Privacy Policy

This document describes how we process the personal data of users of this site and users of services provided by Rester Oy.

Rester’s Privacy Statements:

A. Rester Privacy Statement for website

B. Rester Privacy Statement – Recruitment and job applicants’ personal data

C. Privacy Statement for  Rester B2B Customers and Partners Data File

D. Rester Oy Privacy Statement report and monitoring

A. Rester Privacy Statement for website

Drafted on 23.2.2022

This document describes the processing of personal data of users visiting the website and users of the services provided by Rester Oy.

Other third-party sites that may be accessed through links on the Registrar’s site will comply with the privacy statements provided by the administrator of that site. Users are encouraged to read these privacy notices before using third-party sites.‍

A1. Data controllers and contact information in register matters

Rester Oy (Business ID 3005880-1) registered offices: Jukantie 9, 21530 Paimio.

Contact information on personal data related issues:  Joachim Colliander (joachim@rester.fi).

A2. What is the purpose and legal basis for processing your personal information?

Personal data is collected and processed for the following purposes:

(1) to provide and implement the products and services requested by the user and to respond to requests made (e.g., when responding to user inquiries or placing an order for Rester productions or services by a user of the Site). In addition, we use personal information for other communications with our customer and partners.

(2) for marketing purposes, by sending e-mails or commercial offers or information about our products and services or events organized by e-mail or regular mail (if the user provides their address).

Processing may mean one or more of the following:

collecting, storing, organizing, registering, examining, storing, processing, modifying, selecting, using or deleting data.

The disclosure of personal information is voluntary and their processing by Rester is based on the data subject’s consent to the processing of personal data.

However, providing this information is essential if you wish to use Rester e-commerce or solicitation system. In addition, the provision of information marked as necessary in connection with a contact request (e.g contact information such as name and e-mail address) is necessary if the user requires that their message be answered. Depending on the requests sent by the user, Rester may also need additional information. Providing this additional information is optional, but if no additional information is provided, it may be difficult or impossible for Rester to respond the user requests.

If the user wishes to subscribe to the newsletter and /or receive commercial contact, it is necessary to provide an e-mail address.

The provision of user information via the website is done by filling in the user information requested there in the contact form or by providing the necessary information in the online store in order to place and order. Information may also be provided by telephone, appointment or e-mail for the provisions of products and services and the conclusion of contract.

If the user has consented to the processing or her data also for marketing purposes, such data may also be processed for the purpose of conducting statistical, opinion and market research on Rester services.

A3. Recipients of personal data

The personal data provided by the user in connection with the use of the e-commerce or the contact request is automatically stored in the system maintained by Rester. Information provided by telephone or e-mail is stored in the Rester system by designated employee. For the purposes set out above, the information will be processed by Rester’s administrative and commercial staff, as well as by companies providing data processing and other services to Rester and their staff (e.g. e-marketing, website maintenance and management services). Rester has entered into agreements with third partied for the processing of personal data as required by the EU Data Protection Regulation. In addition, Rester may disclose information to its partners if the fulfillment of the customer’s request, order or agreement so requires.

Information received and processed shall not be disclosed to third parties, except in the case of information which cannot be combined with an individual or where the disclosure is required by law or regulation. In addition, data may be processed and transferred in the context of corporate arrangements (such as business transfers, mergers or divisions)

Personal information is stored on the server of Rester or its service provider, which is protected by confidentiality, passwords and necessary technical measures. Personal information will be treated confidentially and only by employees whose job description in includes and who are committed to complying with confidentiality regulations and the data protection procedures required by Rester.

The data will not be disclosed outside the EU or the EEA.

A4. Privacy Statement

Personal information is stored on the server of Rester or its service provider, which is protected by confidentiality, passwords and necessary technical measures. The purpose of Rester is to minimize the risks of data destruction, loss, unauthorized processing, access or misuse. However, users should be aware that there are always data protection risks when using the internet. Complete data security cannot be guaranteed.

A5. How long we process information and additional info

The retention period of the data of persons registered in the Rester’s service is determined according to their purpose. If the disclosure of information through the website results in a contractual relationship with Rester, the law applicable to the retention of personal information in such cases (such as the Accounting Act) will apply.

