This data protection report presents the information required by the EU Data Protection Regulation and the Personal Data Act (523/1999) regarding the personal registers maintained by TV Tools Oy. This Privacy Statement is published on TV Tools Oy’s website www.tvtools.fi and will be updated as necessary if the information contained changes.
Controller / Registrar:
TV Tools Oy (”Registrar”)
Radiokatu 3, 00240 Helsinki
Phone: (09) 525 9700
hello ( at ) tvtools.fi
Phone: 040 180 4444
etunimi.sukunimi ( at ) tvtools.fi
No Data Protection Officer has been appointed (justification: Article 37 of the EU Data Protection Regulation).
Purpose of the processing of personal data
The controller processes personal data related to customers’ contact information for the purpose required by the trade in its products and services. The registrar also processes the personal data of its staff in order to fulfill their employment obligations.
- Customer register
- Personnel register
Separate register descriptions have been prepared for the registers to be maintained.
Information content of the registers
Customer contact information and contact information for customer contacts; that is, names, work addresses, telephone numbers, and e-mail addresses.
In the case of staff, the information needed to meet pay and other employment obligations; that is, personal and contact information, education, job title, duration of employment, and bank contact information.
During recruitment, we store the following information:
- Contact information: name, email address, phone number.
- Information from the curriculum vitae/CV, including work history, educational information, skills, language skills and other information included in the curriculum vitae.
- Application letter: any information included in the application letter
In connection with recruitment or internally when the work task changes, we may ask the applicant to go through an assessment of competence, personality or cognitive abilities. These evaluations are usually performed using a third-party computer program or a third-party company that shares the results with us. Before carrying out the assessment in question, we provide additional information related to the applicant’s situation.
We may decide to obtain recommendations from people who have worked with the applicant in the past, either ourselves or in connection with the assessment carried out through a third party. We will only contact the persons in question if the applicant has given us their name and contact information.
Some of our positions require a short security clearance in connection with recruitment. In this case, personal data is handed over to the clearance process. This requirement is always stated in the job advertisement and the process is only started after the recruitment decision. The recruit is always told separately about starting the process.
Regular sources of information
The information in the registers has been obtained from the registrants themselves.
The information in the registers will not be disclosed to third parties.
Furthermore, the controller will not transfer or disclose personal data outside the European Union or the European Economic Area without the consent of the customer.
Registry security principles
Appropriate technical and administrative measures shall be taken to ensure the data security of the controller’s registers and the confidentiality, integrity and availability of personal data. Data and service are protected through, among other things, firewalls, protection of physical computer rooms, access control, access rights and encryption technologies, and active surveillance. Personal data is protected against unauthorized access and illegal or accidental data processing.
Personal data will only be processed by persons specifically identified by the controller who are employed by the controller and by third parties who maintain or develop services on behalf of the controller.
Rights of the data subject
The data subject shall have the rights mentioned in points 1 to 7 below to obtain, rectify, restrict, delete or transfer data concerning him or her and to lodge a complaint against the processing of his or her personal data:
- The right to request access to his or her personal data and to check what data about him or her has been stored in the controller’s records;
- The right to request the correction or deletion of incorrect or inaccurate personal data concerning her or him;
- The right to request a restriction on the processing of your personal data;
- The right to object to the processing of your personal data (by prohibiting their processing, for example, for direct marketing, market and opinion research or for personal or genealogical research);
- The right to request the transfer of your personal data in a commonly used transfer format to another system (The right only applies to data provided by the data subject herself or himself);
- The right to withdraw her or his consent to the processing of personal data;
- Right to lodge a complaint with the supervisory authority.
The request or request referred to in sections 1-6 above must be sent in writing and signed to the address TV Tools Oy, Itälahdenkatu 15-17, 00210 Helsinki. It must state the name, personal identity number, postal address and telephone number of the data subject. The reply to the request shall be sent to the address verified from the data subject’s civil information system. The controller shall have the right to carry out identification operations to the extent necessary before sending the data. A request for verification or a request for processing may also be made in person at the above address, in which case the data subject must present an official document (identity card, driving license or passport) for identification.
A complaint to the supervisory authority is made directly to an authority that has a data protection officer in Finland (www.tietosuoja.fi) in the manner instructed by the competent authority.
Prepared on May 23, 2018