REGISTER AND DATA PROTECTION DESCRIPTION, CORE FACTORY LTD 25.05.2018

According to the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (GDPR)

Registrar

Core Factory Oy VAT-number 2263785-4 Valimotie 13 A, 00380 Helsinki info2020@corefactory.com

The purpose of processing personal data

This register is set up to manage a potential customer and service relationship (article 6, lawfulness of processing, b and f)

Data content of the register

The content of the register consists of potential customer’s company’s and contact person’s name and the contact information such as email address, and/or phone number and the company’s address. If the connection leads to a customer relationship, information on the services ordered, delivered and billed by the customer is added to the register.

Regular sources of information

The source for information is usually generated through Core Factory Ltd own activities. This includes the customers themselves (eg business cards, emails or telephone contacts), or as a result of the search of potential customers (eg, public registers such as Google, Finder and Fonecta).

Ordinary deliveries of information

Core Factory Ltd may, if necessary, disclose your information to our Accounting Office for any accounting and billing related tasks.

Data transfer outside the EU or EEA

Core Factory Ltd does not transfer data outside the EU or EEA.

Principles of registry protection

Core Factory Ltd handles all material mainly electronically. Temporarily required manual material is kept in locked state. Electronic data is protected from outsiders by using a firewall-based security program, as well as strong passwords. Only one shareholder of the company may process the data.

Registered rights

You have the right to request Core Factory Ltd to access your personal data and to request the rectification or removal of such information or limitation of the processing or to oppose the processing and the right to transfer data from one system to another. In addition, you have the right to revoke consent at any time without prejudice to the lawfulness of the processing before withdrawal if the processing is based on Article 6 (1) (a) or Article 9 (2) (a). You also have the right to file a complaint with the supervisory authority. For instructions, please see www.tietosuoja.fi (Article 13, 2b, c, d). You also have the right to be forgotten, so if you so wish, Core Factory Ltd will delete your information (Article 17). To use the above mentioned rights, please send email to info2020@corefactory.com. We will take action immediately, or at the latest within one month as the regulation request.

Retention of personal data

The information may be kept for archiving purposes in the name of public interest (Article 89). This way the registered who wishes to be forgotten won’t accidentally be re-connected if the registrant’s contact appears in some other context.