Repair of movement
joints and injection of
concrete cracks

This is the register and privacy policy of Manager Projekt Oy in accordance with the General Data Protection Regulation (GDPR) of the EU. Compiled on October 20, 2023. Last updated on October 25, 2023.

1.Controller and Data Protection Officer

Name: Manager Projekt Oy (our website address is: https://www.manapro.fi/)
Business ID: 2922650-5
Address: Sannaistenkatu 8
Postal Code: 06100
City: Porvoo
Phone Number: +358 45 170 8007
Email Address: hallinto@manapro.fi

2.Purpose of the Register

Personal data is processed for purposes related to managing, administering, and developing customer relationships, providing and delivering services, as well as development and billing of services. Personal data is also processed for the purposes of investigating any complaints and other claims that may arise. In addition, personal data is processed in customer communication such as information and news purposes, as well as marketing, including direct marketing purposes. The customer has the right to object to direct marketing targeted at them. The controller processes the data themselves and also utilizes subcontractors acting on behalf of the controller in the processing of personal data.

3.Basis for Data Collection and Processing

Customer data is collected and processed with the customer's consent, or to fulfill a contract with the customer.

The legal bases for processing personal data under the General Data Protection Regulation (GDPR) are as follows:

The data subject has given consent to the processing of their personal data for one or more specific purposes (GDPR Article 6.1.a).
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (GDPR Article 6.1.b).
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (GDPR Article 6.1.f).
The legitimate interest of the controller is based on a relevant and appropriate relationship between the data subject and the controller, which arises as a result of the data subject being a customer of the controller, and when the processing takes place for purposes that the data subject could reasonably expect at the time of data collection and in the context of the appropriate relationship.

4.Register Content

What we collect: Contact forms and call request forms.

The register contains the following personal data from all registered individuals:

• Basic information and contact details of the individual: [first name, last name, phone number, email address];
• Direct marketing permissions and bans for the individual.

5.Data Retention Period

The data collected in the register is retained only for as long and to the extent necessary in relation to the original or compatible purposes for which the personal data was collected, or for the development of customer service.
The need for retaining personal data is assessed approximately once a year, and in any case, the information concerning the registered individual is deleted from the register after the customer relationship between the registered individual and the controller has ended, and the obligations and measures related to the customer relationship have been completed.
The controller regularly assesses the necessity of retaining the data according to their internal code of conduct. In addition, the controller takes all possible reasonable measures to ensure that inaccurate, erroneous, or outdated personal data are promptly deleted or corrected in relation to the purposes of processing.

6.Regular Data Sources

Personal data is collected from the registered individual themselves.
Personal data is also collected and updated within the limits of applicable legislation from publicly available sources related to the implementation of the customer relationship between the controller and the registered individual. These sources help the controller fulfill their obligations related to maintaining customer relationships.
Information is also collected through the Google Analytics analytics tool, within the limits allowed by the authorities maintaining the registers (e.g., ytj.fi).

7.Regular Disclosures of Data and Transfer of Data Outside the EU or European Economic Area

Data is not routinely disclosed outside the company. Some of the external service or software providers used by the company may store data outside the EU or European Economic Area.

8.Use of Cookies

We use the so-called cookie function, or cookies, on our website. A cookie is a small text file sent to the user's computer and stored there, allowing the website administrator to identify frequent visitors to the site, facilitate the login of visitors to the site, and enable the compilation of aggregate data about visitors. This feedback helps us constantly improve the content of our pages. Cookies do not harm users' computers or files. We use them to provide our customers with information and services tailored to their individual needs.
If a user visiting our site does not want us to obtain the above information through cookies, most browser programs allow the disabling of cookie functions. This is usually done through the browser settings. However, it is worth noting that cookies may be necessary for the proper functioning of some of the pages we maintain and the services we provide.

9.Register Security

Data is transmitted over an SSL-protected connection. Electronic data is protected by a firewall, usernames, and passwords. Access to the data is only granted to those individuals in the employ of the controller who need the information for their tasks.

10.Automated Decision Making

Automated individual decisions (Article 22 of the EU Data Protection Regulation) are not made.

11.Rights of the Data Subject

The data subject has the right to examine what information concerning them has been stored in the personal data register. A written request for examination must be sent, signed, to the person responsible for registry matters.
The right to examination is free of charge, implemented no more than once a year.
The data subject has the right to request the correction or deletion of incorrect or outdated information, or the transfer of data from one system to another. They also have the right to restrict or object to the processing of their data in accordance with Articles 18 and 21 of the EU Data Protection Regulation.
The data subject has the right to withdraw any consent given for the processing of data or to make a complaint about matters related to the processing of their personal data to the supervisory authority.
The data subject also has the right to prohibit the use of their data for direct marketing purposes.

12.Web Analytics

The following services collect anonymized information about visits to the site without personal data: Google Analytics, Tilda Analytics.

13.Targeted Marketing

Based on visits to the site, we may conduct targeted advertising in the following services: Facebook, Google Ads.