Aste Group Privacy Policy

Aste Helsinki Ltd is committed to protecting your privacy. This Privacy Policy applies to the processing of personal data of our customers, potential customers, partners and website users. This Privacy Policy explains more about this:

  • Who is the controller and what are its contact details
  • What kind of personal data we process and where the data is collected from
  • For what purposes do we use personal data and what is the legal basis for the processing?
  • How long we keep your data
  • How cookies are used on the website
  • What kind of influence do you have
  • Where data is transferred and disclosed
  • How data is protected
  • How we can make changes to the Privacy Policy

Please read the contents of this Privacy Policy. Please also note that our website may contain links to third party services. If you click on these links and access a third-party service, we invite you to read the privacy policy of that third-party service.

1. Who is the controller?

The data controller is the company within the Aste group with which the organisation you represent has a contract, cooperates, is in contact with you to market its services or whose website you visit.

You can find the data controllers and contact persons below:

2. What kind of data do we process and where is the data collected from?

We typically process the following data:

  • customer contact information, such as name, contact details, title and contact details, information about the organisation represented by the contact person, such as name, business ID, contact details and billing information, and information about the services purchased.
  • contact details of potential customers, such as name, contact details, title and details of the organisation represented by the contact person, such as name, business ID, contact details.
  • information on the contact persons of the partners, such as name, contact details, title and contact details, and information on the organisation represented by the contact person, such as name, business ID, contact details and billing information.
  • website visitors’ data, such as the name and contact details provided in the contact form, automatically collected log data and data collected by cookies describing the user’s terminal equipment and use of the website in accordance with section 5. You may also visit our website without providing any information that personally identifies you.

We obtain the data of our customers and partners from the data subject or the organisation he or she represents. For potential customers, we collect information from public sources, such as

from business registers, company websites or professional profiles such as LinkedIn, or through contacts made via websites.

We process data for the following purposes:

  • Service delivery: we process the information you provide to fulfil a contract we have with the organisation you represent. We will not be able to contact you in relation to the contract or bill you for our services without processing your personal data. This processing is based on a contractual relationship with the organisation you represent and our legitimate interest.
  • Marketing: we process your data for marketing purposes on the basis of our legitimate interest. Marketing, such as targeting advertising through cookies, may also be based on your consent.
  • Business development: we process your data to develop our business and services. This processing is based on our legitimate interest.
  • Ensuring data security and investigating misuse: we process data to ensure data security. From time to time, we may also need to use the data to prevent and investigate misuse. For example, automatically collected log data allows us to monitor and investigate the activities of the user of the information system and the legitimacy of the use of the data in accordance with our legitimate interest.
  • Safeguarding our rights: we may need to process personal data in order to bring or defend legal action or to resolve disputes primarily by amicable means. This processing is based on our legitimate interest.
  • To comply with legal obligations: we may be required to retain some of your personal data to comply with accounting or other mandatory legislation. In some cases, we may need to keep some of your personal data to comply with legal or regulatory obligations, in which case the processing is based on compliance with a legal obligation.

To the extent that the processing is based on legitimate interests, we consider the processing to be of benefit to both you and us. The processing of personal data enables us to provide you with relevant information about our contract or services. Given the nature and purpose of the data, we consider that the processing does not infringe your fundamental rights or freedoms. You may object to marketing at any time. You may object to other processing based on legitimate interests on grounds relating to your personal situation as described in section 6.

We do not make automated decisions that would have legal consequences or otherwise significantly affect you.

4. How long do we keep the data?

We will keep your personal data for as long as necessary to fulfil the purposes described above. The main retention periods are as follows:

  • the personal data of our customers’ and partners’ contact persons for the duration of the customer relationship and for a reasonable period after its termination, for customer relationship management and business development purposes, after which we use the data for marketing and to comply with legal obligations as described below;
  • for marketing purposes, we typically retain information about your name, title, employer and contact details for as long as it is up-to-date and accurate and you have not requested that it be deleted; and
  • any personal data contained in the supporting documents will be kept for approximately seven years to comply with accounting obligations.

Please note that we may retain information if it is necessary for the establishment, exercise or defence of legal claims.

5. How are cookies used on the website?

We may collect information about the user’s terminal device on our services through cookies and other similar technologies. A cookie is a small text file that is stored by the browser on the user’s terminal device. Cookies contain a unique, anonymous identifier that allows us to identify and count the number of browsers visiting our site.

Cookies do not move around the network on their own, but are only placed on the user’s terminal device with the website they visit. Only the server that sent the cookie can later read and use the cookie. Cookies or other technologies do not harm the user’s terminal equipment or files, nor can cookies be used to run programs or spread malware.

We use cookies to collect technical information about your terminal device and information about your use of our websites. This information includes, in addition to your unique cookie or mobile identifier, information about your device, such as device type, browser version, screen size, operating system, IP address, and information about your use of the online service, such as page loads, time and duration spent on the online service, and navigation or content viewed on the online service.

We may use session cookies, which expire when the user closes the browser, and persistent cookies, which remain on the user’s device for a certain period of time or until the user deletes them. Persistent cookies typically have a lifespan of a few months to a few years.

