Personal record

Registrar:

Uula Color Oy
Yttiläntie 265, 32920 Kauvatsa
Business ID: 2867707-2

Contact and responsible person for the register:

Ilari Hyyrynen
ilari.hyyrynen@uula.fi
tel: 040 044 7472

Name of Registry:

Customer and Stakeholder Register

Personal record

The basis and purpose of processing personal data:

The processing of the information in the register is based on a contractual relationship with our company, the consent from the data subject for storing the information or to the right of our company to collect information to organize and develop customer and stakeholders. Information can be compiled from the information from which it is not possible to identify an individual customer.

The personal data in the register will be processed in the billing process, whereby the information in the electronic order processing system will be transferred to the accounting firm for the formation and processing of the billing material. From the accounting firm, the billing data will continue to be transferred to the service provider responsible for sending the invoice, payment control and recovery.

Register Information Content:

The information to be stored in the register is: contact information for client companies and other stakeholders, contact person name, contact information (phone number, email address, address), position, company/organization, web site addresses, billing information, and other information related to customer relationships and ordered products.

Regular sources of personal data:

Personal information is collected from client companies/registrant themselves. The information stored in the register can be obtained from the customer, for example. messages sent by web forms, email, telephone, social media services, contracts, customer meetings and other situations where the customer discloses their information.

Personal data retention period:

Personal data will be retained for processing, after which it is either automatically or routinely deleted unless there is a legal reason for the storage. Billing information
is retained in the electronic system for 6 years, after which it is destroyed once a year.

Disclosure and transfer of personal data to third parties:

Personal data will not be ordered to third parties. Information can be published in the extent that it has been agreed with the customer. However, information may be disclosed, for example, on the basis of a statutory requirement.

Transfer of personal data outside the EU or European Economic Area:

Personal data will not be transferred outside the EU or the European Economic Area.

Profiling:

Personal data is not used for profiling or other automatic decision -making.

Register Information Security:

The processing of the register is careful and the information processed by information systems is properly protected in a system that requires username and password. Physical
documents are located in the premises where access to unauthorized access is prevented. Access control is used for the controller's premises.

Access to the register's personal data is limited to the responsibility and contact person of the register and to the other entities authorized by the register's responsibility and contact person, provided that this is necessary for the processing of the data.

When stored on Internet servers, the physical and digital security of their equipment is relevant. The controller shall ensure that the stored
information, as well as the server permissions and other information critical to the safety of personal data, are processed confidentially and only by the employees for whose job description
it belongs.

Right of inspection, correcting and deleting data:

The data subject has the right to obtain a confirmation of whether the personal data concerning him or her is processed and, if processed, the right to obtain a copy of his personal data. The data subject has the right to request that
the inaccurate and incorrect personal data concerning him be corrected. The data subject also has the right to obtain incomplete personal data by supplying the necessary additional information.

The person in the register shall have the right to delete the personal data of him from the register ("the right to be forgotten"). The data subject also has other rights under the EU General Data Protection Regulation
, such as restricting the processing of personal data in certain situations.

If the person wants to check the information provided about him or her, it requires their adjustment or removal, the request must be sent in writing to the controller.

Changing the Privacy Statement:

The content of the privacy statement can be changed by publishing a new version online. Therefore, we recommend that you regularly explore our Privacy Statement.