PRIVACY POLICY
Our website address is: https://www.salesmart.fi.
DATA CONTROLLER
Salesmart Oy
Klovinpellontie 1-3/Torni 2
02180 Espoo
Finland
Issues concerning data protection:
PURPOSES FOR PROCESSING PERSONAL DATA
Salesmart processes personal data so that we can deliver services to our customer and so that we can respond to communications from our potential customers. We process messages sent via the contact form on the basis of the data subject’s consent. (In addition to this, we process communications sent via the quote forms in order to prepare a possible agreement at the data subject’s request.) We process billing material of services that we produce as part of accounting documentation as required by the Accounting Act. We process job applications sent to us on the basis of the data subject’s consent.
We collect statistics on the use of our website by using the Google Analytics service. We utilise the information we have collected by statistical means for the development of our website. The collection of statistics concerning use is based on our legitimate interest to develop the services we offer.
If you send a request to exercise any data subject rights that you are entitled to, we shall save the request and any details about the completed actions, so that we can fulfil the accountability obligation referred to in the General Data Protection Regulation. In addition to this, we process personal data so that we can ensure the security of data processing on the basis of regulatory obligations.
Salesmart does not use automatic decision-making in the processing of personal data.
PERSONAL DATA TO BE PROCESSED
We process the following personal data:
Identifying data and contact details
Information about services
Content and other information about communications
Electronic identifier data and other information about the use of our website
Billing information
In principle, we collect the personal data directly from the data subject. Information that has been marked as mandatory in the form are required for the delivery of any service.
RETENTION PERIODS OF PERSONAL DATA
We store personal data as follows:
Communications and quote requests sent to us: 1 year
Information concerning accounting: period of time required by the Accounting Act
Statistical data about the use of online services: 26 months
Information about the use of data subjects’ rights: 2 years
We store other personal data for no more than two years after the end of any active processing operations.
RECIPIENTS OF PERSONAL DATA
Personal data is processed by our employees who require them to carry out their work duties. In addition to this, we transfer and disclose personal data to the following recipients to the extent required by the purposes of processing:
Google (for the purpose of the Analytics service)
Partners required for delivering services
Suppliers of invoicing and accounting services
Authorities as required by law
Other partners required for the purposes of processing or personal data processors we use
Recipients of personal data located or operating in Europe are bound by the obligations set out in the General Data Protection Regulation concerning the processing of personal data. Personal data is only transferred outside of Europe to such recipients that have implemented appropriate security measures.
DATA SUBJECTS’ RIGHTS
The data subject has the right to obtain information on the processing of personal data as well as the right to gain access to personal data. In addition to this and subject to certain requirements, the data subject has the right to review or remove personal data, the right to limit or refuse processing and the right to have personal data transferred. The data subject also has the right to cancel the consent they have provided as well as lodge an appeal with a supervisory authority.
If you would like to exercise your rights, please contact the data controller in writing. Exercising data subjects’ rights is subject to the identification of the data subject, so please provide the necessary information for identification purposes. Salesmart processes requests concerning data subjects’ rights in accordance with the General Data Protection Regulation and stores details concerning the exercising of rights for a period of two years.