The so-called first-party cookies are set by the website displayed in the address bar. In addition to these, our website uses so-called third-party cookies, such as cookies from advertising technology providers.

We classify cookies according to their purpose as follows:

  • Necessary cookies: these cookies are necessary to use our services and their functions. These cookies are used to enable us to use our services and functions.
  • Analytical cookies: These cookies help us to gather information about how our websites are used. We use these cookies to collect information about the use of our websites, including the use of Google Analytics, a web analytics service provided by Google Inc. to analyse the use of our websites and to improve our websites to better serve our users. The information stored in the cookies used by Google’s tools is transmitted to Google for further storage on servers around the world. As a result, this information may be processed on servers located in countries other than the country where you live. Google uses this information to evaluate your browsing habits and to compile aggregated reports on website activity. In addition, Google will compile reports on the services provided in connection with the websites and produce statistics on internet usage. Google may also transfer data to third parties where required to do so by law, or where such third parties process the data on Google’s behalf.
  • Advertising cookies: these cookies are used to target advertising elsewhere on the internet. Advertising cookies are, by default, third-party cookies. Some of these third parties process data as independent data controllers, and you can find out more about their processing of personal data in their privacy policies. Google, for example, sets advertising cookies.

6. What kind of influence do you have?

To the extent permitted and required by law, we will exercise the rights described below:

  • Right of access: you have the right to obtain confirmation that personal data concerning you is or is not being processed. If your personal data is processed, you have the right to access the personal data, provided that the disclosure does not adversely affect the rights and freedoms of others.
  • Right to rectification and erasure: At your request, we will rectify or erase personal data that are inaccurate, incomplete or unnecessary for the purposes of processing. We will not delete data if it is necessary, for example, for the establishment, exercise or defence of legal claims.
  • Transfer of data: you may also opt to have the personal data you have provided, which we process automatically on the basis of consent or contract, transferred to you or to a third party in a machine-readable format.
  • Right to opt-out of direct marketing and related profiling: you may at any time object to the processing or disclosure of your data for direct marketing purposes.
  • Right to withdraw consent: you can withdraw your consent at any time.
  • Right of objection and restriction: you can object to processing based on a legitimate interest on grounds relating to your personal situation. For example, in such a situation, the processing will be restricted for the time needed to assess the grounds for objecting to the processing. Processing may also be limited, for example, if you contest the accuracy of the personal data, in which case processing will be limited for a period of time during which we can verify the accuracy of the data. If there is a substantial and legitimate ground for processing which overrides your rights or freedoms, or processing is necessary for the establishment, exercise or defence of legal claims, we will contact you to continue processing.
  • Right to complain: you can lodge a complaint with a public authority if your personal data has been processed in breach of this Privacy Policy and the applicable law. The contact details of the supervisory authority, the Data Protection Ombudsman, can be found at: https://tietosuoja.fi. The contact details of Traficom, the supervisory authority for the use of cookies, can be found at: www.traficom.fi.

To exercise the rights described above, please contact us at the address in section 1. We will ask you to verify your identity so that we can ensure that we do not disclose information to anyone other than the data subject himself/herself.

You can influence cookies in the following ways:

  • Deleting cookies: you can delete or clear cookies in your browser settings.
  • Block cookies: You can block cookies in your browser settings. Blocking cookies may affect the functionality of our services or prevent you from using our services, such as the login or shopping cart functionality.
  • Blocking Google Analytics: you can block Google Analytics from accessing your website by installing the Google Analytics blocking browser add-on at: https://tools.google.com/dlpage/gaoptout/. This add-on prevents Google Analytics JavaScript (ga.js, analytics.js and dc.js) running on websites from sharing site visit data with Google Analytics.

7. Where is the data transferred and disclosed?

We use subcontractors to process your data, and we have contractual arrangements in place to ensure that the data is processed in accordance with the applicable legislation. Where we transfer data outside the EU or EEA, we ensure an adequate level of protection of personal data, including by agreeing on confidentiality and processing issues as required by law, such as using EU standard contractual clauses.

We do not disclose information to third parties for their own independent purposes, in principle, except in the cases mentioned below:

  • Authorities: we may disclose personal data as required by the competent authorities, in accordance with the law in force from time to time.
  • Mergers and acquisitions: if we sell, merge or otherwise reorganise our business, personal data may be disclosed to buyers and their advisors.
  • Collection and claims: we may disclose your information to our selected partners for the purpose of collecting our claims and for the presentation and defence of legal claims.
  • Consent: with your consent, we may disclose your personal data to our selected partners.

8. How is the data protected?

We use appropriate technical and organisational security measures to protect personal data against unauthorised processing. These include the use of firewalls and encryption technologies, appropriate access controls, limited access rights, training of staff involved in the processing of personal data and careful selection of subcontractors.

9. Can changes be made to this privacy policy?

We are constantly developing our services and may change this Privacy Policy. Changes may also be based on changes in legislation or regulatory guidance. We encourage you to review the contents of this Privacy Policy regularly.

This Privacy Policy was last updated on 1.11.2022.