2348506-3
Sumeliuksenkatu 18 B
Phone: +358 45 2086 816
2. Contact person
Phone: +358 45 2086 816
3. Name of the register
Quva Oy’s Marketing Register.
4. Purposes of processing of the personal data
The main purpose of Quva’s processing of personal data is to:
- market and advertise services including direct marketing
- conduct market researches
- develop services and business
- contact data subjects
- conduct research and collect statistics
- gather statistics about the users of the Quva’s website
- improve the contents of Quva’s website
Collecting and processing of personal data is usually based on data subject’s consent or legitimate interests of the controller.
5. Categories of data subjects and of categories of personal data
Quva may collect personal data of customer’s, potential customer’s and partner’s contact persons. Quva may also collect personal data or other information when data subjects visit on Quva’s websites.
The Quva’s Marketing Register may include following categories of personal data:
- Name, email address, phone number and title
- Company name, contact details and industry
- Certain technical and other information ( such as IP-address, access times, the websites linked from, pages visited, the links and features used, the content viewed or requested, browser or application type, language and other such information)
6. Source(s) from which the personal data originate
Personal data and other information may be collected when data subjects provide information to Quva, visit Quva’s websites (including social media accounts), participate research or campaigns, request services, sign up for newsletters, download guides or otherwise interact with Quva.
Personal data and other information may be updated also from Quva’s other registers, partners’ registers or supervisory authorities’ and other authorities’ registers merely to the extent provided for by applicable law.
7. Duration of processing personal data
Quva discard obsolete and unnecessary personal data in an appropriate manner. Quva only retain personal data as long as it is necessary for the purpose of processing. As required by law or competent authority personal data may be stored for longer.
8. Disclosure and transfer of personal data
In general, Quva uses the personal data only for its internal business purposes and does not transfer the data to any external parties. Some of the personal data may be disclosed to or transferred to third parties merely to the extent provided for by applicable law.
Personal data is only disclosed and transferred within Quva and to such third party service providers, who assist Quva in facilitating and providing its services as well as fulfilling its obligations towards authorities, customer and co-operation partners. Any third party having or gaining access to personal data will have access to and may use such data only to the extent it is necessary for the performance of the tasks and activities agreed upon with Quva and subject to written agreements including appropriate conditions to ensure the confidentiality and sufficient data protection.
Personal data may be transferred third party service providers outside the European Economic Area (EEA), for example the United States of America. In such cases Quva shall ensure that there is a legal basis for such a transfer and that adequate protection for personal data is provided as required by applicable law.
As required by law or competent authority data may also be disclosed and transferred to supervisory authorities and other authorities.
Quva uses website analytics, such as Google Analytics and Leadfeeder, to gather statistics about the users of the Quva’s website with the aim to improve the contents of the website. Generally, the information we collect using these website analytics does not identify person by name. If, however, user signs up on a newsletter or download guide on Quva’s website, Quva may link the information Quva collects using website analytics to other information that identifies person. Quva uses MailChimp to send newsletters to subscribers. MailChimp is a service provided by The Rocket Science Group, USA.
Cookies can be disabled or set browser to alert when cookies are being sent to device. However, disabling cookies may affect ability to use the Quva’s websites.
10. Rights of data subject
Right of access
Data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed in the register, and, where that is the case, access to the personal data.
Right to restriction of processing
Data subject has the right to obtain from the controller restriction of processing personal data, if controller is restricted processing of personal data under applicable law. However, the right shall not apply if there is other legal ground that permits controller processing of personal data.
Right to erasure (‘right to be forgotten’)
Data subject has the right to obtain from the controller the rectification of inaccurate personal data, incomplete personal data completed and the erasure of personal data concerning him or her. However, the right shall not apply if there is other legal ground that permits controller processing of personal data.
Right to data portability
Data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller.
Right to object
Data subject has the right to object at any time to processing of personal data concerning him or her for direct marketing.
Right to lodge complaint
Data subject has right to lodge a complaint with the relevant supervisory authority in the event the data subjects have concerns or remarks regarding Quva’s processing activities.
Should the processing of personal data be based on data subject’s consent, data subject may at any time revoke consent by contacting Quva.
11. Contacting Quva
Anyone who wishes to use data subject rights, shall submit a written request to this effect to Quva as a personally signed or otherwise comparably verified document or appear personally in the premises of the Quva entity. Quva may ask to clarify request and verify identity person before processing any requests. Quva may not necessarily be able to fully meet the data subject’s request, if there is legal grounds that prevents Quva to adhere to the data subject’s request. In this case, the data subject will be duly notified thereof.
Quva shall provide information on action taken on a request to the data subject without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. Quva shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay.
12. Automated decision-making and profiling
Quva is not using personal data for automated decision-making and profiling.
Quva has assigned specific responsibilities to address privacy and security related matters. We enforce our internal policies and guidelines through an appropriate selection of activities, including proactive and reactive risk management, training and assessments. We take appropriate steps to address online security, physical security, risk of data loss and other such risks taking into consideration the risk represented by the processing and the nature of the data being protected. Also, we limit access to our data bases containing personal data to authorized persons having a justified need to access such information