FORESTBIOFACTS PRIVACY NOTICE
This is privacy policy of ForestBioFacts Publishing Oy (ForestBioFacts.com) according to EU’s General Data Protection Regulation (2016/679), Updated: April 18th, 2024.
1. Data controller
ForestBioFacts Publishing Oy / Finnish Forest Products Engineers’ Association (PI)
Address: Tekniikantie 4 C, 02150 Espoo, Finland
VAT number (ForestBioFacts Publishing Oy): FI01143927
Phone: +358 40 132 6688
E-mail: info@forestbiofacts.com
2. Data controller’s representative and contact
Vera Hallikainen, Development Manager, is responsible for the processing of data in ForestBioFacts customer register according to the purpose of the data filing system. E-mail: vera.hallikainen@puunjalostusinsinoorit.fi.
3. Name of the register
ForestBioFacts customer register.
4. Purpose of personal data processing
Personal data is collected and processed to give and maintain membership access to the database, maintain customer relationships, communications, marketing, and prevent any abuse of ForestBioFacts. That personal data (name, email address etc,) will be transferred into that database/the database provider.
5. Legal basis of personal data processing
Personal data is processed because of the customer relationship agreement between the customer and ForestBioFacts Publishing Oy, starting when customer is creating ForestBioFacts user profile.
6. Personal data to be processed
The register from all registered users maintains user data as follows:
– First and last name of the user;
– E-mail address of the user;
Additionally, from online shop users’ data as follows:
- company name, company VAT ID, address, phone number and other information given by the customer and data from payment information according Svea Payments Privacy Policy
7. Content of data filing system and storage period
Registration forms are used to collect data for purposes mentioned earlier, and the data is stored for a membership period and maximum two calendar years after the last activity. The customer data is stored in the ForestBioFacts information system.
8. Information systems employed
Customers’ personal data is stored in the ForestBioFacts database. Finnish Forest Products Engineers’ Association (PI) employees have access to ForestBioFacts’ customer data. ForestBioFacts technical support suppliers have the access to the ForestBioFacts database and use it to solve possible technical problems in the customer interface. The website is hosted by Seravo Oy, registered in Finland. Data is stored on secure servers behind a firewall in Finland. For customer service, PI uses email.
9. Use of cookies
ForestBioFacts employ cookies. A cookie is a small text file that the browser saves on the user’s device. Cookies are used to implement services, facilitate login, and enable the compilation of statistics on services. Users may prevent the use of cookies in their browser programs, but this may prevent the system from operating appropriately.
10. Data transfer and disclosure
As a rule, access to personal data and addresses is not granted for external use.
ForestBioFacts Publishing Oy uses services of external service providers for certain tasks relating to the processing of the data subject’s personal data, such as maintaining newsletter subscription lists, the provision of certain digital services and the processing of data for marketing purposes.
11. Data transfer and disclosure beyond the EU or EEA
Due to the technical and practical requirements some of the personal data may be processed by external service providers located outside the European Union or European Economic Area or at the external service providers’ servers outside the European Union or European Economic Area. However, such external service providers have agreed to the data processing standards of our affiliate.
12. Safeguards for data processing
The customer data may only be accessed by the staff at the Finnish Forest Products Engineers’ Association (PI) and external service providers to the extent required in the performance of their professional duties. Access to the ForestBioFacts database customer information system requires a personal username and password. The staff processes data securely and with care.
13. Automated decision-making
No automated decision-making takes place in the data processing.
14. Rights of the data subject
Data subjects have the right to withdraw their registration.
Data subjects have the right to lodge a complaint with the Data Protection Ombudsman if the subjects consider that the data processing regarding them is in breach of data processing legislation in force.
Data subjects have the following rights under the EU’s General Data Protection Regulation:
a) Right of access to data concerning the data subject (article 15)
b) Right to rectification of data (article 16)
c) Right to erasure of data (article 17)
d) Right to restriction of processing (article 18)
The liaison in matters related to the data subject’s rights is the data protection officer; contact