Skip to content
CLOSE
LANGUAGE – en
fi
CONTACT US
CALL TO US: 044 4100 500SEND EMAIL: asiakaspalvelu@omapaja.fi
CALL TO US: 044 4100 500SEND EMAIL: asiakaspalvelu@omapaja.fi
en
fi

Privacy Policy

TABLE OF CONTENTS
loading...

1. Purpose of Privacy Policy Statement

The purpose of this privacy policy statement is to inform and carry out communications according to the European Union General Data Protection Regulation 2016/679 and give the registered person information about the processing of their data in a compact and transparent manner.

Omapaja Ltd. offers their clients billing and financial administration services. Presented in this privacy policy statement are the principles of Omapaja Ltd. regarding the processing and protection of personal data in different circumstances.

2. Keeper of Registry

Omapaja Ltd.
Business ID: 2399894-2
Kauppurienkatu 31 a 1, 90100 Oulu
tel. 0444100500
asiakaspalvelu@omapaja.fi

3. Contact Person for Matters Concering the Registry

Customer service
Kauppurienkatu 31 a 1, 90100 Oulu
tel. 0444100500
asiakaspalvelu@omapaja.fi

4. Name of Registry

Omapaja entrepreneur registry

5. Processers of Personal Data

The personal data of the Omapaja entrepreneurs is processed by Omapaja Ltd. personnel and subcontractors of Omapaja Ltd. The subcontractors of Omapaja Ltd. are suppliers of systems and they have technical access to systems of Omapaja Ltd. in order to perform maintenance and support tasks. Additionally the systems can be accessed by the accountant of Omapaja Ltd. in order to perfrom their statutory duties. Access to the systems can be given to authorities in certain circumstances, such as during a tax audit. Omapaja Ltd. identifies subcontractors with access to Omapaja Ltd. systems upon request. Processers of personal data can process personal data only in accordance with directives given by Omapaja Ltd., unless the legislation of the European Union or the Member State requires otherwise.

6. The Purpose of Processing Personal Data

The purpose of the Omapaja entrepreneur registry is the management of client relations and statutory obligations as well as direct marketing. Processing of personal data is based on the Omapaja Ltd. service agreement and therefore it has a legal basis according to point b) of paragraph 1 of article 6 of the General Data Protection Regulation. Additionally the processing of personal data is based on the legitimate interest of Omapaja Ltd. and therefore has a legal basis according to point f) of paragraph 1 of article 6 of the General Data Protection Regulation.

Personal data contained in the registry is used for Omapaja billing services and other financial administration services and to carry out statutory duties related to them. In addition personal data is used for purposes of client communications, public relations and the marketing of Omapaja Ltd. services to existing or former clients.

It is in Omapaja Ltd.’s legitimate interest to contact existing or former clients for the purpose of marketing Omapaja Ltd. services, unless they have specifically forbidden direct marketing.

7. Information Content of the Registry

The registry of Omapaja entrepreneurs contains the following personal data:

  • Name of the person
  • Personal identification number of the person
  • Address
  • Telephone number and e-mail address
  • Bank account number
  • Auxiliary company name
  • The person’s profession/industry
  • Picture of the person
  • Tax card information
  • Insurance information selected by the person
  • Information on possibile ban on communications and direct marketing
  • Inofrmation on memos, calendar events and e-mail conversations related to the person

8. Regular Sources of Personal Data

Personal data is primarily obtained from Omapaja entrepreneurs themselves. Personal data is additionally obtained from authorities, insurance companies, trade unions and unemployment funds. Omapaja Ltd. supplements personal data on the basis of its own operations.

9. Regular Disclosure of Personal Data

The data contained in the Omapaja entrepreneur registry is primarily processed by Omapaja Ltd. personnel. Personal data is disclosed to authorities, insurance companies, trade unions and unemployment funds when necessary in order to carry out their statutory duties.

10. Transfering Data Outside of the EU or EEA

Omapaja processes its entrepreneurs’ personal data when managing client relations and statutory duties. Omapaja uses system providers as subcontractors in its operations. In some segments of their operations the subcontractors may transfer personal data outside EU/EEA. A contract of processing personal data is always made with subcontractors.

11. The Registry’s Protection Principles

Material regarding Omapaja entrepreneurs that is in manual form is stored in a locked area, the access to which is restricted to those Omapaja Ltd. employees who are authorized and required to process personal data in order to perform their duties.

The access to the personal data stored in IT systems is restricted to persons who must access personal data in order to carry out their professional duties. Access is limited based on the person’s duties.

12. Storage and Removal of Personal Data

Personal data in the Omapaja entrepreneur registry is stored during the period of time required to carry out services in accordance to Omapaja Ltd. service agreement as well as statutory duties. Legislation, such as the Accounting Act, regulates the minimum amount of time which accounting and payroll information must be stored.

13. Rights Pertaining to Processing of Personal Data

Primarily each person registered in the Omapaja entrepreneur registry has the right to check their personal data recorded in the registry. A registered person also has the right to demand that erroneous inormation is corrected in the registry or that personal data be removed from the registry. A registered person has the right to revoke their consent to the processing of their personal data or to demand limiting the processing. A registered person has the right to obtain all their personal data in such a format, that they are transferrable to another data system. A registered person has the right to deny the use of their personal data for the purpose of marketing the services of Omapaja Ltd.

Omapaja entrepreneurs may direct requests pertaining to the contents and processing of their personal data to the contact person of Omapaja Ltd. Legislation or data system structure may in some circumstances prevent the full implementation of an Omapaja entrepreneur’s rights. In such cases the Omapaja Ltd. contact person informs the entrepreneur about the legislation which prevents the implementations of their rights or of another possible circumstance, for example related to data systems, which prevents the implementation of the rights.

Submitting the above-mentioned personal data is a prerequisite for the implementation of services as based on the contract and services can not be offered, if information is withheld. The data will not be used in automatic decisions.

This statement was written on 16.5.2018 / This statement was last updated on 31.12.2020. An earlier version can be requested form the keeper of the registry.