Privacy statement

Document created on 19 December 2023

  1. Controller

PunaMusta Media Oyj
Business ID 0214720-9, as well as any companies belonging to the same group at any given time (hereinafter PunaMusta Media Oyj or the Controller)

Postal address PL 99, FI-80141 Joensuu, Finland
Visiting address Kosti Aaltosen tie 9, FI-80140 Joensuu, Finland

  1. Contact details for the privacy statement
Tel. +358 10 230 8000 (switchboard)

  1. Processing of personal data

PunaMusta Media Oyj processes personal data for the following purposes:
– management of customer and stakeholder relationships
– production and development of products and services
– marketing, sales and customer communication
– development, analysis and reporting
– surveys

To continually improve our customer service, we record customer calls.

  1. Reasons for processing personal data

PunaMusta Media Oyj processes personal data based on consent, contracts, legitimate interest or in order to comply with a legal obligation.

The legal basis for the processing of personal data lies in the following points of Article 6 of the EU General Data Protection Regulation:

  1. (a) the data subject has given their consent to the processing of their personal data for one or more specific purposes;
  2. (b) the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures at the request of the data subject;
  3. (c) the processing is necessary for compliance with a legal obligation of the Controller; and
  4. (f) processing is necessary for the purposes of the legitimate interests of the Controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Personal data is stored for as long as necessary for the purpose of collecting them, taking into account the retention periods required by legislation, such as the Consumer Protection Act (38/1978), the Accounting Act (1336/1997) and the act on tax prepayments (1118/1996).

  1. Data contents of registers

The types of data processed by PunaMusta Media Oyj include basic information, such as name and contact details, as well as direct marketing choices and purchase and order information, such as order history, customer communications in all channels and information related to the use of digital services.

Additional information about company representatives is also processed, such as their title, position or job description, and, for example, information related to their participation in an event organised by Punamusta Media or a company belonging to the same group.

In addition, information may be processed about campaigns targeted at a data subject added to the personal data register, the functioning of their email, the opening of emails and clicking on links sent by PunaMusta Media Oyj and companies belonging to the same group at any given time, as well as interest and profiling information on topics such as products or services of interest to the data subject, segment information, cookie and usage information, and other information.

  1. Sources from which personal data is collected

PunaMusta Media Oyj collects personal data directly from customers at the beginning of the customer relationship and during its duration. In addition, the customer may update their personal data through digital services.

Personal data and their updates are also obtained from companies that provide them, as well as from authorities and organizations that provide services such as personal and credit information acquisition and updating. Personal data is also collected by means such as competition entries and marketing automation, as well as from external data sources. In addition, personal data and updates to it is collected from public directories and other public sources of information, such as companies’ websites and social media channels, and from colleagues of company representatives.

  1. Cookies

To monitor the use of the content of the services, cookies may be transferred to the user’s computer from time to time. Cookies are used to collect data about how and when services are used. With the help of the data, the services are further developed to better serve the user. . The user can prevent the storage of cookies other than those necessary for the functioning of the service on their computer, but in this case the user cannot fully benefit from the online services provided by PunaMusta Media Oyj.

With the help of cookies, PunaMusta Media Oyj can find out information such as whether its marketing emails have been opened and whether the links in an email have been clicked. PunaMusta Media Oyj may also use commercial cookies, which can be used to target group marketing on external websites depending on what content the user has searched for and what pages they have viewed, among other things. These cookies are set on the user’s browser by a third party acting as a collaboration partner of the group. Social media cookies are also used in targeting advertising.

With the help of cookies and similar technologies, advertising can be targeted based on the user’s interests. Cookies also allow the system to identify whether a user has seen an ad before, so that the same ads are not shown to the same user over and over again. In addition, their purpose is to enable the targeting of content and marketing that likely interests the user by retargeting, among other means.

The user can prevent targeted marketing based on their browser history in the consent settings concerning personalised service in their browser. After opting out of targeted advertising, the user will continue to receive ads, but they will not be targeted to the user in terms of content. Browser-based targeted advertising must be disabled separately on each browser used by the user.

The data collected by cookies does not allow identifying individual users. For more information on user-targeted advertising, visit the Your Online Choices website.

  1. Possible disclosure of data

PunaMusta Media Oyj does not disclose customer data to parties outside the group, except for the statutory disclosure of data to the authorities and the cases mentioned in this statement. In case of criminal offences, PunaMusta Media Oyj may disclose data to the authorities when the authority presents a substantiated request for this. PunaMusta Media Oyj does not disclose, sell or otherwise make available your personal data to third parties, unless otherwise stated below.

The data may be shared with the subcontractors of PunaMusta Media Oyj and companies belonging to the same group at any given time for purposes such as producing various services, distributing magazines and implementing direct marketing campaigns. Personal data may be shared with third parties performing services for our group (e.g. customer service, marketing, software services, research, event production, collection), i.e. data processors. Third parties are allowed to use the data only for the provision of such services to PunaMusta Media Oyj, in accordance with this privacy statement and applicable legislation.

Individual PunaMusta Media companies act as joint controllers with Facebook when they maintain a page on Facebook. For more information on the processing of personal data, please see Facebook’s Privacy Centre. Data is collected on factors including Facebook page likes and visits, visibility of posts, and demographic profiles of the people reached by posts.

If we transfer data outside the EU/EEA, we will always ensure that the transfer takes place using data transfer mechanisms permitted by law, such as the EU Standard Contractual Clauses.

  1. Principles of register protection

The information systems in which the data in the register is stored are protected by firewalls, passwords and other technical means. The data is processed only by those employees of PunaMusta Media Oyj or companies belonging to the same group at any given time who are entitled to do so in their work. Users of the register have personal usernames and passwords.

Manually processed documents containing data of data subjects are stored in locked premises in such a way that unauthorised persons are prevented from accessing them.

When transferring personal data, we always use a secure method.

  1. Right of inspection, right to erasure

The customer has the right to inspect and rectify their data stored in PunaMusta Media Oyj’s information systems by contacting the group’s industry-specific customer service.

The data subject has the right to prohibit PunaMusta Media Oyj from processing data concerning them for the purposes of direct advertising and market and opinion research.

In accordance with the Data Protection Regulation, the data subject has the right to object to or request the restriction of the processing of their data and to lodge a complaint with a supervisory authority regarding the processing of their personal data.

The customer also has the right to request the deletion of their data if the following criteria are met:
– the personal data are no longer needed for the purposes for which they were processed
– the customer withdraws their consent to the processing of their personal data and there is no other legal basis for the processing.

Existing legislation or other official reasons may prevent the deletion of data.

  1. Updating the privacy policy

PunaMusta Media Oyj will amend the privacy statement if necessary, especially when services are being developed. When the privacy policy has been amended, the latest revision date can be found at the top of the privacy policy.