Business ID: FI-09342090
74200 Vieremä, Finland,
Tel. +358 20 768 800
Contact information for register-related matters
Team Leader, Ponsse Brand Experience, Global marketing
tel. +358 40 7211548
Name of the register
Ponsse webshop customer register
Grounds for and purpose of the processing of personal data
Grounds for the processing of personal data:
- Agreement, the processing is necessary for the delivery and management of customer orders.
- Consent, the processing is necessary for marketing and customer communications.
Personal data are collected and processed for the administration of the Ponsse Plc webshop and for marketing and customer communications. Personal data are collected and maintained for the following purposes:
Customer relationship management
Delivering, processing and archiving orders
Webshop and service development
Improving the customer experience
Analysis and statistics
Producing targeted content and advertisements
Improving customer service
The collected personal data may be used for profiling.
Data content of the register
The following customer data may be saved in the register:
- Personal details: name, address, phone number and email address
- Customer’s username and password
- Information on customer orders
- Information related to analysing the use of the system
Data sources of the register
Personal data are collected directly from the data subjects in connection with creating a webshop account and/or purchases.
Disclosure of data
Data on the data subjects can be disclosed to other Ponsse Group companies, partners and/or subcontractors to fulfil the abovementioned purposes.
For technical reasons and the method of processing personal data, data may be held by the subcontractor or the data may otherwise be processed via a technical remote connection.
We may transfer personal data outside the EU/EEA. Whenever personal data are processed outside the EU or the EEA, we will ensure that the subcontractor in question is committed to complying with the EU Commission’s standard contractual clauses concerning the processing of personal data and/or that the subcontractor is a participant of the Privacy Shield program.
Protection and retention of data
Only our employees who have the right to process data subjects’ data as part of their duties are entitled to use systems containing personal data. The register is protected by necessary technical and organisational means. Each user has their own username and password for systems. Data are collected into databases protected with firewalls, passwords and other technical means. Databases and their backup copies are located in locked premises, and only persons designated in advance have access to the data.
When the use of personal data is no longer necessary for the aforementioned purposes, the data will be erased from the webshop register automatically.
Rights of data subjects
Data subjects have the right to access their personal data saved in the register and to request any incorrect data to be rectified or erased. Requests concerning the matter must be submitted in person or in writing to the contact person stated in Section 2.
As a data subject, you have the right to object to the processing of your personal data within the limits required by law or to request the processing of your personal data to be restricted, and to lodge an appeal on the processing of personal data with the supervisory authority.
For specific personal reasons, you also have the right to object to the processing of your data when data are processed on the grounds of legitimate interests. When submitting your request, you need to indicate the specific situation based on which you object to the processing of data. We may only refuse to fulfil your request in which you object to the processing of data on legal grounds.
With regard to all questions and requests concerning personal data, the data subject should contact the person responsible for Ponsse’s personal data file referred to in item 2.