1. Controller

Sellai Oy (2930187-8)

2. Contact person responsible for the register

Teemu Tervo, info@sellai.fi

Wonderland Konepaajankuja 1, 00510 HELSINKI

3. Name of the register

The company's customer register, marketing register, stakeholder register, online service user register, member register, employee register, etc. 

4. Collection and processing of data

The legal basis for the processing of personal data in accordance with the EU's General Data Protection Regulation is the consent of the person (documented, voluntary, identified, informed and unambiguous), an agreement to which the data subject is a party and/or the legitimate interest of the controller (e.g. customer relationship, employment relationship, membership, contact information provision). The purpose of processing personal data is to communicate with customers, maintain customer relationships, sell and market. The data is not used for automated decision-making or profiling.

5. Data content of the register

The information stored in the register includes: the person's name, position/title, company/organisation, contact information (telephone number, email address, address), website addresses, ip address of the network connection, IDs/profiles in social media services, information about the services ordered and their changes, billing information, other information related to the customer relationship and the services ordered.

6. Regular data sources

The information stored in the register is obtained from the customer, for example, from messages sent via web forms, email, telephone, social media services, agreements, customer meetings and other situations in which the customer discloses their data.

We use the analytics of the site to determine how our sites are used. The services we use for this include: Google Analytics, Hotjar, React & Share, and Leadoo.

7. Regular disclosures of data and transfer of data outside the EU or EEA

The data is not regularly disclosed to other parties. The information may be published to the extent agreed with the customer. 

8. Use of cookies

A cookie is a text file stored in the user's browser with a unique identifier that we collect information about browsers that have visited our website. We do not identify the user based on cookies alone. The services we use are mainly persistent cookies stored in the browser, the validity of which varies from one day to a few months. Certain functionalities of the website also require session cookies. Please note that you can prevent tracking from your browser settings. Some of the functionalities of our site may not work properly at that time. If you have not blocked the follow-up, we consider that by using our website you agree to the use of cookies.

9. Targeting of advertising

We control advertising in other digital media, such as search engines, based on what the user does on our website. For example, we may target users who have visited our site with advertising on websites other than our own. The services we use for this include: Facebook, Linkedin, Google Analytics, Google Tag Manager, Mailchimp, Hotjar, and Leadfeeder.

10. Principles of registry protection

The processing of the register is handled with care and the data processed with the help of information systems is properly protected. When registry data is stored on Internet servers, the physical and digital security of their hardware is adequately ensured. The controller ensures that the stored data, access rights to servers and other data critical to the security of personal data are treated confidentially and only by the employees whose job description it belongs to. The data is stored in our system for a maximum of 7 years, after which the data is deleted.

11. Right of inspection and right to demand rectification of information

Every person in the register has the right to check their data stored in the register and to demand that any incorrect information be corrected or incomplete information supplemented. If a person wishes to check or request rectification of the data stored about him or her, the request must be sent in writing to the controller. The controller may, if necessary, request the applicant to prove his identity. The controller is responsible to the customer within the time limit set in the EU General Data Protection Regulation (usually within one month).

12. Other rights related to the processing of personal data

A person in the register has the right to request the deletion of personal data concerning him or her from the register ("right to be forgotten"). Data subjects also have other rights under the EU's General Data Protection Regulation, such as restricting the processing of personal data in certain situations. Requests must be sent in writing or by e-mail to the controller. The controller may, if necessary, request the applicant to prove his identity. The controller is responsible to the customer within the time limit set in the EU General Data Protection Regulation (usually within one month).

Questions? Contact us by e-mail: info@sellai.fi