Data controller
FutureVision OÜ
ALV number: 10958431
Address: Sõpruse Ave 236-56, Mustamäe District, 13412 Tallinn, Harju County
email: gdpr@futurevision.fi
Registers
Company's customer register, marketing register, user register, employee register, and customer service phone register.
Legal basis and purpose of personal data processing
The legal basis for the processing of personal data under the EU General Data Protection Regulation is
the legitimate interest of the data controller.
The purpose of processing personal data is to maintain contact with customers, manage customer relationships, marketing, and quality control.
Information is not used for automated decision-making or profiling.
Content of the register
The information to be stored in the register includes: person's name, position, company/organization, contact details (phone number, email address, address), website addresses, IP address of the internet connection, accounts/profiles on social media services, information about ordered services and their changes, billing information, other information related to customer relationships and ordered services, and customer service calls.
HOW LONG IS IT KEPT
Up to five years, or two years from the end of the customer relationship.
The IP addresses of website visitors and cookies that are necessary for the functions of the service are processed on the basis of legitimate interest, for example, to ensure data security and to collect statistical data about website visitors in cases where they can be considered personal data. Consent for third-party cookies is requested separately when necessary.
Regular data sources
The information to be stored in the register is obtained from the customer, for example, through messages sent via web forms, by email, by phone, through social media services, from contracts, customer meetings, and other situations where the customer provides their information.
Information about contacts at companies and other organizations can also be collected from public sources such as websites, directory services, and other companies.
Regular disclosures of data and transfer of data outside the EU or EEA
Information is not regularly disclosed to other parties. Information may be published to the extent that it has been agreed upon with the customer.
Data may also be transferred by the data controller outside the EU or EEA. Data will not be transferred to the United States without the explicit consent of the data subjects.
If you provide personal data to third parties, please specify any potential recipients or recipient groups (including data processors/subcontractors), the purposes of processing the personal data related to them, and the transfer basis if the data is transferred outside the EU.
Principles of Register Protection
Care is taken in the processing of the register, and the data processed using information systems is adequately protected. When register data is stored on Internet servers, appropriate measures are taken to ensure the physical and digital security of the hardware. The data controller ensures that stored data, as well as access rights to the servers and other information critical to the security of personal data, are handled confidentially and only by those employees whose job it is to do so.
Right of access and the right to request correction of information
Every individual registered has the right to check the information stored about them in the register and to request the correction of any incorrect information or the completion of any incomplete information. If a person wishes to check the information stored about them or request a correction, the request must be sent in writing to the data controller. The data controller may ask the requester to verify their identity if necessary. The data controller will respond to the customer within the time frame specified in the EU General Data Protection Regulation (generally within one month).
Other rights related to the processing of personal data
The person registered has the right to request the deletion of their personal data from the register ("right to be forgotten").
Similarly, data subjects have other rights under the EU General Data Protection Regulation, such as the restriction of processing personal data in certain situations. Requests must be sent in writing to the data controller. The data controller may request the requester to verify their identity if necessary. The data controller will respond to the customer within the time frame specified in the EU Data Protection Regulation (generally within one month).
