Privacy Statement, Savantum oy's customer register
 

Savantum Oy has committed to secure its customers’, employees’ and stakeholders’ personal data and to comply with national data protection regulation and EU General Data Protection Regulation (GDPR). In our company we, as a controller of personal data, process personal data for various purposes. This Privacy Statement describes those purposes, their lawfulness and informs data subjects of their rights. Our processing activities are transparent and we collect personal data only to the extent necessary for our lawful processing purpose. Under the Data Protection Regulation, the data controller has a duty to clearly inform data subjects. This leaflet fulfills the information obligation.

1. The controller

Savantum Oy 1668386-2
Villanella 5, 00890 Helsinki
asiakaspalvelu@kotteria.com

Contact details for the register and, where applicable, the contact details of the potential data protection officer:

Pentti Kotiaho, Savantum Oy
Villanella 5, 00890 Helsinki
+358415345100
pentti.kotiaho@savantum.com

2. Registered
 

Savantum Oy's register stores information on customers who have purchased services and potential corporate customers.

 

3. Grounds for and purpose of keeping the register
 

Grounds for keeping the register:

Savantum Oy collects and processes Personal Data only in the manner permitted by law. The person's contact information is processed on the basis of the customer relationship and billing, for example during and after the booking or accommodation.
The person's contact information will be processed on the basis of consent
 

Purpose of the processing of personal data and the register

  • To manage, provide, develop and maintain the Services
  • To process reservations and orders for the Services
  • To communicate with customers, for example, via text message, other mobile applications or e-mail
  • To mimic the status of the booking or information related to the booking before the start of the accommodation
  • To diagnose faults, optimize technology, and enable contact in the event of a problem with a reservation or implementation of the Services
  • To analyze and improve the quality of the Services and the service experience
  • To identify communications with customers about the Services, such as creating a profile and submitting offers that match your profile as a user of the Services
  • To analyze statistics about our Services and user behavior
  • To enhance customer benefits and the service experience in other ways that we believe customers value
  • According to the Accommodation and Catering Act, passenger data and the passenger register can also be used for direct marketing. The information is used to advertise services and products, directly or indirectly, including behavioral marketing, unless prohibited by the customer.
  • In addition, passenger data are processed in order to maintain public order and security, to prevent and detect crime and to compile statistics.
  • Legal basis for the processing of personal data under the EU General Data Protection Regulation:
  • Person's consent to the use of personal data when the person has ordered Savantum Oy's offer letter (ordered by phone or electronically from our website)
  • Lease agreement to which the registrant is a party
  • Finnish Law of 28 April 2006/308 “Law on Accommodation and Catering” which obliges keeping the passenger data and enables the contacts and maintenance of the customer relationship required by customer service.
  • The Customer has the right at any time and free of charge to prohibit Savantum from processing Personal Data for marketing purposes or to withdraw your consent.

The data is not used for automated decision making or profiling.

4. What types of personal data we process


The information stored in the customer register includes: person's name, position, company / organization, telephone number, e-mail address, address, personal identity number, business ID, website addresses, network connection IP address, IDs / profiles in social media services, information about subscribed services and their changes, billing information and other information related to the customer relationship and the services ordered.

The data will be stored in the Visma billing system for the time being and will be deleted if the customer requests the deletion of their personal data. In addition, we regularly use the following service providers to collect data: Google Inc, Constant Contact, Facebook, Linkedin, Booking.com, Airbnb, Tripadvisor, Nettimökki, Hotels.com.

We are not responsible for the information that third-party operators, such as the internet booking sites or travel agents, to collect and maintain majoitusvarauksiin connection. We are only responsible for the information provided to Savantum Oy.

5. Your Rights 

As a data subject, you have the following rights:

• Access

• You can access and review what data we process of you. After we have validated your identity, we will provide the data we process of you and other information of your rights as required under applicable regulation.

• Rectification

• You can have your data rectified if it contains errors or the data is incomplete. We kindly ask you to notify us if you notice that your data is erranous or incomplete.

• Erasure (”right to be forgotten”)

• You can request us to erase and delete your data with the condition that no lawful processing principle exists and the processing is not otherwise required under mandatory law or to resolve an ongoing dispute. • Restriction of processing • If there exists ambiguity regarding the validity of our lawful processing principles or the authenticity of your data, you can request us to restrict the processing of your data until the ambiguity is resolved.

