Privacy Policy
Information on personal data processing according to the General Data Protection Regulation (EU) No. 2016/679.

1. Name of the register
Online Store User Register

2. Data controller and contact person of the register
Suomen Rakennusmedia Oy
Heidi Husari, CEO
heidi.husari@rakennusmedia.fi
040 831 2829,  09 129 9249
Eteläranta 10, 00130 Helsinki

3. Purpose of personal data processing
Personal data stored in the Register are processed and used to manage customer relations, to ensure orders for training products, for marketing purposes, customer communication, and other online-service related activities, such as statistics. Only personal data necessary for the operation are collected from online store users.

4. Regular sources of data
The data controller records the data provided by the user himself or herself when using the website.

5. Data contained in the register 

The following user data are collected:

  • Corporate customer
    • First and last name
    • Business ID
    • Company
    • Country/region
    • Street address, postal code, post office
    • Phone
    • E-mail address

  • Private customer
    • First and last name
    • Country/region
    • Street address, postal code, post office
    • Phone
    • E-mail address

  • Participant specified by the customer
  • First and last name
  • E-mail address
  • Phone
  • Tax number

6. Basis of processing
A contractual relationship or preparation thereof is the legal basis for the processing of personal data for the purposes of providing our services, concluding customer contracts, and handling orders and the related obligations. 

Legitimate interests of the data controller or a third party may also serve as the legal basis for the processing of personal data. Customer relationship management, customer communication, processing of personal data related to marketing (including direct marketing) and statistics, as well as handling of complaints and legal processes are based on legitimate interest. When processing personal data based on legitimate interest, we evaluate the benefits and possible harms of the processing for the data subject and have concluded that the rights and interests of the data subjects do not override the legitimate interest.

7. Regular disclosure of data
Data provided by a corporate customer or private customer about the participants are transferred to Suomen Rakennusmedia Oy’s register of online training participants for the purposes of training completion.

From the register of training participants, the data are disclosed further to Vastuu Group Oy for maintaining training results in online services of Vastuu Group. From there it can be disclosed further to employers of the registered person and/or those contractual partners of the registered employer who need the data due to checking compliance with occupational safety, legislation or contractual requirements, or quality management (for example, main contractor of the site, main contractor or the employer of the shipyard area). Training results can be disclosed for similar purposes also through partners belonging to partner program of Vastuu Group Oy.

Moreover, from the register of training participants, the data are disclosed further to Zeroni Oy for maintaining training results in the Zeroni access control system.

The data controller can disclose data stored in the register to Rakennusteollisuuden Koulutuskeskus RATEKO, which belongs to the data controller’s group, for justified purposes, such as for notification about topical trainings in accordance with valid legislation. Suomen Rakennusmedia Oy does not sell customer data to third parties.

8. Data transfer outside the EU or EEA
Personal data in the Register are not transferred outside the EU or the EEA.

9. Data storage and protection
We store personal data for as long as is necessary to fulfil the purposes specified in the Privacy Policy and always for the time required by legislation (for example, responsibilities and duties related to accounting obligations or reporting obligations).

User data are stored in the system in such a way that the data can be deleted and modified in accordance with data protection legislation, if necessary. Upon data storage, the possibility of deleting and modifying the data without losing or changing other data is considered.
We use appropriate technical and organisational safeguards to protect personal data. The right to access personal data is limited only to specifically authorised entities. Entities processing personal data have a duty of confidentiality in case of matters related to the processing of personal data.

10. Right of inspection
A data subject has the right to know what data about him or her are processed in the Register. A data subject may request the inspection of his or her personal data from the data controller.

11. Right to request correction of data, right to request deletion or restriction of processing of data
Under circumstances specified in the EU General Data Protection Regulation, a data subject has the right to request the correction, supplementation or deletion of his or her personal data or restriction of processing of the data.
12. Right to object to processing of personal data
A data subject has the right under the EU General Data Protection Regulation to object to processing of his or her personal data for a reason related to his or her particular situation.

13.  The right to withdraw consent
If processing of personal data is based on the data subject’s consent, the data subject has the right to withdraw his or her consent to the processing of his or her personal data. Withdrawal of the consent has no effect on processing carried out prior to the withdrawal.

14. Use of rights
In the above matters, a data subject may turn to the contact person designated by the data controller. Requests concerning the data subject’s rights can be submitted in writing and signed to the address: Suomen Rakennusmedia Oy/asiakaspalvelu, Eteläranta 10, 00130 Helsinki, or by contacting the data controller’s contact person by e-mail. The identity of the person submitting the request can be checked separately before the request is processed. A request will be answered within a reasonable time, in principle, within one month from the submission of the request and verification of the identity. If the request cannot be granted, the refusal will be notified separately.

15. Right of complaint submission to the data protection authority
A data subject has the right under the EU General Data Protection Regulation and the Data Protection Act to submit a complaint to the data protection authority regarding the processing of personal data described in the Privacy Policy. In Finland, the data protection authority is the Data Protection Ombudsman (www.tsv.fi).

Page last updated on: 6.2.2024