Data Controller
Loimi-Hämeen Jätehuolto Oy (LHJ)
Business ID: 1027700-3
Kiimassuontie 127, 30420 Forssa
Tel. (03) 424 2600 (vaihde)
Contact person for matters concerning the register
Service Manager Anne Sjöberg, anne.sjoberg@lhj.fi, 050 567 5815
Data Protection Officer (DPO): Maaret Lahtinen, maaret.lahtinen@lhj.fi, 040 358 9038
Purpose of processing personal data
Loimi-Hämeen Jätehuolto Oy (hereinafter referred to in this document as the “Company”) provides waste management services that are the responsibility of municipalities under the Waste Act. The legal basis for processing is the contract formed with the customer.
Information about an online store customer is recorded based on the details provided by the customer when placing an order in the online store. The data is processed for the purposes of delivering orders, identifying customers, maintaining customer relationships, customer service, invoicing, and for business statistics and reporting.
The Company uses partners for service provision and customer relationship management. Customer data is transferred to the partner’s information systems and servers only to the extent necessary for providing the agreed services. Personal data is not disclosed to third parties except where necessary for service provision, and the processing of personal data is governed by separate agreements with partners or service providers.
Data is used to provide more personalized and accurately targeted content across various electronic services in order to improve the customer experience. Data may also be used for the development of the Company’s operations and service areas, as well as for statistical and reporting purposes.
Legitimate interest
Personal data related to customer relationships is processed for the purposes described above. Personal data is processed in the interests of the data subject, and such processing positively affects service delivery and the overall customer experience in all situations.
Customers may provide information concerning themselves or services that they consider necessary for managing the customer relationship. Such information is stored, maintained, and removed from the register upon the customer’s request.
In all personal data processing activities, the Company ensures stakeholder orientation, training, contractual arrangements, modern and up-to-date operational practices, and appropriate tools to guarantee a high standard of data protection and information security.
Consent
When placing an order in the online store, the customer provides consent for the processing of the information they have supplied. This information enables the use of services and the targeting of services to the customer. The customer may give or withdraw consent regarding different categories of information or methods of use.
Categories of personal data concerned
Name, postal address, email address, telephone number, vehicle registration number
Contents of the register
Information provided by the customer.
Regular sources of information
Information provided by the customer, information provided by the city/municipality, information from the Population Information System (Digital and Population Data Services Agency), decisions issued by the waste management authority or city/municipal authority, and information from the National Land Survey of Finland’s cadastral information service (Real Estate Information System).
Principles for protecting the register, manual data
Archived or retained manual records are stored by the Company in locked cabinets, rooms, or archives. Such material may only be handled by employees who have valid confidentiality agreements concerning personal data and information systems, as well as a processor’s commitment agreement. Archived materials are processed only when necessary for the relevant work task. Archive materials are destroyed in accordance with the records management plan.
Copies or electronic images may be made from manual records. These are destroyed appropriately after a reasonable period or once the material is no longer needed.
Manual records are created during customer service situations, as printouts, and in memoranda. Such material is necessary for individual customer service situations and is destroyed appropriately after a reasonable period or when no longer needed. If material generated during customer service is deemed necessary for manual archiving, it is archived in accordance with the records management plan.
Principles for protecting the register, electronic data
Electronic customer data is stored in various operational systems used by the Company. The system that owns the customer data shares the necessary information with other systems through modern and secure software interfaces to ensure access to up-to-date customer information. If electronic transfer of information between systems is not possible, the information is transferred or entered manually by a user.
Only employees who have valid confidentiality agreements concerning personal data and information systems, as well as a processor’s commitment agreement, may access software and the customer data contained therein. Each employee has personal user credentials, passwords, and role-based access rights.
All systems and software in use are protected through the service provider’s monitoring, software solutions, and physical security measures. In addition, the Company’s workstations, terminals, and mobile devices are protected with modern security solutions, software, access management controls, and multi-factor authentication.
Cookies in electronic services
When visiting our online store at https://verkkokauppa.lhj.fi, the website stores cookies on your device. Cookies are small text files that do not harm your device or the data stored on it.
The cookies we use are primarily technical cookies. These cookies enable the functionality of websites and services, ensuring the best possible user experience. Cookies also facilitate electronic transactions and the completion of forms and notifications.
The following information is collected through cookies: Visitor’s IP address, Date and time of visit, Pages viewed and time spent on pages, Visitor’s browser information
Information collected through cookies may be used for targeted communications and marketing. These cookies do not identify individual visitors, but they may be used to associate information obtained from or entered by the user, such as information submitted through a completed form.
You have the right to prevent the use of cookies by changing your browser settings. Most browsers allow cookies to be disabled and previously stored cookies to be deleted. Disabling cookies may affect the functionality of the website, services, or forms.
Automated processing and profiling
Customers and their data are not subject to automated decision-making, nor is profiling carried out based on personal data.
Data transfers
The Company does not transfer data outside the European Union (EU) or the European Economic Area (EEA).
The customer and data subject have the right to transfer information concerning them that has been provided to them from the Company’s information systems to other systems, to the extent that the information is relevant to them and can be securely provided to them in accordance with applicable laws and regulations.
Right of access
The data subject has the right to access the information stored about them in the register. A request for access must be submitted in writing, in Finnish, Swedish, or English, and signed by the Data Protection Officer. The request for access may also be submitted in person at the controller’s premises at the address stated above.
Right to request rectification of data
Any personal data in the register that is incorrect, unnecessary, incomplete, or outdated in relation to the purpose of processing must be corrected, deleted, or supplemented.
Requests for rectification must be submitted in writing and signed either at the Company’s customer service point or to the Data Protection Officer. The requester’s identity must be verified with a valid official photo ID card or passport.
The request must specify the data to be corrected and the grounds for the correction. Corrections will be made without undue delay. If a correction is not made, the Company must provide written reasons for the refusal. If necessary, the data subject may submit this information to the Data Protection Ombudsman and request a decision from the Office of the Data Protection Ombudsman.
Right to restrict or object to processing or request the deletion of data
Data subjects have the right to request restriction of processing, deletion of their data, or object to processing where the data is inaccurate or where there is no legal basis for processing. Data subjects may also request anonymization of data where applicable and exercise their right to be forgotten. Requests must be submitted in writing, signed, and addressed to the Data Protection Officer in Finnish, Swedish, or English.
Data subjects may request the deletion of their personal data. Legal and regulatory requirements may affect the deletion of data, such as statutory invoice retention periods under accounting legislation and any ongoing debt collection procedures.
Personal data is retained only for as long as necessary to fulfill the processing purposes described in this notice or to comply with legal obligations.
Unnecessary data is deleted without undue delay.
Whistleblowing reporting channel
Loimi-Hämeen Jätehuolto Oy and its subsidiaries use a Whistleblowing reporting channel. The privacy notice concerning the Whistleblowing reporting procedure can be found here täältä.
Right to lodge a complaint with a supervisory authority
If the data subject believes that the processing of their personal data violates the General Data Protection Regulation (GDPR), they have the right to lodge a complaint with a supervisory authority.
The contact details of the supervisory authority are:
Office of the Data Protection Ombudsman
PL 800, Ratapihantie 9, 00521 Helsinki
tel. 029 56 66700
https://tietosuoja.fi/en/notification-to-the-data-protection-ombudsman