Privacy Policy

We value your privacy

Your privacy is important to us. But in order to serve you to the best of our ability, we need to collect and process some information about you. This privacy policy contains information about what personal data we collect, the principles on which we process it, and the rights and influences you have over your data. We are committed to processing your personal data in accordance with this privacy policy and applicable data protection legislation.

This Privacy Statement describes how the joint controllers listed below collect and process personal data in a common register for common purposes.

Each controller listed in this privacy policy may also have other personal data registers that they maintain in accordance with their own privacy policies. If necessary, please also read these privacy statements.

We may update this Privacy Notice as our operations or legislation changes, so please review it from time to time.

Joint controllers and their contact details

This privacy policy applies to the joint personal data file of the following joint controllers:

Customer register of Mtech Digital Solutions Oy and the other joint controllers described above

• Mtech Digital Solutions Ltd
  Urheilutie 6
  01370 Vantaa

Mtech Digital Solutions Oy is responsible for the IT maintenance of the personal data register described herein and also acts as a central point of contact for data protection issues.

• Emovet Oy
• Faba Osk
• Finska Hushållningssällskapet r.f.
• Maa- ja kotitalousnaisten keskus ry
• Nylands Svenska Lantbrukssällskap r.f.
• ProAgria Keskusten Liitto ry ja sen jäsenet:
• ProAgria Etelä-Pohjanmaa ry
• ProAgria Etelä-Savo ry
• ProAgria Etelä-Suomi ry
• ProAgria Keski-Pohjanmaa ry
• ProAgria Keski-Suomi ry
• ProAgria Länsi-Suomi ry
• ProAgria Pohjois-Suomi ry
• ProAgria Itä-Suomi ry
• ProAgria Svenska lantbrukssällskapens förbund r.f. ja sen jäsenet:
• ProAgria Ålands Hushållningssällskap r.f.
• ​Österbottens Svenska Lantbrukssällskap r.f.
• ProEventus Oy

Contact person for register matters

Customer service will respond to questions about the customer register within two working days at the latest.

The contact information for customer service is tuki@mtech.fi, tel. 09 85665959.

Postal address; Mtech Digital Solutions Oy, Customer Service, P.O. Box 25, 01301 Vantaa, Finland.

Mtech’s Data Protection Officer is directly responsible for matters related to data protection.

The contact information of the Data Protection Officer is tietosuoja@mtech.fi 

Name of the register

The customer register of Mtech Digital Solutions Oy and the other joint controllers described above.

How do we use your personal data?

Joint controllers only process personal data about you for pre-defined purposes. The main joint uses are:

Customer identification and user management. Identification of customers (identification), authentication (authentication) and authorization (authorization) in connection with the provision of services. Information security of services and management of access rights and access.

Serving the customer and the operative management, management and development of the customer relationship. Managing customer data and customer and contact history. Arranging support and advisory services for the customer, managing and ensuring the quality of service measures, as well as providing various training services. Ensuring the quality and security of operations. Business development and reporting for joint controllers.

Preventing and investigating misconduct and problem situations. Ensuring the legal protection of customers and Mtech, as well as fulfilling obligations based on law and official regulations. Recordings of customer calls are used to verify service transactions, ensure the legal protection of customers and Mtech, for training purposes, to develop the quality of service, and to prevent misuse and for security reasons

Marketing and communications. To the extent permitted by law, we may also process personal data for marketing and communications, direct marketing purposes and sending customer letters. This may also include processing and analysing personal data for targeted marketing.

Performance of contracts and legal obligations. Your data may also be collected and processed for the performance of contracts or legal obligations.

On what basis do we process your data?

We make sure that we always have a legal basis for processing your personal data. We may process data on several different grounds, but we make sure that we always have at least one legal processing requirement in place.

We process the data in the customer and marketing register mainly for the purpose of fulfilling and preparing contracts and on the basis of our legitimate interests, which include in particular the production and delivery of our services, customer management, direct marketing, processing of customer feedback and training services.

