Privacy Policy in accordance with the Finnish Data Protection Act (1050/2018) and the EU General Data Protection Regulation ("GDPR") (679/2016).
1. Data ControllerName: Pepron Oy
Business ID: 2503736-0
Address: Oulu, Finland
2. Contact Person for Privacy MattersName: Janne Räsänen
Phone: +358 40 575 4595
Email: janne@pepron.com
3. Categories of Data Subjects3.1) Persons who contact Pepron Oy via email or the website;
3.2) Persons included in Pepron Oy's customer, supplier, or partner registers;
3.3) Persons applying for jobs at Pepron Oy.
4. Categories of Personal DataFrom the data subject groups mentioned in sections 3.1 – 3.3, we may collect basic contact information and any other information collected with consent. We may also collect device and user data (3.1), customer relationship data (3.2), and recruitment data (3.3).
5. Purpose of Processing Personal DataThe personal data may be processed for customer service, improving the customer experience, analytics, and fulfilling legal obligations.
6. Legal Basis for ProcessingWe process personal data based on consent, the performance of a contract, or compliance with a legal obligation.
7. Regular Sources of DataInformation is regularly collected directly from the individuals, through cookies, or via job applications.
8. Retention Period of Personal DataWe do not retain personal data for longer than is necessary considering the purpose of the processing.
9. Categories of Recipients of Personal DataRecipients may include associated companies, cloud service providers, and third-party service providers (accounting, recruitment, marketing).
10. Regular Transfers of Data Outside the EU or EEAData may be transferred outside the EU/EEA strictly in accordance with the GDPR.
11. Rights of the Data SubjectYou have the Right of Access, Right to Rectification and Erasure, Right to Restriction of Processing, Right to Object, Right to Data Portability, and Right to Withdraw Consent.
12. Right to Lodge a ComplaintYou have the right to lodge a complaint with a supervisory authority (the Data Protection Ombudsman in Finland).
13. Mergers and AcquisitionsIn the event of a merger or acquisition, the acquiring entity will gain access to the data, covered by a non-disclosure agreement.
14. Privacy Principles (Security)Pepron Oy utilizes all reasonable physical, electronic, and administrative measures to protect personal data.