TAPAUS’S DATA PROTECTION POLICY FOR CUSTOMER AND DIRECT MARKETING
THE REGISTRAR
Tapaus Ltd. (“Tapaus” or “we”) is fully committed to keeping your personal data safe and private. This privacy policy outlines the collection, use, storage and sharing of your personal data.
Tapaus handles the personal data of its customers in order to manage customer relationships and fulfill its contractual obligations, to maintain its CRM system, to communicate with customers, and for direct marketing purposes. In addition to existing customers, Tapaus may also handle the personal information of potential customers.
It is important to us that you are fully aware of how we handle your personal data and below you will find more detailed information on how your data is handled.
Please note that this privacy policy (“Privacy Policy”) is only applicable to the handling of the personal data of corporate customers by the Tapaus Registrar.
REGISTRAR’S CONTACT INFORMATION
Tapaus Ltd.
Business ID 2068393-7
Address: Otakaari 5A 2nd floor, 02150 Espoo
Phone number: +358 400 801 205
Email: timo.aalto@tapaus.fi
www.tapaus.fi
The person in charge of the customer register: Timo Aalto
PERSONAL DATA AND SOURCES OF INFORMATION
We collect customer information (“Customer Information”) and technical analytical data (“Analytical Data”) about our customers.
Although we do not normally use Analytical Data to identify individuals, sometimes individuals may be identified through Analytical Data alone or by a combination of Analytical Data and Customer Information. In such cases, the Analytical Data is considered personal data within the scope of applicable law and we treat the aggregated information as if it were personal data.
Tapaus collects and processes the following Customer Information:
– First and last name;
– Organization represented;
– Position in the organization;
– Email address;
– Telephone number;
– Communication;
– Billing and payment information;
– Direct marketing consent, prohibition, or other information;
– Other information provided by the customer or added to the CRM system (for example, indicated interest in certain types of services);
Most of the Customer information we collect is obtained directly from the customer or the registered user. In addition, personal data can be collected and updated from various information services and public registers.
The Analytical Data we collect and process when using our website includes the following information:
– Client’s IP address;
– Client device and device identifier;
– Operating system;
– Visit dates;
– URL path on site;
– Browser type and version;
– Language settings
SOFTWARE AND NETWORK ANALYSIS
Tapaus may use cookies and other technologies to collect Analytical Data when you visit our website.
A cookie is a small text file that is sent to and stored on a user’s computer, allowing the webmaster to identify frequent visitors to the site, facilitate the use of visitor services, and make composite information available to users.
This feedback allows us to continuously improve our website and better serve our customers. Cookies do not harm your computer or files. We use them so that we can provide our customers with information and services tailored to each individual’s needs.
You can prevent the use of cookies by changing your browser settings or setting your browser to warn you whenever a site would like to install cookies. You can find more information on changing your cookie settings on the most popular browsers by clicking on the links below:
Safari
Google Chrome
Internet Explorer
Mozilla Firefox
Please note that our website may not work properly if cookies are disabled.
Manage cookie consent
We use Google Analytics and other web analytics tools on our website to collect Analytical Data and reports on how visitors interact without website.
For more information about Google Analytics, visit the Google Analytics website. You can opt out of Google Analytics by downloading the following extension to your browser: Google Analytics opt-out add-on.
THE PURPOSE AND BASIS FOR HANDLING PERSONAL DATA
Purposes
Tapaus handles personal data for the following purposes:
To provide services
We handle personal data primarily to provide services to our customers and to engage in, maintain and develop our business. Personal data may be used to fulfill our contractual obligations to our customers. When a customer contacts our customer service, we use the information provided to answer questions and resolve any problems he or she may have.
Customer communication and marketing
We may handle personal data in order to contact customers in matters related to our services or to inform them of changes to our services, as well as to process and collect customer feedback and market our services.
Visitor analytics and trend identification
We may handle data related to how our services are used in order to improve the quality of our services. We may, for example, analyze various trends and developments in the use of our services. In cases like this, we use pseudonyms or anonymous information in order to avoid identification.
Legal grounds for handling personal data
We handle personal data based on our legal right to conduct, maintain and develop our business, and to establish and maintain customer relationships. When we handle your personal data in conjunction with our legitimate business interests, we always weigh our own interests against your right to privacy.
We also handle personal data in order to fulfill our statutory obligations as documented by the Accounting Act.
In certain cases, we may request consent when handling personal data. In these cases, consent may be withdrawn at any time.
HOW LONG WE HOLD ON TO YOUR PERSONAL DATA
We will only keep your personal data for as long as is necessary for the purposes outlined above, or for as long as required by law.
