We\nrespect the privacy of our customers and service users (our customers\u2019\ncustomers). We are responsible for the processing of your personal data and\nprotecting your privacy in our operations. We always comply with the valid\nlegislation on personal data. This document describes Sowellus\u2019 privacy\nprotection and data protection policies regarding the data processing for which\nwe act as the Controller as well as the data processing for which we act as the\nProcessor.<\/p>\n\n\n\n
Sowellus\nis a Finnish company and its technical systems are situated in Finland.\nSowellus and its resellers provide software and services for private and public\nadministration customers (hereinafter \u201cthe Customers\u201d).<\/p>\n\n\n\n
Software\nHouse Sowellus Oy (hereinafter \u201cSowellus\u201d) aims to process your personal data\nwith complete transparency regarding its privacy protection.<\/p>\n\n\n\n
This\nprivacy protection statement applies to all business processes and websites,\noperating areas, mobile solutions, cloud services, communities and product\nwebsites of Sowellus as well as third-party social networks (such as Facebook).<\/p>\n\n\n\n
This\nstatement describes how Sowellus processes personal data when Sowellus acts as\nthe definer of the purpose and means of the processing (Sowellus as the\nController) and when the data processing has been requested by a Customer and\nconducted according to the Customer\u2019s instructions (the Customer as the\nController and Sowellus as the Processor).<\/p>\n\n\n\n
Personal\ndata means any information about an identified or identifiable person, such as\ntheir name, address, email address, phone number, and IP address.<\/p>\n\n\n\n
We\nprimarily process personal data on the behalf of our Customers. In other words,\nwe act as the Processor of the personal data. Our Customers enter the data of\ntheir own customers (\u201cEnd Customers\u201d) and other stakeholders, such as tenants\nor subcontractors, into our service.<\/p>\n\n\n\n
As\nthe Controller, we process the data of our Customers\u2019 contact people. We also\ncollect data from our online service visitors.<\/p>\n\n\n\n
Sowellus\nprovides various services for its Customers. For these services, the Customer\ndetermines how personal data is processed in the services. In other words, the\nCustomer acts as the Controller. Sowellus acts as agreed with the Customer in\nan agreement between the two parties. The data processing agreement (DPA) is\nalways included in the overall agreement.<\/p>\n\n\n\n
The\nCustomer is responsible for the Controller obligations determined by law.\nSowellus is responsible for the Processor obligations.<\/p>\n\n\n\n
As\nthe Processor of personal data, the responsibilities of Sowellus include:<\/strong><\/p>\n\n\n\n As\nthe Controller, the Customer is responsible for its personal data in Sowellus\u2019\nservices. However, it must be taken into account that the Customer is not in\nprinciple allowed to record any data belonging to special categories, such as\nmedical information, into the systems of Sowellus. Nor are they allowed to\nrecord or send any data that is unnecessary regarding the use of the service\ninto the systems. If a user of the software enters sensitive personal data into\nthe user accounts they administer or posts, for example, comments to public\nforums or Sowellus sites, all the users of that account or site can read it and\nuse it for purposes Sowellus cannot control. Sowellus is not responsible for\nany data entered or posted to accounts, forums, or Sowellus sites.<\/p>\n\n\n\n As\nthe Processor, Sowellus only processes data that is necessary for the\nadministration and development the service. Sowellus always makes a written\ndata processing agreement with its Customers.<\/p>\n\n\n\n As\nthe Controller, Sowellus processes the data of its Customers\u2019 contact people\nand its service\u2019s service data. This data includes:<\/p>\n\n\n\n The\nCustomer\u2019s contact person\u2019s<\/strong> Our\nwebsite\u2019s visitor data<\/strong> Our\nservice\u2019s service data<\/strong> Sowellus\nprocesses personal data to manage its customer relationships and to fulfil its\npromises to the Customer. We collect service data to develop and improve our\nservice.<\/p>\n\n\n\n Our\ngoals:<\/strong><\/p>\n\n\n\n Processing\nthe data for the aforementioned purposes is necessary for maintaining customer\nrelationships and providing the service for the Customers\u2019 end users. We have\nto monitor how people use the service to implement the agreement between\nSowellus and its Customers, therefore, there is no need to give consent to the\nprocessing of the personal data.<\/p>\n\n\n\n Sowellus\ncollects personal data directly from the representative of the Customer. If the\nCustomer, acting as the employer, buys Sowellus software or services through a\npartner company of Sowellus, we can collect user data directly from this\npartner company. When you use a Sowellus site, we will use cookies and other\ntracing technologies with your consent to optimise your user experience.<\/p>\n\n\n\n Sowellus\ndoes not disclose personal data to third parties for marketing purposes without\nconsent. Sowellus may disclose personal data to third parties for other\npurposes as follows:<\/p>\n\n\n\n Business\npartners<\/strong> Authorities<\/strong> Company\nacquisition<\/strong> Here\nis a list of the rights of the data subject and related principles:<\/p>\n\n\n\n 1.