Privacy policy
Data controller:
Name: Smart Time Oy
Address: Bertel Jungin aukio 5, 02600 Espoo
Email address: info@smarttime.fi
Contact person for matters concerning the register:
Name: Jukka Tomminen
Email address: jukka.tomminen@smarttime.fi
Telephone number: +358 40 552 7034
Registers:
- Customer register
- Supplier register
- Recruitment register
- Cookie register
- Potential customer register
Purpose of processing personal data and legal bases for processing:
Customer register
Purpose of processing
- Documents related to customer projects. They contain what has been agreed and how the solutions have been implemented. Documents related to customer relationship management and contracting, such as offers, orders and contracts.
- Maintaining the customer relationship
- Invoicing customers
- Customer service
- Developing our own services
- Statistics and analytics
Legal bases
- Contract
- Legitimate interest
Supplier register
Purpose of processing
- Documents related to subcontracting projects. They contain what has been agreed and how the solutions have been implemented.
- Communication and cooperation with suppliers
Legal basis
- Contract
Recruitment register
Purpose of processing
- Data on individuals related to recruiting people.
Legal basis
- Consent
Cookie register
Purpose of processing
- Cookie data of people who have visited the website
- Analyzing and storing visitor statistics
- Developing the website
Legal basis
- Consent
Potential customer register
Purpose of processing
- Documents related to contracting, such as offers and orders
- Maintaining the potential customer relationship
Legal basis
- Legitimate interest
Contents of the registers:
Customer register
- Name
- Telephone
- Title and position in the company
Supplier register
- Name
- Telephone
- Title and position in the company
Recruitment register
- Name
- Telephone
- Address
- Work history
- Education history
Cookie register
- Information on how and when our website is used
- Which device is used to access the website
- From which web address website users have arrived at the site
- Which individual pages users have visited
Potential customer register
- Name
- Telephone
- Title and position in the company
Regular sources of data:
Personal data is collected from the following sources:
- From the data subject themselves (such as through the contact forms on the website)
- Data collected from the data subject in connection with contracting
- Information obtained from customer meetings
- From the data subject’s use of the service
- From the data controller’s customer information system
- Other possible situations in which the data subject discloses their data to the data controller
- From public sources, such as company websites or the trade register
- Through cookies and similar technology
Regular disclosures of data:
Customer register
- Individuals and the customers of each project
- External service providers: Netvisor (Visma), Severa (Visma), Microsoft
Supplier register
- The company’s employees and the contact persons of each project, as well as the representatives of the principal.
Recruitment register
- External service providers: Tiitus, Duunitori, Microsoft
Cookie register
Potential customer register
- External service providers: Microsoft, Trello
Transfer of data outside the EU or EEA:
Not transferred
Principles of protecting the register data:
Personal data is kept confidential. The data controller’s data network and the equipment on which the register is located are protected by a firewall and other necessary technical measures. The data controller ensures that the stored data, server access rights and other data critical to the security of personal data are processed confidentially and only by those employees whose job description includes it.
Retention period of personal data:
Customer register
The documents are essentially related to the company’s business. They are used in the further development and maintenance of solutions. The documents are the property of the company and are retained for 10 years after the end of the customer relationship.
Supplier register
The documents are essentially related to the company’s business. They are used in the further development and maintenance of solutions. The documents are the property of the company and are retained until further notice.
Recruitment register
The data is essentially related to the company’s business. It is retained for the duration of the recruitment process, for a maximum of one year.
Cookie register
The documents are essentially related to the company’s business. They are used in the further development and maintenance of solutions. The documents are the property of the company.
Potential customer register
The data is essentially related to the company’s business. It is retained for 10 years or until a customer agreement is made.
Right of access:
The data subject has the right to check the personal data stored about them at any time.
Right to rectification and erasure (right to be forgotten):
At the request of the data subject, the data controller will rectify, erase or supplement personal data that is erroneous, unnecessary, incomplete or outdated for the purpose of processing. The data controller may also rectify, erase or supplement data on its own initiative.
Cookies set
Edit cookie settings
Cookie settings can also be edited with the button in the bottom right corner of the page (not on mobile).