Privacy policy

Loval Oy Data Controller Privacy Policy 31.12.2024

This policy, in accordance with the EU General Data Protection Regulation (GDPR), describes how and for what purposes Loval Oy processes personal data in its capacity as a data controller.

The processing of data complies with applicable laws and good data processing practices.
Loval Oy reserves the right to amend and update this privacy policy.

• Data controller
  Loval Oy FI069409309
  Linnunrata 4, 07900 Loviisa
  +358 (0) 19 51 731
  [email protected]
• Contact
  Loval Oy
  Linnunrata 4, 07900 Loviisa
  +358 (0) 19 51 731
  [email protected]

• Registers

Business relationship registers
Customer and supplier registers.
Communication registers
Registers in email, instant messaging and telephone systems.
Access control registers
Registers in various property access control systems for areas of ​​Loval Oy.
Employee registers
Registers in the employer's payroll systems.
Registers in the employer's earnings-related pension systems.
Registers in the employer's occupational health systems.
Registers in the employer's accident insurance systems.
Registers in the employer's voluntary well-being systems.
Registers in the employer's business management and development systems.

• Legal basis and purpose of processing personal data

Data processing is in the legitimate interest of the data controller, by legal obligation, contract or user consent.

The purpose of data processing

Business development, marketing, and maintenance of business relationships.
Maintain communication between stakeholders, employees or authorities.
Ensure appropriate and safe access within the Loval Oy site(s).
Payment of wages, taxes, pension, insurance contributions and fulfillment of other statutory obligations.
Payment of voluntary well-being benefits.
Development of Loval Oy's business and personnel.

• Data content of the register

The information content of the above-mentioned registers is to the extent that is justified according to the purpose of use of the register.

Business relationship and communication registers may include a person's name, email address, telephone number, a message related to the contact, and the time of contact.

Access control registers may include a person’s name or similar identifier, as well as the time stamp and location in the property area of ​​Loval Oy. In addition, the access control register stores surveillance camera images of persons and vehicles moving in the area in question.

Registers maintained for the payment of wages and statutory obligations contain personal data to the extent that is determined by the legislation and authorities.

Voluntary benefit and welfare systems contain personal data that has been accumulated through an agreement, consent or the person's own activity.

Other enterprise resource planning and development system registers may include a person's name or identifier, and the time of the event. Part of the registers contain information related to the management of the job or occupation.

• Regular disclosure of data and transfer of data outside the EU or EEA

Data is not regularly disclosed to other parties or transferred outside the EU or EEA. Data (IP address) may be processed outside the EU or EEA (Google Analytics USA) if the website user accepts this in the cookie settings.

• Data retention period

We retain the data provided for as long as it is appropriate as described above. In addition, there may be a system-specific compelling reason for retaining the data.

We retain the data in accordance with the requirements of the legislation in force at any given time.

• Data protection

The provided data is adequately protected in a secure online environment. Data processing is task-specific and limited only to the intended use on a task-by-task basis.

• Individual rights

Any person who has dealt with Loval Oy may request a copy of what kind of personal data has been collected and how that information is processed.

Any person who has dealt with Loval Oy has the right to request correction, completion or deletion of the data collected. The data will be deleted unless there is a legal obligation or compelling reason to retain it.

• Other rights related to the processing of personal data

This privacy policy may be amended whenever business or laws and regulations require it. This website always has an up-to-date statement.