Privacy notice

1. Controller and scope

Greenmoore Oy, Finnish Business ID 1850158-3, Tulliportinkatu 2, FI-70100 Kuopio, Finland, info@greenmoore.fi, tel. +358 17 363 8035.

This notice covers general customer, sales, rental and support activities and the technical use of the website. Separate service-specific information is provided for any tracking, alarm and other special services.

2. Data and sources

We process necessary names, contact and company details; order, contract, invoicing and payment information; customer communications and support matters; device identifiers; and records of consent and objection. Data is obtained from the customer, their organisation, in connection with delivery, payment or service, and, where necessary, from public business-information sources. Information required by law is provided about data obtained from other sources.

Technical use of the website may involve processing an IP address, access time, requested address and browser technical information. Health data is not needed for general customer service and should not be sent unnecessarily.

3. Purposes and legal bases

Consumer personal data is processed to enter into and perform a contract and to take steps requested by the consumer before entering into a contract. Processing the contacts of business customers is based on the legitimate interest of maintaining and managing customer relationships. Customer service, security of operations and systems, and the investigation of legal claims may be based on legitimate interests, assessed with the data subject's rights in mind.

Accounting and other statutory obligations are based on law. Consent is used where required, for example for electronic direct marketing or non-essential tracking. Consent is not a condition of purchase.

If information necessary to perform a contract is not provided, it may not be possible to fulfil an order or service. We do not make decisions based solely on automated processing that produce legal or similarly significant effects.

4. Recipients and location

Greenmoore personnel and service providers process data to the extent required by their duties. Necessary data may be provided to transport, payment, accounting, email, IT and maintenance services, and to authorities on a statutory basis.

Data protection is agreed with processors acting on Greenmoore's behalf. Some recipients, such as banks and authorities, act as independent controllers in their own functions.

Personal data described in this notice is not transferred outside the European Union or European Economic Area.

5. Security and retention

Data is protected through role-based access rights, technical safeguards and staff instructions. Data is retained only for the period required by the purpose, contract, statutory obligations or legal claims.

Retention of customer, contract and maintenance information is assessed in light of the customer relationship, the equipment's expected service life, statutory liability for defects and limitation periods for claims. Communications are kept for the handling of the matter and any necessary follow-up; unnecessary data is deleted.

Accounting material is retained as required by law: accounting records, financial statements and equivalent material for at least 10 years after the end of the financial year, and vouchers and other material subject to that obligation for at least six years after the end of the year in which the financial year ended.

Technical logs are retained according to the needs of operation, information security and investigation of actual incidents. Backup data is removed according to the controlled backup rotation. The minimum information concerning a marketing objection may be retained to comply with the objection.

6. Rights and contact

The data subject has the right to receive information about processing, access their data and require inaccurate data to be corrected. Subject to the legal requirements, they have the right to erasure, restriction of processing, data portability and objection to processing. Direct marketing may be prohibited at any time. Consent may be withdrawn; withdrawal does not affect the lawfulness of processing before withdrawal.

Not all data can be erased, for example because of a statutory retention obligation. A request should be sent to Greenmoore's contact details. Identity will be verified where necessary. A request is generally answered within one month; any extension permitted by law and the reasons for it will be communicated during the first month.

The data subject may lodge a complaint with the Office of the Data Protection Ombudsman: www.tietosuoja.fi/en.

This notice is updated when the processing changes. An update does not constitute consent to a new purpose.

Download text version