Magic Cloud Oy’s customer register privacy policy

1. General information

Magic Cloud Ltd (hereinafter “Magic Cloud” or “We“) is committed to ensuring the confidentiality and privacy of personal information in its possession. This Privacy Policy applies to personal information that we collect in connection with the services we provide (the “Registry“). This Privacy Policy describes the personal data we collect and how we process it. For more information about the processing of personal data, please contact Timo Haapavuori, timo.haapavuori@magiccloud.fi.

We may update this Privacy Policy from time to time, for example, as legislation changes. We will use reasonable endeavours to give you reasonable advance notice of any changes and their effects. We therefore encourage you to review this Privacy Policy whenever you become aware of any changes to it. This Privacy Policy was last updated on 14 October 2020.

2. The controller

Name: Magic Cloud Oy
Address: Hallituskatu 8A, 33200 Tampere
Phone: 010 328 4700
Email: myynti@magiccloud.fi
Business ID: 2483428-8

3. Whose personal data do we collect?

We process the personal data of our customers’ contractual contacts and users of our services (hereinafter also referred to as “You“) in the Register.

4. What types of personal data do we collect?

We process the following personal data concerning our customers’ contractual contacts and users of our services in the register:

• your first and last names;
• your contact details (postal address, email address and telephone number);
• the start and end date of the customer relationship;
• data relating to the management of the customer relationship and other business relations and communication (e.g. order and purchase behaviour data, feedback, complaints);
• your billing and collection details;
• your information about your use of electronic services and content (e.g. newsletter subscription);
• technical information sent by the controller to the server (e.g. IP address, browser, browser version);
• any marketing and promotional information you provide; and
• direct marketing authorisations and prohibitions.

5. From what sources is personal data collected?

We collect personal data primarily from the data subjects themselves or from our customer’s contractual contact during the customer relationship and through the use of our services.

6. Grounds for processing your personal data, purposes of use and effects

The basis for processing your personal data is based on our purposes as set out below. our legitimate interest.

The purpose of processing personal data is to manage and maintain the customer relationship between the company represented by the data subject and Magic Cloud. The personal data is processed for the provision and management of services under a service contract with the customer and for the management of the customer relationship and customer communications. The processing of your personal data has no other effects on you.

We will not further process your personal data for purposes other than those set out in this notice.

7. Regular disclosures of your personal data

We use third party services to process and store personal data. Data may be disclosed to subcontractors when they are involved in the purposes described in this Privacy Policy. These third parties act as processors of personal data and are only entitled to process such data to the extent necessary for the agreed services.

Information may be disclosed to the authorities as required by applicable law.

We may only transfer your personal data outside the European Union or the European Economic Area on the basis of a law.

8. Principles for the retention of personal data

We will keep your personal data in the register for as long as the customer relationship is valid. After the end of the customer relationship, your personal data will be kept for a maximum of six years (accounting law obligations) after the end of the customer relationship. Please note that your personal data may also need to be kept for longer than this if applicable law or our contractual obligations towards third parties require a longer retention period.

9. Rights of the data subject in relation to the processing of personal data

You have the right under applicable data protection legislation at any time to:

• be informed about the processing of your personal data;
• have access to your personal data and check the personal data we process about you;
• request that inaccurate or incorrect personal data be corrected and completed;
• request the deletion of your personal data;
• object to the processing of your personal data on grounds relating to your particular personal situation, insofar as we have a legitimate interest in processing your personal data;
• receive your personal data in a machine-readable format and transfer that data to another controller, provided that you have provided us with the personal data, we process that personal data on a contractual basis and the processing is carried out automatically; and
• request restriction of the processing of your personal data.

You must submit your request to exercise the above right to us in accordance with the Contact Us section of this Privacy Policy. We may ask you to specify your request in writing and to verify your identity before processing your request. We may refuse to comply with your request on the grounds provided by applicable law.

You also always have the right to lodge a complaint with the relevant supervisory authority or with the supervisory authority of the EU Member State where you reside or work if you consider that we have not processed your personal data in accordance with the applicable data protection legislation.

10. Principles of register protection

We respect the confidentiality of your personal data.

Any manual records relating to the customer’s personal data are kept in a locked room with restricted access. Personal data will be kept confidential.

For non-manual data, Magic Cloud has taken the necessary technical and organisational measures to protect the customer’s personal data from unauthorised access or destruction. Depending on the service provided to the Customer, Magic Cloud’s technical maintenance staff may have access to review the personal data of persons connected to the services, for example in the context of helpdesk operations. Magic Cloud personnel have signed a separate Privacy Policy Supplement. The rights and authorisations of staff in the information systems used to provide the services are limited according to the scope of their work and access to the systems is controlled through targeted access rights.

We encrypt personal data sent outside our Company.

11 Contacts

All requests to exercise the above rights, questions about this Privacy Policy and other communications should be made by email to our customer service department at myynti@magiccloud.fi. You may also contact us via the feedback form on our website, in person at our offices or in writing to the address below:

Magic Cloud Oy

Hallituskatu 8A

33200 Tampere