1. Company

SRJ Group / STP Liikenne (Syöte Charter)
Business ID: 2485376-1

Contact Information

SRJ Group Oy
Arotie 24
93280 Syöte, Finland

Phone: +358 442 552
Email: info@syotecharter.fi

Person responsible for registry matters:

Markku Niskanen

 

2. Data Subjects

Customers and employees of SRJ Group / STP Liikenne / Syöte Charter.

 

3. Basis and Purpose of Processing Personal Data

Personal data is processed based on the customer relationship.

Purpose of Processing Personal Data

Personal data is processed only for predefined purposes, including:

• Providing ordered transportation services
• Managing customer relationships
• Providing services
• Invoicing and financial administration

 

4. Personal Data Stored in the Register

The customer register may contain the following information:

• Name, phone number, email address
• Company
• Address, country
• Billing information
• Order details / order history
• Language

 

5. Regular Sources of Information

Personal data is generally collected directly from the customer in connection with orders or other contact.

 

6. Regular Disclosure of Information

As a rule, information is not disclosed outside SRJ Group for marketing purposes.

We ensure that all our service providers comply with applicable data protection legislation. We regularly use external service providers for the following purposes:

• Register management and maintenance
• IT support

 

7. Retention Period

Personal data in the register is generally processed for as long as the customer relationship remains valid.

 

8. Rights of the Data Subject

Requests regarding the exercise of the following rights should be sent by email to:
mauno@stpliikenne.fi

Right of Access

The data subject has the right to review the personal data stored about them.

Right to Rectification

The data subject may request correction of inaccurate or incomplete personal data.

Right to Object

The data subject may object to the processing of personal data if they believe that personal data has been processed unlawfully.

Right to Prohibit Direct Marketing

The data subject has the right to prohibit the use of their personal data for direct marketing purposes.

Right to Erasure

The data subject has the right to request deletion of personal data if processing is no longer necessary.

Please note that the controller is obligated to retain accounting records for the period specified in the Finnish Accounting Act (Chapter 2, Section 10), which is 10 years. Therefore, accounting-related material cannot be deleted before the statutory retention period has expired.

Withdrawal of Consent

If the processing of personal data is based solely on consent and not, for example, on a customer relationship or membership, the data subject may withdraw their consent at any time.

Right to Restrict Processing

The data subject has the right to request restriction of processing concerning disputed data until the matter has been resolved.

Right to Lodge a Complaint

The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they believe that we violate applicable data protection legislation when processing personal data.

Contact information of the Data Protection Ombudsman:
www.tietosuoja.fi/fi/index/yhteystiedot.html

 

9. Processors of Personal Data

Personal data is processed by the data controller and its employees.

We may also outsource part of the processing of personal data to third parties. In such cases, we ensure through contractual arrangements that personal data is processed in accordance with applicable data protection legislation and otherwise appropriately.

 

10. Transfer of Data Outside the EU or EEA

As a rule, we do not transfer personal data outside the European Union or the European Economic Area.

If personal data must be transferred outside the EU or EEA, we will ensure an adequate level of protection by contractual arrangements concerning confidentiality and processing of personal data as required by applicable legislation.

 

11. Automated Decision-Making and Profiling

We do not use personal data for automated decision-making or profiling.