Mestamaster Oy customer and user register Privacy Statement
Table of contents
​
​
1. The registrar
Mestamaster Oy
Business ID: 2972171-7
Lemuntie 7, 00510 Helsinki
info@mestamaster.fi
​
2. Name of the register
​
Mestamaster Oy customer and user register.
​
3. Purpose and legal basis for processing personal data
​
The purpose of the processing of personal data is to provide the Mestamaster service (the “Service”), management and Service development. Use of the Service requires registration to the Service. Personal information may also be used for activities directly related to the Service, such as bulletins, billing and statistics.
​
Mestamaster Oy’s customers are construction companies and other similar actors. The users of the service are Mestamaster Persons working on Oy ‘s customers’ construction sites.
The processing of personal data is based on Article 6 (1a) of the EU Data Protection Regulation (EU) 2016/679 the consent of the data subject and / or the legitimate interest of the controller in the processing of personal data in accordance with paragraph 1f) processing.
​
The legitimate interest of the registrar is based on the provision of the Service to Mestamaster Oy customers. The registration of persons working at Mestamaster Oy’s customers’ construction sites to the Service is necessary for the functionality of the Service.
​
The data is not used for automated decision making or profiling.
​
4. Personal data collected in the register
Billing and payment information from Mestamaster Oy’s customers and the customer’s contact person are collected in the register contact information (first and last name, telephone number, e-mail address). The mandatory information in registration is collected from users as:
-
First and last name
-
Contact information (phone number and email)
-
Professional reference group
​
The register may also contain the following information about the users:
-
Technical information collected by cookies (e.g. IP address, browser type)
​
5. Regular sources of information
The information is primarily collected from the registrants themselves, either directly or by the means of cookies when registering for the Service and when the registrant updates their user account information.
​
The user registered in the service can also invite other people on their own initiative, such as a colleague, subordinate or subcontractor working on the construction site as users of the Service.
Then the invitee will receive an invitation link, valid for seven days, to the Service to the provided email address, that allows the invitee to access the information provided and register to the Service.
​
If the invitee does not register as a user of the Service and / or confirm the information required for registration within seven days from receiving the invitation link, the information provided shall be removed from the register.
​
6. Groups of recipients for personal information and transfers outside the EU and the EEA
The information collected in the register may be disclosed to Mestamaster Oy partners who provide billing, customer communications and IT services for Mestamaster Oy.
​
The information collected in the register is not regularly disclosed outside the EU or the EEA. Collected in the register however, the information may be disclosed outside the EU or the EEA to Mestamaster Oy’s partners provided that the Affiliates in question are members of the Privacy Shield or otherwise capable As required by the EU Data Protection Regulation to ensure an adequate level of data protection and compliance on data transmission requirements.
​
7. Retention period of personal data
In principle, personal data is stored for as long as the user account is valid on the Service. Account can be removed from the Service settings if user wishes so. If necessary, Mestamaster Oy can delete inactive user accounts. In these cases, the user will be notified of the deletion of the user account before taking any action.
​
8. Protection of personal data
Access to the personal data of data subjects is restricted to those persons who, by their employment or function, have the right to process data. The processing of personal data is confidential, which is ensured by controls and non-disclosure agreements.
​
All users’ personal information is stored electronically on servers. The registrar uses up-to-date technical protection in the protection of personal data and the server equipment of the registry are maintained in accordance with best practices.
​
Each user has a personal username and password. Login information is not retained on the server in plain language.
​
When processing personal data on the behalf of the registrar with partners, agreements on personal data processing are made where partners undertake to comply with the legislation and Mestamaster Oy’s data protection principles and to use the data only for the purposes specified by Mestamaster Oy.
​
9. Reporting a security breach
If the registrar becomes aware of a security breach on the personal data held by the registrar, which is likely to endanger the rights or freedoms of data subjects, the registrar shall inform the data subjects of the breach without undue delay. The registrar will investigate all probable risk situations thoroughly and they are reported to the supervisory authority.
​
10. Rights of the data subject
The data subject has the right to know what information about him is stored in the register or not there is no information about him in the register. The data subject has the right to request data stored about him to be corrected, deleted or supplemented if the data stored is incorrect, unnecessary, incomplete or outdated for the purpose of the data processing and collection identified in this register description. In addition, the data subject has the right to request a restriction on the processing of his / her personal data and the right to request the transfer of personal data from one system to another.
​
The data subject has the right to withdraw his or her consent to the processing of personal data. Withdrawal of consent will result to deletion of the user account from the Service. The cancellation does not affect the legality of the processing performed before the cancellation.
​
The data subject has the right to file a complaint with the supervisory authority, i.e. the Data Protection Officer, if the data subject considers that the processing of personal data concerning him infringes existing legislation.
​
11. Changes to the Privacy Statement
Mestamaster Oy develops its personal data protection policies to accommodate changing legislation and new needs of the Service. An up-to-date version of the privacy statement can be found on our website: https://mestamaster.fi/