\nRight to access the data<\/strong> 2.\nRight to correct the data<\/strong> 3.\nRight to erasure (\u201cright to be forgotten\u201d)<\/strong> 4.\nRestricting the processing<\/strong> 5.\nObjecting to the processing<\/strong> 6.\nRight to data portability<\/strong> 7.\nRight to withdraw your consent<\/strong> 8.\nRight to file in a complaint to an authority<\/strong> Sowellus\ncommits to prevent the unauthorised use and disclosure and other inappropriate\nprocessing of the personal data. We also commit to ensure that the data is used\ncorrectly to guarantee data security and safe use. As part of our commitment,\nwe use reasonable physical, technical, and administrative methods to protect\nthe data collected and processed by us, including:<\/p>\n\n\n\n Secured\nenvironment \u2013 Sowellus stores your data in a secured environment that only\nemployees of Sowellus and its subcontractors who need the data for their job\ncan access. Sowellus also follows the generally accepted standards of the\nindustry. We\nstore personal data as long as it is needed for the specified purposes, such as\nresponding to questions, solving issues, or implementing legal obligations.<\/p>\n\n\n\n When\nwe no longer need the collected personal data, we destroy or erase the data\nsecurely. We may process personal data for statistical purposes, in which case\nwe will anonymise the data.<\/p>\n\n\n\nWhich personal data do we\nprocess?<\/h3>\n\n\n\n
How is the data\nprocessed?<\/h3>\n\n\n\n
Sowellus as the\nController<\/h2>\n\n\n\n
Which personal data do we\nprocess?<\/h3>\n\n\n\n
\nContact information, such as name, address, email, and phone number<\/p>\n\n\n\n
\nIP address and other browser information, such as language and the site the\nindividual accessed the service from<\/p>\n\n\n\n
\nIP address and other browser information, such as language and the site the individual\naccessed the service from<\/p>\n\n\n\nWhy do we process data?<\/h3>\n\n\n\n
How is the data\nprocessed?<\/h3>\n\n\n\n
When do we disclose data?<\/h3>\n\n\n\n
\nSowellus may disclose personal data to its partners, if their business so\nrequires. For example, if a user buys our software or services from our\nauthorised partner on behalf of their employer, personal data may be disclosed.<\/p>\n\n\n\n
\nThe police and other authorities may demand Sowellus to disclose personal data.\nIn such cases, Sowellus discloses the data only if ordered by a court.<\/p>\n\n\n\n
\nIf Sowellus merges with another firm or makes a company acquisition or if the\nbusiness operations of Sowellus are partially or entirely sold, the buying\nparty and the consultants used by it and Sowellus receive the data administered\nby the Sowellus unit in question. This data may include personal data. In such\ncases, external parties make a non-disclosure agreement with Sowellus that also\ncovers the disclosure of any personal data.<\/p>\n\n\n\nThe rights of the data\nsubject<\/h2>\n\n\n\n
\nYou have the right to once a year confirm has Sowellus processed your personal\ndata and receive a copy of the processed personal data. The copy is delivered\neither electronically or by mail.<\/p>\n\n\n\n
\nYou have the right to request Sowellus to complete or correct any incomplete or\ninaccurate data. The incorrectness of the data is decided case by case based on\nwhether the data is in fact incorrect for the purpose of the processing\n(unnecessary, incomplete, outdated).<\/p>\n\n\n\n
\nYou have the right to request Sowellus to erase any data concerning you. The\ndata will be erased unless there is a lawful basis for its processing.<\/p>\n\n\n\n
\nYou have the right to request the processing of your personal data to be\nrestricted in special situations specified by certain laws.<\/p>\n\n\n\n
\nYou have the right to object to the processing of your personal data, if the\nbasis for the processing is the Controller\u2019s legitimate interest or if your\npersonal data is being processed for the purposes of direct marketing.<\/p>\n\n\n\n
\nYou have the right to request your data to be transmitted to another service\nprovider in a machine-readable format. This right applies to data that is in\nelectronic format and the processing of which is based on your consent or the\nimplementation of an agreement.<\/p>\n\n\n\n
\nIf the processing of your personal data is based on your consent, you have the\nright to withdraw your consent whenever you like. After you have withdrawn your\nconsent, the processing in question will stop. For example, you can refuse to\nreceive marketing from Sowellus by contacting us via email. Please note that\nyou may still receive administrative notifications from Sowellus, such as order\nconfirmations and reports on your account (for example, verifications and\nnotifications for changing the password).<\/p>\n\n\n\n
\nIf you believe that Sowellus has not processed your personal data legally, you\nmay file in a complaint to a data protection authority.
\nIf you wish to continue to use the aforementioned rights, please contact us via\nemail.<\/p>\n\n\n\nData security and storage\nof data<\/h2>\n\n\n\n
How do we protect the\npersonal data?<\/h3>\n\n\n\n
\nAll the services, data systems and other resources of Sowellus require a login\nwith a username and password, for example. This is how we prevent the inappropriate\nuse of the data.<\/p>\n\n\n\nHow long do we store\npersonal data?<\/h3>\n\n\n\n
Subcontractors and\ntransmitting personal data<\/h3>\n\n\n\n