Data subjects have the right to inspect the data stored in the data file of themselves and to demand rectification and deletion of incorrect information. Such requests should be submitted in writing to the contact person of this data file mentioned in point 1. However, the data subject should be aware that not all requests can be accepted due to legislation binding on the controller. In that case, the data subject shall be informed of the reasons for the refusal upon request.

The data subject has the right to withdraw consent to the processing of personal data, but this does not affect the lawfulness of the processing carried out before the withdrawal of the consent. The registrant may also individually object to the use of data for direct marketing, which does not otherwise affect the use of Rester services.

The data subject also has the right to lodge a complaint concerning the processing with supervisory authority, which is the Data Protection Commissioner in Finland (Office of the Data Protection Commissioner, Ratapihantie 9, 00520 Helsinki or tietosuoja@om.fi).

The provision of personal information is not based on a statutory requirement. However, providing the information requested in the Rester ordering system is a prerequisite for you to be able to enter into an agreement with Rester an order the product or service you want. The information provided is not used for decision making, such as profiling.

Please note that Rester may change this Privacy Statement and we encourage you to review the information we provide from time to time.

A6. Updated to Privacy Statement

Information on Internet use

The information systems and programs used to operate the Site collect some personal information, the transmission of which is the part of the internet’s communication protocols. These include, for example, the IP or domain address of the computers of users who visit the site, and the Uniform Resources Identifier (URI) of the requested resources. In addition, information systems and programs can collect information from the server about the timing of requests, request methods, the size of files received in response, numeric codes that determine the status of server response (complete, error, etc.), and other parameters related to the user’s operating system and network.

This information is not collected or used to identify the user, but by its nature, user identification may be possible by processing and combining this information with information managed by third parties.

Rester only uses this information for anonymous statistics on the use of the site and to ensure the proper functioning of the site.

Such information may also be used to investigate security or other crimes against the Site. In cases other than criminal investigations, the contact information on the site will be deleted immediately after processing or within seven days at the latest.

Cookies

In some cases, Rester collects personal information using a variety of technologies, including cookies. Cookies consist of information sent by a website to a browser (which may be your own browser). This information can be stored on a computer (which can be our own computer) with identifiers that can identify the computer but not the user. The use of cookies requires your consent. The use of cookies is based on your consent, it the settings of the browser you use have been made in such a way that you must separately accept the use of cookies.

Some pages on the Site use cookies sent by Rester or third parties, as well as other technologies designed to enable the Site to function and improve its usability, as well as to investigate the use of the Site statistically.

B. Rester Privacy Statement – Recruitment and job applicants’ personal data

Drafted on 23.2.2022

We at Rester respect your privacy and are committed to protect your personal data. The purpose of this Privacy Statement is to provide information to you about personal data processing activities of job applicants. Our Privacy Statement presents the rights according to EU’s general data protection regulation (GDPR).

B1. Data controllers and contact information in register matters

Rester Oy (Business ID 3005880-1) registered offices Jukantie 9, 21530 Paimio.

Contact information on personal data related issues:  Joachim Colliander (joachim@rester.fi).

B2. What is the purpose and legal basis for processing your personal information?

The purpose of processing personal data is to recruit personnel, planning, managing and evaluating of the recruitment process. The legal basis for processing personal information is our legitimate interest based on a job application and recruitment process. We also might request you consent when collecting information from references. Rester process personal information of applicants only to extent it is required to recruit for the concerned office.

B3. What type of information is collected and where do we collect data from?

We collect and process following personal data which are necessary for us to run our recruitment process and relevant for the job opening in question:

Basic information

Information regarding the recruitment process

Primarily we collect personal data from you or based on your consent received from references or tests. Other information includes data related to a recruitment process. Other sources of information are used within the limits allowed by the applicable legislation.

B4. How your personal information is protected and how long we process information?

Information received and processed shall not be disclosed to third parties, except in the case of information which cannot be combined with an individual or where the disclosure is required by law or regulation. In addition, data may be processed and transferred in the context of corporate arrangements (such as business transfers, mergers or divisions)

Personal information is stored on the server of Rester or its service provider, which is protected by confidentiality, passwords and necessary technical measures. Personal information will be treated confidentially and only by employees whose job description in includes and who are committed to complying with confidentiality regulations and the data protection procedures required by Rester. The data will not be disclosed outside the EU or the EEA.

B5. Your rights as a data subject

As a data subject you have the following rights related to the applicable data protection laws:

Right to access, rectification and erasure

You have a right to inspect the personal data concerning yourself, which is stored in the register, and a right to require rectification or erasure of your data.

