Name: Zarome Oy (3153728-1) later referred as Zarome.

Address: Punkkerikatu 1 B 1, 53850 Lappeenranta

Email: hello@zarome.fi

Contact the data protection officer in all matters concerning GDPR or this register.

Contact details:
Tomi Pohjola
tomi@zarome.fi

Zarome personal data register concerning the processing of personal data in marketing and customer and stakeholder relations.

The purpose of processing personal data is to manage customer relationships, communicate and, for example, conduct various surveys.

Personal data is used for the company's communications, marketing and sales. The legal basis for the processing of personal data is the controller's legitimate interest to process the data and to communicate with the contact persons of stakeholders on matters related to their area of responsibility.

Personal data is collected from the data subjects themselves and from public sources, such as the internet from companies' public websites, online social networks or other similar registers, in accordance with data protection legislation.

The following data is processed in the register:

i) contact information, such as name, email address, social security number and telephone number

ii) information related to the job, such as job title and area of responsibility

iii) information about the customer company

iv) event information, such as the participation of the data subject in events

v) information about the marketing content used by the data subject, such as message opening and click data

Personal data is disclosed to the authorities within the limits permitted and required by current legislation.

Zarome may use the services of third parties in the processing of data, for example, in relation to IT services, in which case Zarome ensures the lawful processing of data through contractual arrangements and by instructing third parties on the processing of data. Third parties may vary. These third parties process data only on behalf of Zarome.

Some of the services used by the controller related to the processing of personal data may operate outside the territory of the Member States of the European Union or the European Economic Area. In this case, the transfer of data complies with the requirements of data protection legislation and uses, for example, the European Commission's standard contractual clauses when agreeing on the transfer of data with the data processor.

Personal data is stored for as long as it is necessary to fulfill the purpose for which it was collected in accordance with this privacy policy. The storage of personal data takes into account personal data that has remained inactive and is regularly deleted.

Right of access:
The data subject has the right to inspect what data concerning him or her has been stored in the personal data file and to receive a copy of the data. The data subject must send the inspection request to the data protection officer through email. In the inspection request, the data subject must present the information necessary for searching for the information. If necessary, the data protection officer will ask for additional information in order to identify the data subject. The response to the inspection request is delivered to the person making the inspection request by email, unless the data subject requests to send the information in another way. Fees incurred by using a method other than email will be the responsibility of the person making the inspection request.

Right to rectification:
Zarome takes care of the quality of the personal data it processes to the extent possible. Zarome corrects, deletes or supplements incorrect or unnecessary personal data on its own initiative or at the request of the data subject.

Right to restriction of processing:
The data subject has the right to have Zarome restrict processing if, for example, the data subject contests the accuracy of the personal data. In this case, the processing shall be restricted for a period during which the controller can verify their accuracy.

Right to request erasure or to object to the processing of data:
The data subject has the right to demand the erasure of their personal data or to object to their processing when it is based on a legitimate interest. The data subject always has the right to object to direct marketing by sending an email to the data protection officer.

Right to lodge a complaint with a supervisory authority:
The data subject may lodge a complaint about the processing of personal data with the supervisory authority, which is the Data Protection Ombudsman.

Zarome uses cookies on its website.

Zarome may make changes to this Privacy Policy and related information. Zarome recommends that data subjects review this Privacy Policy regularly to be informed of any changes to it.

Date format: dd.mm.yyyy