Converting
paper since

1. Data controller

Name: Kassatieto Oy

Company registration number: 2110272-7

Address: Sellukatu 22,

Postcode: 33400

Postal town: Tampere

Telephone number: +358 45 7731 2021

Email address: sales@hankifinland.com

2. Purpose of the register

The website processes personal data for the following purposes:

• to analyse website traffic and improve the website and its content;
• to measure the performance of the website;
• to display and measure marketing and advertising where the visitor has given consent to marketing cookies;
• to ensure the technical functionality and security of the website.

3. Basis for data collection and processing

Customer data is collected and processed with the customer’s consent, or for the purpose of fulfilling a contract based on the user’s consent for analytics and marketing cookies; and based on the data controller’s legitimate interest for strictly necessary cookies required for the operation and security of the website

4. Data content of the register

The website may process the following information through cookies and similar technologies:

• IP address (where applicable, in shortened or anonymised form)
• browser type and version
• device type and operating system
• pages visited and time spent on the website
• referral source
• approximate location based on IP address
• cookie identifiers and online identifiers.

5. Data retention period

Analytics and marketing data is retained only for as long as necessary for the purposes described in this policy and according to the retention periods configured in the respective services.

6. Regular sources of data

Personal data is collected automatically when users visit the website through cookies and similar technologies. The website uses Google Analytics and, where consent has been given, marketing cookies provided by third-party advertising services.

7. Regular disclosure of data and transfer of data outside the EU or the European Economic Area

Data is not routinely disclosed outside the company. Some of the external service or software providers used by the company may store data outside the EU or the European Economic Area.

Some of the third-party service providers used on this website, such as Google, may process personal data outside the European Economic Area. Where such transfers occur, appropriate safeguards are applied in accordance with the GDPR, such as the European Commission’s Standard Contractual Clauses.

8. Use of cookies

We use so-called cookies on our website. A cookie is a small text file sent to and stored on the user’s computer, which enables the website operator to recognise frequent visitors, facilitate user login, and compile aggregate data about visitors. This feedback enables us to continuously improve the content of our website. Cookies do not harm users’ computers or files. We use them to provide our customers with information and services tailored to their individual needs.

If a user visiting our website does not wish us to obtain the aforementioned information via cookies, most web browsers allow the cookie function to be disabled. This is usually done via the browser settings.

However, it is worth noting that cookies may be necessary for the proper functioning of some of the pages we maintain and the services we provide.

The website uses necessary cookies as well as analytics and marketing cookies.

Analytics and marketing cookies are used only after the visitor has given their consent through the cookie banner.

Users may change or withdraw their consent at any time via the cookie settings available on the website.

9. Data protection

Data is transferred via an SSL-secured connection.

Electronic data is protected by a firewall, usernames and passwords.

Access to the data is restricted to those persons employed by the data controller who require the data for the performance of their duties.

10. Automated decision-making

No automated individual decisions (Article 22 of the EU General Data Protection Regulation) are made.

11. Rights of the data subject

The data subject has the right to check what data concerning them has been stored in the personal data register. A signed written request for access must be sent to the person responsible for register matters.

The right of access is free of charge when exercised no more than once a year.

The data subject has the right to request the rectification or erasure of inaccurate or outdated data, or the transfer of data from one system to another. They also have the right to restrict or object to the processing of their data in accordance with Articles 18 and 21 of the EU General Data Protection Regulation.

The data subject has the right to withdraw their previously given consent to the processing of data or to lodge a complaint with a supervisory authority regarding matters relating to the processing of their personal data.

The data subject also has the right to object to the use of their data for direct marketing purposes.