Withdrawal of a consent

When the processing of information is subject to your consent, you may withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of processing before the withdrawal of the consent. Withdrawals can be made by requesting withdrawal from Outi Luukko (outi@rester.fi).

Right to lodge a complaint with a supervisory authority

If you consider that the processing of personal data relating to you infringes the data protection regulation, you have the right to lodge a complaint with a competent supervisory authority. You may lodge a complaint with a competent supervisory authority. You may lodge your complaint in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

Other rights

You have also the right to object processing or request restricting processing. You may also request the personal data collected based on your consent and provided by you to be transmitted to another controller in a case where the data is in machine-readable and transferable format.

B7. Updated to Privacy Statement

Rester drives to develop continuously its business and data protection tools and reserves the right to amend this Privacy Statement. When required by applicable laws Rester may contact you in order to provide information about updates of changes that may have effects on you.

C. Privacy Statement for  Rester B2B Customers and Partners Data File

Drafted on 23.2.2022

This document describes the processing of personal data of users of the services provides by Rester Oy.

C1. Data controllers and contact information in register matters

Rester Oy (Business ID 3005880-1) registered offices: Jukantie 9, 21530 Paimio and Kiviaidankatu 2 B, 00210 Helsinki.

Contact information on personal data related issues:  Outi Luukko (outi@rester.fi).

C2. What is the purpose and legal basis for processing your personal information?

Grounds for processing personal data is based on legitimate interest of the data controller; practicing of our business operation, managing, developing and analyzing of our B2B customer and partner relationship and direct marketing.

C3. Content of data file and group of the data subjects

The data file contains benefits, services and campaigns targeted to the data subjects and information on the usage of them, communication and actions related to the customer relationship or on other pertinent connection. The data file also contains the following personal data of the contact persons and persons in dominant position of the B2B customers and partners.

Identification data:

Name, company, title/position, postal address, email, telephone number

The data subjects are the B2B customers and partners of the data controller, such as IT-and other suppliers, PR and press contacts and potential B2B customers.

C4. Sources of information

The data is collected from the data subjects at the beginning and during of the customer or partner relationship or the pertinent connection.

Data (e.g. credit ratings/bad credit history of entrepreneurs and contact information of persons in dominant position in a company) is also purchased (not retained in our own registers) from companies providing such services and updates on the data are obtained from authorities, organizations and companies providing updates services, public registers and other sources.

C5. Disclosure and transfer of data outside the EU or the EEA area

Personal information is stored on the server of Rester or its service provider, which is protected by confidentiality, passwords and necessary technical measures. Personal information will be treated confidentially and only by employees whose job description in includes and who are committed to complying with confidentiality regulations and the data protection procedures required by Rester.

The data is retained as long as it is necessary for the purpose for processing personal data of this data file.

The data will not be disclosed outside the EU or the EEA.

C6. Rights of the data subject

Right to inspect data and right to demand the rectification of data

Data subjects have the right to inspect the data stored in the data file of themselves and to demand rectification and deletion of incorrect information. Such requests should be submitted in writing to the contact person of this data file mentioned in point 1. However, the data subject should be aware that not all requests can be accepted due to legislation binding on the controller. In that case, the data subject shall be informed of the reasons for the refusal upon request.

D. Rester Oy Privacy Statement report and monitoring

Drafted on 23.2.2022

This document describes the processing of personal data of users of the services provides by Rester Oy.

D1. Data controllers

Rester Oy (Business ID 3005880-1) registered offices: Jukantie 9, 21530 Paimio.

D2 . Contact person responsible for the register

Joachim Colliander (joachim@rester.fi)

Jukantie 9, 21530 Paimio

This is a reporting and monitoring form in accordance with Rester Oy’s Personal Data Act (10 ja 24§) and EU General Data Protection Regulation (GDPR). Prepared 23.2.2022.

Rester Oy’s personal data in electronic form is protected by generally accepted means, such as firewalls and passwords. Only identified employees of the controller and the companies acting on its behalf and for its account shall have access to the personal data with the right of access granted by the controller.

Rester Oy’s personal data is documented and sorted in accordance with the data protection regulation.

Customer registers for marketing held by Rester Oy:

• Customer register: newsletter ”tilaajat kaikki” (eng. subscribers all)

• Customer register: media (eng. media)