Privacy Policy
Updated 1.10.2023
According to the EU General Data Protection Regulation (GDPR), the controller has an obligation to inform the data subjects in a clear manner. This policy meets the information requirement.
1. Company
Ylläs Express Liikenne Satokangas Oy, Business-ID: FI19356162
Contact details
Ylläs Express
Metsävelhonpolku 7
95970 ÄKÄSLOMPOLO
Finland
Phone +358 (0)400 123 911
E-mail info@yllasexpress.fi
2. Data subjects
Ylläs Express’s customers and their employees.
3. Criteria for keeping the register and its purpose
Personal data is processed on the basis of customer relationship.
Use of personal data processing and register
Personal data is processed only for predefined purposes:
- Execution of ordered transportation
- Managing customer relationships
- Provision of services
- Billing / Financial Management
4. Personal data stored in the register
The customer register contains the following information:
- Contact information:
- Name, phone, email
- Company
- Address, country
- Billing information
- Orders and order history
- Language
5. Regular sources of information
All personal information is collected directly from the customer himself.
6. Rightful data transfer
As a rule, information is not transferred outside of Ylläs Express for marketing purposes.
We have ensured that all of our service providers comply with the privacy laws. Our service providers have access to our register in the following cases:
- management and maintenance of registry
- IT-support
7. Duration of data processing
In general, personal data is processed as long as the customer relationship is active.
8. Data subject’s rights
The data subject has the following rights, which he may use by sending a request to the following address: Ylläs Express, Metsävelhonpolku 7, 95970 ÄKÄSLOMPOLO or info@yllasexpress.fi.
Right to inspect
The data subject may inspect the personal data we have stored.
Right to correct
The data subject may request the rectification of incorrect or incomplete data stored in the registry.
Right to oppose
A data subject may oppose the processing of personal data if he / she feels that personal data has been processed unlawfully.
Right to restrict
The data subject has the right to restrict the use of their data for direct marketing purposes.
Right to be forgotten
The data subject has the right to request the deletion of data if data processing is not necessary.
It should be noted that the controller is obliged to keep the accounting records in accordance with the Accounting Act (Chapter 2, Section 10) for a period of time (10 years). Therefore, accounting records can not be removed before the deadline expires.
Withdrawal of consent
If the processing of personal data is based solely on consent, and not customer-based, the data subject may withdraw their consent at any time.
Right to limit processing
The data subject has the right to demand that we limit the processing of controversial data until the matter is resolved.
Right to appeal
The data subject has the right to file a complaint with the Data Protection Ombudsman if he or she feels that we are in violation of our personal data when processing the applicable data protection legislation.
Contact details of the Data Protection Supervisor: www.tietosuoja.fi/en/index/yhteystiedot.html
9. Data processors
The data controller and companies in its service may process personal data.
We may also outsource the processing of personal data to third parties, thereby guaranteeing that personal data will be processed in accordance with current data protection legislation and otherwise appropriately.
10. Transfer of information outside of EU
In general, we will not transfer information outside the EU or the European Economic Area. However, if personal data is to be transferred outside of the EU and the EEA, we will ensure a sufficient level of protection of personal data, by agreeing on the confidentiality and processing of personal data as required by law.
11. Automatic decision-making and profiling
We do not use data for automated decision making or profiling.