PRIVACY POLICY
This Privacy Policy explains how the Ahola Group processes personal data in connection with its websites, services, recruitment, and business operations. The policy has been prepared as a user-friendly general description of the Group’s personal data processing in accordance with the EU General Data Protection Regulation (GDPR).
This is the Group’s general privacy policy. More detailed, register specific information can be requested from the Group’s Data Protection Officer.
- Data Controller
Ahola Group Oy Ab
Business id: FI02089395
Address: Indolantie 33, 67800 Kokkola, Finland
E-mail: [email protected]
Data may be disclosed to other companies in the Ahola Group on a case-by-case basis to implement services and business operations.
The companies belonging to the Oy Ahola Group Ab are Oy Ahola Digital Ab, AT Cargo Oy Ab, Ahola Transport Ab, Ahola Transport Oü, Oyj Ahola Transport Abp, Ahola Transport Sp.zo.o., Ahola Special Oy Ab and Ahola Special Ab.
- What personal data do we process?
We only process personal data to the extent necessary. The data processed varies depending on the situation and purpose of use and may include, for example:
- Name and contact details (email address, phone number, address)
- Organization, employer, position and role
- Other personal identification information related to employment and business operations
- data related to customer, partner, stakeholder and contractual relationships
- recruitment-related information (e.g. CV, application, education and work experience)
- data related to communications, transactions and use of services
- technical data related to the use of websites (e.g. IP address, browser data and cookies)
- camera surveillance recordings of the company’s surveillance areas and vehicles
- Location data related to implementation of business operations
- For what purposes the data is used
Personal data is processed, among other things, for the following purposes:
- managing customer, partner and stakeholder relationships
- providing and developing services and business operations
- concluding and fulfilling contracts
- communications, contact and customer service
- recruitment and employment related processes
- ensuring the functionality, security and user experience of websites
- complying with statutory obligations
- ensuring safety in the company premises or vehicles
Personal data is not used for automated decision making or profiling.
- Legal bases for processing
We process personal data in accordance with the GDPR based on one or more of the following legal bases:
- consent given by the data subject
- contract or steps taken prior to entering into a contract
- statutory obligation
- the legitimate interest of the controller (e.g. managing customer and cooperation relationships and developing business operations).
- Data Retention
We retain personal data only for as long as necessary to fulfil the purposes of processing or for the period required by legislation. Retention periods are determined on a register-specific basis.
- Disclosure and transfer of data
Personal data may be disclosed:
- to authorities to comply with legal obligations
- to service providers who process data on our behalf (e.g. IT and system services)
- to stakeholders for implementation and development of services and activities
The Ahola Group discloses personal data internally and externally only after careful consideration and with appropriate security measures. All transfers of personal data outside the EU or EEA require that a separate data transfer agreement has been made for the transfer or that the level of data protection has been ensured in some other way in accordance with the law. Data will not be transferred outside the EU/EEA without GDPR safeguards.
- Rights of the data subject
You have the right to:
- receive information about the processing of your personal data
- access your personal data
- request rectification of inaccurate or incomplete data
- request erasure of data or restriction of processing within the limits permitted by law
- object to the processing of your personal data
- withdraw your consent
- lodge a complaint with a supervisory authority
Requests related to the exercise of rights can be submitted to the Data Protection Officer.
- Register‑Specific Privacy Notices and Changes
The Ahola Group has separate, register-specific privacy notices, for example for customers, partners, job applicants and personnel. These notices can be requested from the Data Protection Officer.
We reserve the right to update this Privacy Policy. The most up‑to‑date version is always available on our website.
- How to contact us?
Ahola Group has appointed a Data Protection Officer who can be contacted by sending a message to [email protected] or by sending a letter to:
Ahola Group Oy
Data Protection Officer
P.O. Box 550
FI-67701 KOKKOLA
If you wish to exercise your individual rights, please send us a message after which we will agree to a meeting to verify your identity. We process your personal data with the utmost care, and we cannot share or change your personal information without verifying your identity. As a rule, the deadline for giving a response is 1 month. In the case of complex or multiple requests, the deadline can be 3 months.
How to contact the data protection authority?
If you believe that the processing of personal data has violated the General Data Protection Regulation, you have the right to file a complaint with the supervisory authority. You can also file a complaint in the EU Member State where you have permanent residence or employment.
In Finland, the supervisory authority for data protection matters is:
Office of the Data Protection Ombudsman
Office of the Data Protection
Visiting address: Lintulahdenkuja 4, 00530 Helsinki
Postal address: P.O. Box 800, 00531 Helsinki
Phone: +358 29 566 6700
Registry office: +358 29 566 6768
www.tietosuoja.fi