• Data portability

• You can request us to transfer your data to other controllers if it is technically possible and safe.

• Objection of our legitimate interest

• You can for example opt-out from our direct marketing as we instruct you when we exercise such marketing.

• Complaint to national supervisory authorities

• You can lodge a complaint to national supervisory authorities in all of our countries of operation. Requests concerning the utilization of your rights in respect to access and erasure, we kindly ask you to provide the request in writing and duly signed either via e-mail or post to our official addresses described here. All requests are to be made to the contact details defined below.

6. Cookies

We are using cookies at our websites. Cookies are text files which are located in the device used for browsing. Cookies are used to improve user experience at our websites and for marketing analysis. You can decline the use of cookies directly at our websites or remove the cookies which might to some extent restrict the use of our websites.

7. Regular sources of information


Customer information is obtained regularly:

  • in the service situation and in connection with the purchase transaction
  • when a customer relationship arises
  • agreements
  • in connection with a marketing event
  • messages sent from the customer themselves via online forms
  • from the customer himself via the network to subscribe to the newsletter
  • from the customer himself through social media
  • from dealers such as Booking.com and AirBNB
  • passenger notices
  • Passenger reports are collected from persons staying in rental cottages (Finnish Act of 28 April 2006/308 “Act on Accommodation and Catering). The accommodation operator is responsible for making the passenger a passenger declaration. Passengers participating in a group trip may be the subject of a joint passenger declaration. The notification shall indicate the business name, company and community code of the accommodation provider and the Visiting Address of the accommodation establishment. The passenger declaration shall contain the following information (passenger data):

1) the passenger's full name and Finnish personal identity number or, in the absence thereof, date of birth and citizenship;
2) the full names and Finnish personal identification numbers of the spouse and minor children accompanying the passenger or, in their absence, the dates of birth;
3) the passenger's address;
4) the country from which the passenger arrives in Finland;
5) the number of the passenger's travel document; mixed
6) the arrival date and departure date of the passenger's accommodation, if known.

In addition, the passenger may indicate in the passenger notification whether the accommodation is for leisure, work, meeting or any other reason.

The provisions of subsection 1 (1) and (3) shall also apply to a group tour guide referred to in section 1 (2) (10) who acts as a representative of the tour operator. The provisions of subsection 1 (4) do not apply to a passenger whose place of residence is Finland. The provisions of subsection 1 (5) do not apply to a Nordic citizen or a passenger residing in Finland.

The passenger must confirm the passenger data in the passenger declaration with his signature. However, the group travel manager may sign the joint passenger declaration referred to in subsection 1 on behalf of the passengers participating in the group trip. The person referred to in subsection 1 (2) need not sign the passenger declaration.

By law, physical travel cards are retained for a year, after which they are destroyed.

8. Regular disclosures


As a rule, the information is not disclosed for marketing purposes outside Savantum Oy. Passenger data will be provided to law enforcement authorities upon request.

We have ensured that our agreements with service providers take into account the data protection regulation. We have ensured that all of our service providers comply with data protection laws. We regularly use the following service providers:

Visma, Google Inc., Constant Contact, Facebook / WhatsApp, Twitter, Microsoft Corp / LinkedIn, Booking.com, AirBnB, Tripadvisor, Hotels.com

 

9. Duration of data processing


The data will be retained for the time being. The registrant can unsubscribe from our marketing list via the link in each of the marketing emails we send.

10. Processors of personal data


The customer's contact information is handled by Savantum Oy's CEO and accountant.

The controller and his employees process personal data. We may also partially outsource the processing of personal data to a third party, in which case we will ensure through contractual arrangements that the personal data will be processed in accordance with applicable data protection legislation and otherwise in an appropriate manner.

11. Data transfer outside the EU


Personal data will not be transferred outside the EU or the European Economic Area.

12. Automatic decision making and profiling


We do not use the information for automatic decision making or profiling.

Savantum Oy
Villanella 5, 00890 Helsinki
+ 358400868889 / customer service
asiakaspalvelu@kotteria.com

Modified: 06.06.2020