Updated 20.12.2022
1. Data controller
St Michel Print Oy
Business ID 1788344-4
Teollisuuskatu 2-6
50130 Mikkeli
2. Contact information regarding our data protection policy
leea.hamalainen @ stmichelprint.fi
3. Processing personal data
St Michel Print processes personal data for the following purposes:
– managing customer and stakeholder relationships
– for producing and developing products and services
– for marketing, sales and customer communication
– for development, analysis and reporting
– for research
4. Bases for processing personal data
St Michel Print Oy processes personal data based on consent, contract, legitimate interest or to fulfill a legal obligation.
The legal basis for the processing of personal data is the subsections of Article 6 of the EU Data Protection Regulation:
a) the data subject has given his consent to the processing of his personal data for one or more specific purposes;
b) the processing is necessary for the implementation of an agreement to which the data subject is a party, or for the implementation of measures prior to the conclusion of the agreement at the request of the data subject;
c) processing is necessary to comply with the Controller’s statutory obligation; and
f) the processing is necessary for the realization of the legitimate interests of the controller or a third party, except when the interests of the data subject requiring the protection of personal data or fundamental rights and freedoms supersede such interests, especially if the data subject is a child.
5. Data content
The data processed by St Michel Print is basic information, such as name and contact information as well as direct marketing choices and purchase and order information such as order history, customer communication in all channels and information related to the use of digital services.
Additional information about company representatives is processed, such as title, position or job description.
In addition, information can be processed about campaigns targeted at the person registered in the personal register, the functionality of their e-mail, the opening of e-mails sent by St Michel Print at any given time and the clicking of links, interest and profiling information, for example, about products or services of interest to the registrant, segment information, cookie and usage data, and other information.
6. Obtaining the data
St Michel Print Oy collects personal data directly from customers at the beginning of the customer relationship and during the duration of the customer relationship. In addition, the customer can update their personal data through digital services.
Personal data and their updates are also obtained from companies that provide them, as well as authorities and organizations that offer, for example, personal and credit data acquisition and updating services. Personal data is also collected e.g. through competition participations and marketing automation and from external data sources. In addition, personal data and their updates are also collected from public directories and other public data sources, such as company websites and social media channels and from colleagues of company representatives.
7. Cookie policy
In order to monitor the use of the content of the services, so-called cookies may be transferred to the user’s computer from time to time. Cookies are used to collect information about how and when the services are used. With the help of information, the services are further developed to better serve the user. The user can prevent cookies from being stored on their computer, but in this case the user cannot fully utilize the online services offered by St Michel Print Oy.
The information collected by cookies does not identify an individual user.
8. Possible disclosures of data
St Michel Print Oy does not release customer data to parties outside the group, excluding statutory data releases to authorities and the cases mentioned in this report. In criminal cases, St Michel Print Oy can hand over information to the authorities when the authority presents a reasoned request for this. St Michel Print Oy does not give, sell or otherwise disclose your personal data to external parties, unless otherwise stated below.
Information can be shared with subcontractors of St Michel Print Oy and with third parties performing services for us at any given time. Third parties are allowed to use the information only to provide the relevant services to St Michel Print Oy, in accordance with this privacy statement and applicable legislation.
If we transfer data outside the EU/EEA area, we always ensure that the transfer takes place using data transfer mechanisms permitted by legislation, such as EU model contract clauses.
9. Principles of securing the data
The information systems in which the register’s data is stored are protected by firewalls, passwords and other technical means. The data is processed only by those employed by St Michel Print at any given time, who have the right to do so due to their work. Register users have personal usernames and passwords.
Manually processed documents containing registered data are stored in locked rooms so that unauthorized persons are prevented from accessing them.
When transferring personal data, we always use a secure method.
10. Right to check and delete data on the register
The customer has the right to check and correct their data stored in St Michel Print Oy’s information systems by contacting the company’s customer service.
The registered person has the right to prohibit St Michel Print from processing information about him for direct advertising and market and opinion research.
In accordance with the data protection regulation, the data subject has the right to object to or request the restriction of the processing of his data and to file a complaint about the processing of personal data with the supervisory authority.
The customer also has the right to request the deletion of their data if the following criteria are met:
– personal data is no longer needed for the purposes for which it was processed
– the customer withdraws his consent to the processing of his own personal data, and there is no other legal basis for the processing
Current legislation or other official grounds may prevent data from being deleted.
11. Updating the data protection policy
St Michel Print Oy changes the data protection statement when necessary, especially when services are being developed. When the privacy policy has been changed, the latest change date can be found at the top of the privacy policy.