Marko Vainio
+ 358 20 776 8360
marko.vainio@cenmia.fi

3. Name of the register and data subjects
Cenmia customer register: We store and process the personal data of our customers, potential customers and their representatives in the register.

4. Intended use:
The data is used for customer service, customer communications and marketing. The basis for processing is, depending on the case, the legitimate interest based on the Company's purposes and, in the case of customers, the contractual relationship with the Company. The basis for sending electronic direct marketing messages is the consent of the data subject.

5. Content of the register
We may store the following information about registered persons:

• Name, address, email, phone number, title and possibly company contact information and industry.
• Information necessary for managing the customer relationship, requests for quotations, offers, purchased products, possible complaints and other necessary technical information.
  Internet behavior related information on our website.

6. Information sources
The collection of contact information is based on a customer relationship or contact with our company. The information is collected from the employer, the reseller in connection with a sales assignment or from the person themselves. Personal information may also be purchased from external parties for one-time marketing use.

7. Disclosure of information
The information will not be disclosed to third parties.

8. Data transfer outside the EU or EEA
Your data will not be transferred outside the EU or EEA.

9. Principles of data protection
The protection of the register and the retention period of personal data are valid for the duration of the customer relationship. After the termination of the customer relationship, personal data is processed in the same way as the personal data of a potential customer. Personal data may be retained for longer than this if applicable legislation or the Company's contractual obligations towards third parties require a longer retention period.

Personal data is stored confidentially and appropriately protected by technical means. Access to the data is limited to authorized company personnel and authorized IT specialists.

10. Rights of the data subject
The registered person has the right to object to the processing of personal data for marketing purposes.

The data subject has the right, in accordance with data protection legislation, to receive, among other things, the following information:

Check your personal data, correct incorrect data and request the deletion or restriction of personal data, if this is possible under the law. Before disclosing any information, we ask the data subject to verify their identity and specify their request. We may refuse the request on grounds provided for by law.

In addition, the data subject has the right, in accordance with applicable data protection legislation, at any time:

• to be informed about the processing of their personal data;
• to access their own information and to inspect the personal data concerning them processed by the Company;
• to demand the correction of inaccurate and incorrect personal data and the completion of data;
• request the deletion of their personal data;
• withdraw their consent and object to the processing of their personal data to the extent that the processing of personal data is based on the data subject's consent;
• object to the processing of their personal data on grounds relating to their particular personal situation to the extent that the processing of personal data is based on the Company's legitimate interest;
• receive their personal data in a machine-readable format and transmit that data to another controller, provided that the data subject has provided that personal data to the Company, the Company processes that personal data on the basis of a contract or the data subject's consent and the processing is carried out automatically; and
• demand restriction of the processing of their personal data.

The data subject has the right to lodge a complaint with the relevant supervisory authority if he or she considers that the Company has not processed personal data in accordance with applicable data protection legislation.

The data subject must send any communications regarding rights in writing.

Cenmia Oy, Personal Data Protection, Sepelitie 15, 40320 Jyväskylä

We will respond to the registrant within 4 weeks.

11. Updating the privacy policy
We reserve the right to update this privacy policy by notifying you.