Data Privacy

LapWall Oy's customer, supplier, and partner registers

LapWall Oy designs, manufactures, and delivers wood elements to construction companies and developers. In order to serve our customers and deliver our products, we collect necessary personal data from the contact persons of our customers, suppliers, and partners. In this privacy policy, we explain what information we collect, how we use and protect it, and how data subjects can influence the processing of their personal data. This privacy policy applies to the processing of personal data in LapWall Oy's customer, supplier, and partner registers.

Data controller:

LapWall Oyj

Periojantie 3

92930 PYHÄNTÄ

Business ID 2422956-3

Contact person for data protection matters:

Jukka-Pekka Salo

Lentokatu 2, 90460 Oulunsalo

Phone:

Email: tietosuoja@lapwall.fi

1. Data subjects and personal data processed

Our customer register contains information about the contact persons and representatives of our customers or potential customers. Our supplier and partner register contains information about the contact persons of our suppliers and partners.

The data collected in the registers consists of contact details provided by the contact person themselves or their employer, such as name, email address, telephone number, employer, and job title. We may also store information about consent or refusal regarding direct marketing. We do not collect sensitive data.

We do not collect personal data from publicly available sources, nor do we use automated methods to collect personal data.

2. Purpose and legal basis for processing personal data

Personal data is processed for the management and maintenance of customer, supplier, and partner relationships, for communication, for processing orders and offers, and for the delivery of products and services.

The primary basis for the processing of personal data is LapWall Oy's customer relationship or potential customer relationship or other contractual relationship with the company employing the data subject and our legitimate interest in managing the customer and cooperation relationship. Personal data may also be processed on the basis of the consent given by the data subject.

3. Recipients and processors of personal data

Personal data is processed by LapWall Oy employees whose duties relate to marketing, sales, installation, or administration. Our staff are trained in secure data processing, and each staff group only processes data to the extent necessary for the performance of their duties.

We also use trusted service providers for the processing of personal data, to whom personal data may be transferred. Such service providers include the suppliers of the information systems and cloud services we use. We do not allow service providers to use personal data for any purpose other than to provide the service. All agreements with our service providers take into account the requirements of the EU General Data Protection Regulation and other legislation.

4. Transfer of personal data outside the EU or EEA

Personal data will not be transferred outside the EU or EEA.

5. Profiling and automated decision-making

Personal data will not be used for automated decision-making or profiling.

6. Disclosure of personal data

Personal data will not be disclosed to third parties as a matter of policy. In the event of any disclosure of personal data, we will comply with applicable data protection legislation.

If we decide to sell or transfer all or part of our business for strategic or other business reasons, we may, as part of such sale or transfer, transfer the information we have collected and stored, including customer information containing personal data, to anyone who is involved in the sale or transfer of the business.

In addition, we may disclose personal data if we believe it is necessary to comply with applicable law, regulation, or a request from a public authority.

7. Data security

Personal data is stored in electronic registers with appropriate measures in place to ensure the security of personal data. Personal data is protected against unauthorized access and accidental or unlawful destruction, alteration, disclosure, transfer, or other unlawful processing. The use of registers, modification of data, and processing require user identification and a secure connection. The use of registers is only permitted to designated persons whose task is to maintain and manage the system or customer relationships.

8. Retention period for personal data

We will only retain the personal data we collect for as long as it is necessary for the purposes described in this privacy policy, unless the retention of the data is required by law or permitted by law. We will delete the personal data stored in the register when the data subject's employment relationship ends or their duties change in such a way that there is no longer a basis for processing the personal data.

9. Rights of the data subject

The data subject has the rights set out below in accordance with data protection legislation, the application of which in each individual case depends on the purpose and context of the processing of personal data. The data subject may exercise their rights by submitting a written request to the contact person specified in this privacy statement. In order to ensure the reliable identification of the data subject, we may in certain situations require that requests to exercise rights be made in person at our place of business or by means of a letter signed by the data subject and containing the relevant identification information. We will respond to requests in writing and always strive to resolve issues concerning the processing of personal data directly with the data subject, respecting all of the data subject's rights.

Right to access personal data

The data subject has the right to obtain confirmation as to whether personal data concerning him or her are being processed, to access the data, and to obtain information about the processing of personal data. In addition, the data subject has the right to obtain a copy of the personal data.

Right to rectification of personal data

The data subject has the right to request the rectification of inaccurate or incomplete data concerning him or her.

Right to erasure of personal data

The data subject has the right to request the erasure of his or her personal data. The controller shall erase the personal data of the data subject if they are no longer necessary for the purposes for which they were collected or otherwise processed, or if there is another requirement for erasure under data protection legislation.

Right to restriction of processing

The data subject has the right to request that the controller restrict the processing of their personal data, for example in a situation where the data subject is awaiting the controller's response to a request for rectification of their data.

Right to withdraw consent

If the processing of personal data is based on the consent of the data subject, the data subject has the right to withdraw their consent at any time by notifying the controller. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to object to processing

The data subject has the right to object to the processing of personal data based on legitimate interests on grounds relating to their particular situation. The controller may refuse to comply with the request for objection on the grounds provided for by law. However, the data subject always has the right to object to the processing of their personal data for direct marketing purposes and profiling.

Right to transfer personal data from one system to another

Insofar as the data subject has provided personal data to the controller themselves, which is processed on the basis of the data subject's consent or for the performance of a contract, the data subject has the right, under certain conditions, to receive the data in a machine-readable format and to transfer it to another controller.

Right to lodge a complaint with a supervisory authority

The data subject has the right to lodge a complaint with the competent supervisory authority if the data subject considers that the processing of their personal data is in breach of data protection legislation.

Possible changes to data protection practices

We may amend and update this privacy policy as our services and business develop and/or as legal requirements change. If the changes are significant, we will notify you on our website or by other means, such as email. The date of the latest change will be indicated in the header of the statement.

10. Cookies

Our website uses cookies to track visitors' movements on the site. Cookies are small text files that the site sends to the user's computer when they visit the site. The information collected by cookies includes, for example, the user's browser, screen resolution, device operating system, and time spent on the site.

Cookie data can be used to track and analyze website traffic and to improve the site to better serve visitors.

Cookie management

Most internet browsers accept cookies by default. However, by changing the browser settings, the user can prevent the browser from storing cookies or restrict their use. By adjusting your browser settings, you can also delete previously installed cookies. However, disabling cookies may affect the functionality of some features of the website.

Google Analytics

The website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses a set of cookies to collect data, create usage statistics, monitor the site, and improve its performance (performance cookies). All information obtained through these cookies is collected and compiled anonymously and does not identify the user as an individual.

Third-party cookies

During your visit to the website, you may also receive cookies from third parties on your computer from other websites or web servers embedded in the website's content.

These cookies enable interaction with, for example, social networking sites or other external system platforms. Even if the user does not use the service in question, it is possible that information about the visit will be collected on the website.