Skanska Rakennuskone Oy’s Customer Register Privacy Policy

Register

Skanska Rakennuskone Oy’s customer register

Controller

Skanska Rakennuskone Oy (”Skanska”)
Hirvitie 5
01900 NURMIJÄRVI

Register’s contact person

Risto Makkonen
Hirvitie 5, 01900 NURMIJÄRVI
yritysturvallisuus@skanska.fi

Description of processing operations

Data in the register is collected to enable management of the data of potential customers or existing rental customers for marketing purposes, and for the fulfilment of contractual obligations.

Purposes of processing and its legal basis

The controller uses the information contained in the customer register:

  • To fulfill Skanska’s contractual obligations
  • To serve Skanska’s legitimate interests
  • To attend to Skanska’s legal obligations
  • On the basis of the data subject’s consent

Legitimate interest

The processing of data in the register is based on Skanska’s legitimate interest in marketing its products and developing its services for the following processing operations:

  • Collecting customer feedback
  • Customer relationship management and the related marketing

Consent

Processing of data in the register is based on separate consent for the following processing operations:

  • Delivery of electronic marketing material (marketing customers)
  • Credit checks

Sources of personal data

Data is mainly collected from the data subjects themselves, but also from the contractor’s representative via contracts/assignments between companies.

The collection of customer data is necessary to the fulfilment of Skanska’s contractual obligations. Providing information that is collected for marketing purposes and customer feedback is not mandatory for the data subject.

Groups of data subjects

  • Potential customers
  • Current customers (with a valid rental contract)

Categories of personal data

Skanska stores the following personal data about the data subject:

  • Last name and first name
  • Personal identification number (*From private customers) / Business ID (*Companies and business names)
  • Contact information
  • Credit reference
  • Customer history

Recipients or groups of recipients of personal data

We abide by laws, regulations and advice from the authorities in the transfer and disclosure of data. Data is transferred to third parties for the purpose of measuring customer satisfaction and conducting marketing activities. Data transfer, disclosures, and processing have been agreed on in the appropriate contracts.

International transfers and disclosure of personal data

Personal data is regularly transferred outside the EU and EEA for processing:

  • To India for maintaining the equipment rental system’s technical platform. Data transfer is based on a contract with the service provider.

Rights of the data subject

Data subjects have the following rights:

  • To know that their data is being collected and processed, as well as the purpose of that data
  • To know what data has been collected about them and how long it will be stored
  • To have any incorrect data corrected
  • To have their data erased if they so wish, i.e. the right to be forgotten if there is no basis for processing personal data
  • To restrict the processing of their data for specific purposes
  • To transfer data from one register to another, as applicable
  • To be informed of a data breach against the controller, if this poses a high risk to their rights and freedoms
  • To claim compensation for any damage caused to them by a data breach
  • To bring a complaint about the processing of personal data for review by data protection authorities

If you have any questions about how we process your personal data, or would like information and the contact information of the person responsible for data protection, or would like to exercise your rights, please contact yritysturvallisuus@skanska.fi.

Data security

The register is IT-based. Physical material is stored in a locked space and protected by access control.

Data stored in electronic form is protected by firewalls, usernames, passwords and other technical security measures.

Data access rights are defined and limited. The destruction of data is handled appropriately and carefully.

Retention periods for personal data

Skanska retains personal data in accordance with the law.

The data will only be stored for as long as necessary, or specified for the processing purposes identified in the Privacy Policy. In principle, data is stored for as long as the rental contract is valid. Data needed to send marketing messages is stored for as long as the registered person maintains a subscription to the newsletter or other electronic direct marketing. Customer feedback is stored in identifiable format for as long as necessary in any individual case. The retention period for individual feedback is determined by the potential follow-up and type of feedback. Personal data will be deleted when it is no longer necessary.