Where required by applicable law, we may process some of your personal data on the basis of your consent. If we process your data only on the basis of consent, you may withdraw your consent at any time.

We may also process your personal data to comply with legal obligations. Personal identity codes are processed to a limited extent in certain systems, for example, for user identification and identification. The personal identity code is always stored in encrypted form in the systems.

What personal data do we collect about you?

Mtech’s customer register mainly contains the following personal data:

• First and last names
• Business ID
• Facility ID
• Personal identity code (for limited use)
• Address information
• Telephone number(s), fax
• Email address
• Country and language of service
• Identification data (username/password)
• Direct marketing prohibitions and consents
• Denials of consent to data sharing and consents
• Services ordered by the customer and their history
• Service usage, logs, and history
• Location information (limited/in some services)

Mtech only collects and stores data that is necessary for Mtech’s operations and the purposes for which the data is used, for the processing of which there are legal prerequisites and the purpose of processing which is described in this privacy policy.

Data that has become unnecessary or outdated or that no longer has grounds for processing is anonymised or destroyed in a secure manner.

From what sources do we collect information?

Information related to the customer is collected from the customer in connection with the conclusion of the agreement, in the online service’s personal information section, in connection with the use of products and services, in connection with customer service, and when the customer may participate in product and service development and pilot projects.

In cases permitted by law, information related to the customer can also be obtained and updated from other external data sources for purposes that are informed to the customer.

Who processes the data and is it disclosed to third parties?

As a rule, your personal data is processed by persons belonging to the personnel of the controllers when performing tasks in accordance with this privacy policy. Name and address information may be disclosed from the register for direct marketing purposes to the controllers described in this privacy policy within the limits permitted by law.

In some cases, your data may be disclosed confidentially to our subcontractors, who process personal data on the basis of a written assignment agreement. Our subcontractors process personal data in the agreed manner, in accordance with our written instructions and only to promote the purposes mentioned in this privacy policy. We may use such subcontractors, for example, in the implementation of marketing and in the maintenance of the information systems used to store personal data. Our subcontractors do not disclose the data to other parties or use it in the implementation of their own marketing.

Data (only name and address information) may be disclosed in the manner permitted by the Personal Data Act and the General Data Protection Regulation to the partners mentioned in section 1 who act on its behalf and on its behalf.

Information is disclosed to the authorities in cases required by law, such as in the investigation and prevention of misconduct. For example.

Will personal data be transferred outside the EU?

As a rule, personal data will not be transferred outside the European Union or the European Economic Area. If it is necessary to transfer personal data outside the EU or EEA to fulfil the purposes described in this privacy policy, we will ensure that there is a basis for the transfer in accordance with applicable data protection legislation and that appropriate safeguards are in place to protect personal data.
Personal data may be transferred, for example, to a country with an adequate level of data protection that the European Commission has deemed adequate.

How long is personal data stored?

We do not store your personal data for longer than is necessary for the purpose for which it is used or than required by contract or law. However, the storage periods of personal data may vary depending on the purpose of use and the situation. The storage periods of personal data may also be based on legal requirements. If necessary, we will update your data.

How is personal data safeguarded and protected?

The data security of Mtech’s customer register as well as the confidentiality, integrity and usability of personal data are ensured by appropriate technical and administrative measures in accordance with the general standards of the industry. The data is primarily stored in electronic form. The data and the service are protected, among other things, through a firewall, the protection of physical data spaces, access control, access rights and encryption technologies, as well as the active monitoring of the above. Personal data is protected against unauthorised access and illegal or accidental data processing.

Personal data is processed by designated persons employed by the controller. They identify themselves in the systems with a personal username and password.

The mandatory provision of personal data and the consequences of not providing it?

