Updated 21 February 2021
Atonos Oy, Asentajankatu 3, FI-33840 Tampere, Business ID: 2613210-8
Contact person: Pekka Pohjonen, +358 50 5993337
NAME OF REGISTER
Atonos Oy’s Customer Register.
PURPOSE OF PROCESSING PERSONAL DATA
The registree’s personal data is processed for the purposes of car and accessory sales, car financing and various stages of repair services and especially to care, maintain and develop the customer relationship and offer services. Personal data may also be used for the marketing and advertising and distance sales of Atonos Oy and its partners, provided consent for such has been obtained from the registree. Data may also be used for the development of Atonos Oy’s business, services and customer services. Processing related to marketing must also require consent from the data subject.
REGISTER’S DATA CONTENT
A person’s basic data include
Person's first and last name, date of birth, gender, language
Necessary contact information such as address, telephone number and email address, as well as marketing opt-ins and opt-outs.
Personal identification number when permitted by GDPR
Motor vehicle make, model, registration number, serial number and other necessary vehicle identification information
Mileage and other required information about its use
Vehicle purchase transactions as well as repair and maintenance performed
Motor vehicle replacement plan
Data related to customer relationship and other related connections
Various customer, business, order and service information related to, among other things, product, purchases, prices, benefits, discounts, deliveries, guarantees, invoicing, collection, satisfaction and complaints.
Use and transaction data in various locations, services and channels for communication, service and content purposes, including content provided by the data subjects and messages they have sent (e.g. chat history, emails, text messages, instant messaging messages), test run data and any necessary transaction, identification and technical data; such as recorded calls, cookies and other necessary data
Data in customer satisfaction surveys and feedback forms are also stored to develop customer service.
SHARING WITH THIRD PARTIES
Personal data is shared with third parties only when the chosen payment method requires us to send any such data. Personal data will not be sold to third parties.
REGULAR SOURCES OF INFORMATION
The customer data is collected in a register as obtained directly from the customers themselves during customer events; such as when submitting an offer, drawing up a contract, and in connection with other contact.
Customer data can also be obtained from partners, such as importers and financing companies. In such cases, the data subject has given their consent for a third party, for third-party marketing.
STORAGE PERIOD OF PERSONAL DATA
Personal data is updated continuously when customers are serviced and during bulk runs into the customer register. Personal data is stored in accordance with the Accounting Act for the necessary period, and during the validity of a credit relationship, during which personal data cannot be entirely deleted.
TRANSFER OF DATA OUTSIDE THE EU OR THE EUROPEAN ECONOMIC AREA
Personal data will not be transferred outside the EU or EEA unless this is necessary for the technical implementation of the processing. No sensitive data will be transferred or stored outside the EU or EEA.
PRINCIPLES REGISTER PROTECTION
Customer register data is stored in a system that can only be accessed with a user ID and password. Data stored in the system can only be accessed and used by persons designated by the controller. An encrypted HTTPS connection is used for personal data processing.
We use Google’s reCAPTCHA service to ensure that the party sending data through forms is a natural person. The service includes the sending of IP address and other data required by the reCAPTCHA service to Google. During this check, Google Inc’s data protection policies are applied. For more information about Google Inc’s data protection policies, see the service website:
DATA SUBJECT’S OPT-OUT RIGHT
You have the right to forbid the controller to process your data for the purposes of direct advertising and other direct marketing.
You should express your opt-out choice electronically by sending an email to email@example.com
RIGHT OF REGISTREE TO CHECK THEIR DATA
Registrees have the right in accordance with GDPR to request the controller to give access to their personal data and to know which personal data is processed. You can email such a request to firstname.lastname@example.org or contact the controller for the purpose in some other verifiable method.
COOKIES AND OTHER MONITORING TOOLS
The cookies used to identify those who have logged in do not contain personal data.
For more information about social media sharing cookies: https://www.sharethis.com/privacy/