Updated 3.10.2019

1 Data controllers and contact details for register matters

Lahti Houses Group, Aleksanterinkatu 8, 15110 Lahti, tel. 03 851 570

Lahden Talot Oy (1108275-0)

Lahden Asunnot Oy (2108080-4)

Lahden Palveluasunnot Oy (2110856-3)

Group Data Protection Officer: tietosuojavastaava@lahdentalot.fi

Each company in the Lahden Talot Group is responsible as a data controller for the processing of personal data of its stakeholders. Lahden Talot Oy maintains the personal data of the group companies’ stakeholders centrally and processes them for administrative purposes and for the planning and development of the group’s business.

2 For what purposes and on what basis do we process your personal data?

Lahden Talot collects and processes personal data to manage and monitor its sales and marketing. In addition, we collect information from parties with whom Lahden Talot has a cooperation agreement and from external stakeholders whom Lahden Talot is interested in contacting to provide general information about Lahden Talot’s activities, such as media representatives and financial influencers.

In these situations, the basis for processing your personal data is a contract, such as a cooperation agreement and/or a legitimate interest of Lahden Talojen (such as direct marketing). We process your personal data for the following purposes:

• communication and information, maintaining a working relationship
• direct marketing of services (letter, telephone and electronic direct marketing) and online advertising and targeting
• organising marketing competitions and evaluations and conducting opinion and market research.
• planning and developing business and services, statistics and reporting
• detecting, preventing and investigating irregularities, fraud and other criminal offences.

3 What kind of personal data do we process and where do we collect it from?

We process the following personal data about decision-makers and contact persons in companies and organisations and other stakeholders:

• name, title/position, employer company/association, contact details (postal address, telephone number, e-mail address)
• Public information about your duties and status in business or public office
• Information provided by the data subject himself/herself (e.g. professional interests of the data subject)
• direct marketing authorisations and prohibitions.

We collect information from you, for example, from information obtained when you meet or otherwise contact us, or when you participate in events. Personal data may also be collected and updated from the business register and other public and private registers.

4 To whom do we disclose or transfer information?

As a rule, Lahden Talot does not disclose the information in the register to third parties. However, the data may occasionally be disclosed in accordance with the law, e.g. to selected partners of Lahden Talot for direct marketing purposes, unless the data subject has prohibited such processing and disclosure.

We use service providers to process personal data for the following services:

• maintaining and managing data.

Service providers process personal data only to the extent necessary to provide the service in question, in accordance with the data protection agreement.

5 Do we transfer data outside the EU or EEA?

We do not transfer personal data outside the EU or EEA.

6 How do we protect your data and how long do we keep it?

The information contained in the information systems is accessible to restricted and designated persons. Access requires logging into the information system with your own personal username and password. The information systems are protected by appropriate anti-virus software and firewalls. The databases and their back-ups are located in locked premises and are accessible only to certain pre-designated persons.

We keep personal data for as long as necessary for the purpose for which the personal data is used. As a general rule, data will be kept permanently within the limits permitted by law. We will regularly assess the necessity of data retention and will take reasonable steps to ensure that no personal data relating to data subjects which are incompatible with the purposes of the processing, outdated or inaccurate are kept in the register.

7 Your rights as a data subject in relation to data processing

Requests concerning the rights of data subjects should be sent to the address mentioned in point 1. As a registered user, you have the following rights:

• Right of access and right to request rectification and deletion of data
• Right to opt-out of direct marketing
• Right to object and restriction of processing
• Right to complain to a supervisory authorityify