The implementation of our services and the purposes described in this privacy policy may require, at least in part, that we process personal data concerning you. This may be related, for example, to the management of the customer relationship, the performance of contracts and invoicing. However, the provision of personal data may be voluntary in part. In such a situation, if you do not want to provide your data, it may mean that we are unable to fulfil all the purposes specified in this privacy policy.

What rights do you have?

Right of inspection

The customer has the right to receive confirmation that their data is being processed and to check what information about them has been stored in the register. In addition, you have the right to receive additional information on the grounds for processing personal data. The customer can also partially check their basic information by identifying themselves in Mtech’s online service.

The inspection request is made by submitting a written and signed inspection request to the address: Mtech Digital Solutions Oy, Data Protection Officer, P.O. Box 25, 01301 Vantaa, Finland. The inspection request must include the customer’s name, personal identity code, postal address and telephone number. The response to the inspection request is delivered to the address verified by the customer’s Population Information System.

Update your information

The customer can update and change their own information by identifying themselves in Mtech’s online service, or by contacting customer service.

Withdrawal of consent

If the customer’s personal data is processed on the basis of consent, the customer has the right to withdraw the consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal. The consent can be withdrawn by sending an email  to tietosuoja@mtech.fi 

Rectification of information

The customer has the right to demand that the controller rectifies inaccurate and incorrect personal data concerning the data subject without undue delay. Taking into account the purposes for which the data was processed, the data subject has the right to have incomplete personal data completed, for example by providing additional information.

Restriction of processing

In certain situations, the customer has the right to request the restriction of the processing of personal data.

Objection to processing

If we process the customer’s personal data on the basis of public interest or our legitimate interest, the customer has the right to object to the processing of personal data concerning the customer to the extent that there is no significant reason for the processing that would override the customer’s rights or the processing is not necessary to satisfy a legal claim.

Right to restriction of processing

In certain situations, you have the right to demand that we restrict the processing of your personal data.

Right to data portability

If the customer’s personal data is processed on the basis of consent or for the performance of a contract, the customer has the right to receive the information provided electronically by the customer in a commonly used format so that the data can be transferred to another service provider.

Right to prohibit direct marketing

The customer has the right to prohibit the processing of your personal data for direct marketing purposes. This can be done, for example, by sending an email  to tietosuoja@mtech.fi.

How can you exercise your rights?

You can exercise your rights described above, for example, by submitting a request for access to your data in the manner described above or by otherwise contacting us using the contact details mentioned at the beginning of the privacy policy. Please note that in order to fulfil your rights, we need to identify the customer. If you consider that the processing of your personal data is not lawful, you can also lodge a complaint with the competent supervisory authority (the Data Protection Ombudsman).

Consents and prohibitions of direct marketing

The customer has the opportunity to update their direct marketing consents and prohibitions by identifying themselves in the online service or by contacting customer service. Marketing consent can be given either electronically or by phone at the customer service.

The customer can give their consent to direct marketing by email, mobile phone and post.

The customer can prohibit direct marketing.

Once the customer has given a refusal, they will not be targeted with Mtech’s direct marketing or sales by phone, post or email. However, the customer will always receive the customer communications necessary for the management of the customer relationship and the provision of services.

Can this privacy policy be updated?

We may make updates to this privacy policy as our operations or data protection principles change. Updates may also become topical due to changes in legislation. The changes will enter into force when we have published the updated privacy policy. We therefore ask you to review the contents of this privacy policy at regular intervals.

Our Cookie Policy

Cookies

We use cookies on our website to improve the user experience of the website. Cookies are small text files that the internet browser saves on the user’s device. Cookies allow us to obtain information that allows us to make the user experience more pleasant. Cookies can also be used, for example, to facilitate the visitor’s future use of the website.

We may disclose information about the users of our website, for example, to our marketing partner so that it can better target the content of the websites.

Cookies can be freely managed and deleted. For more information about cookies, how to delete them and how to manage them, please visit http://www.aboutcookies.org/ or in your browser’s menu under Help.