THE INTERNATIONAL TRANSFER OF PERSONAL DATA
As a general rule, Tapaus will only keep your personal data within the European Economic Area.
However, the service providers we use operate in a number of geographical regions, which means that we or our service providers may transfer or access your personal data outside the European Economic Area or your country of residence.
If this happens, we will ensure that your personal data is sufficiently protected in the geographical areas in which it is handled. We will also provide adequate protection for the transfer of personal data to non-EEA countries through standard contract clauses with our service providers that have been approved by the European Commission, or by any other arrangements approved by the EU Commission, such as the Privacy Shield program.
THIRD PARTIES THAT MAY RECEIVE YOUR PERSONAL DATA
We will not disclose your personal information to parties outside the Tapaus organization, with the following exceptions:
When sharing is necessary in accordance with the uses set out in this Privacy Policy
In so far as third parties require access to personal data to provide their services, Tapaus has taken appropriate contractual and organizational measures to ensure that your personal data is handled solely in accordance with the purposes outlined in this Privacy Policy and all applicable laws and regulations.
For legal reasons
We may transfer your personal data to third parties outside the Tapaus organization if access to and use of such data is reasonably necessary to (i) comply with any applicable laws, regulations, and / or court decisions; (ii) detecting, preventing and handling cases of fraud, a security issue, or technical problem; and / or (iii) to protect Tapaus’s or our customers’ interests or property, to secure or safeguard the public interest in accordance with the law. If possible, we will notify customers of this type of transfer or handling of their personal data.
To authorized service providers
We may transfer your personal data to authorized service providers (including our subcontractors who provide data storage, sales, marketing, and customer support services). In accordance with the commitments contained in our agreements with our service providers, they agree to fully comply with the privacy and security standards set forth in this Privacy Policy. Please note that when you provide your personal data directly to a third party, for example, through a link on our site, it will likely be handled in accordance with their own documentation and standards.
With your explicit consent
We may transfer personal data to third parties outside of our organization for reasons other than those mentioned above with a customer’s explicit consent. Please note that you have the right to withdraw your consent at any time.
For other legitimate reasons
If Tapaus is party to a merger, business deal or other acquisition, we may transfer your personal information to a third party or third parties involved in the transaction. In cases like this we will always ensure that your personal data remains confidential. If this happens, we will swiftly inform a customer if their personal data has been transferred or if their personal data becomes subject to a different Privacy Policy.
THE RIGHTS OF REGISTERED USERS
The right to access information
Registered users have the right to access all of their personal data handled by Tapaus. Please feel free to contact us at any time if you would like to know what personal data we have collected and what it’s used for.
The right to request that your information be corrected
You have the right to correct any erroneous, inaccurate, incomplete, outdated or unnecessary personal data that we retain. For example, you can easily update your contact information by getting in touch with us.
The right to request that your information be deleted
You may ask us to delete your personal information at any time. We will delete the information you would like deleted unless we have a legitimate reason to retain it.
The right to object to and restrict the handling of your information
You have the right to oppose the handling or profiling of your personal data if it is used for direct marketing. You also have the right to request that the use of your personal data be restricted, including when information about you is inaccurate. In addition, you may, in certain special circumstances, have the right to oppose the handling of your personal data because of specific personal circumstances.
The right to transfer data from one system to another
Registered users have the right to receive their personal information from us in an organized and commonly used format and to independently transfer that information to a third party.
Exercising your rights
If you would like to use one of rights outlined above, please send the following information to us either by mail or secure email: Your name, address, phone number, and a copy of valid ID. We may request addition information in order to verify your identity.
Note that we have the right to reject requests that are repeated too often, are excessive, or are clearly unfounded.
DIRECT MARKETING
We may send you newsletters about our services and other direct marketing.
Registered users can prohibit us from using their personal data for direct marketing, market research or profiling by contacting us and sending us the contact information indicated above, or by clicking the opt out button in our direct marketing messages.
DATA SECURITY
We have implemented administrative, organizational, technical and physical safeguards in order to protect all of the personal data we collect and handle. Our security measures have been designed to ensure a sufficient level of confidentiality, integrity, and availability. Personal data may only be handled by people who need to handle this information in order to complete their work. The use of personal data is protected by user IDs, passwords and the granting of consent.
LODGING A COMPLAINT
Please note that you have the right to lodge a complaint with the supervising authority if you feel that Tapaus’s handling of your personal data goes against applicable data protection laws. Last updated: 24.5.2018
