+358 44 980 6847
Controller:
BHCOy, Heiniemi 4, 02940 Espoo
Contact Person for Register Matters:
Data Protection Officer, BHCOy
Email:bhcoy@fi
Phone: +358 44 980 6847
Name of the Register:
BHCOy's Job Applicant Register
Purpose and Legal Basis for Processing Personal Data:
-
To receive, process, and store job applications from individuals interested in BHCOy as an employer for recruitment purposes.
-
The processing of personal data is based on Article 6(1)(f) of the EU General Data Protection Regulation (legitimate interest of the controller) and Article 6(1)(b) (measures prior to entering into an employment contract at the request of the applicant).
Content of the Register:
Information provided by the job applicant, such as:
-
Curriculum vitae and content of the application
-
Certificates and attachments
-
Other information provided during the recruitment process
Regular Sources of Information:
-
The data is provided by the job applicant themselves.
Data Security:
The data is stored in databases protected by firewalls, passwords, and technical means. Access to the data is restricted and protected with user credentials and passwords.
Retention Period of Personal Data:
-
Data is retained for 2 years to comply with legal obligations (e.g., Equality Act) or to demonstrate proper conduct of the recruitment process.
Disclosure and Transfer of Data Outside the EU:
-
Data will not be disclosed outside the group of companies without a legal basis.
-
Data may only be transferred outside the EU/EEA in accordance with data protection legislation.
Rights of the Data Subject:
The data subject has the right to:
-
inspect their data
-
correct inaccurate data
-
request deletion of their data
-
restrict processing
-
object to processing
-
transfer their data from one system to another
Requests must be made in writing or by email to the person responsible for register matters.
Other:
Processing an application requires the submission of relevant information. If the applicant does not provide the necessary information or objects to its processing, BHCOy may be unable to process the application or proceed with recruitment.
JOB APPLICANT REGISTER
Controller:
BHCOy, Heiniemi 4, 02940 Espoo
Contact for registry matters:
Data Protection Officer, BHCOy
Email: bhcoy@fi
Phone: +358 44 980 6847
Name of the Register:
BHCOy's Customer Register
Purpose and Legal Basis for Processing:
Managing customer relationships and communication with individuals who have been in contact regarding house and plot properties.
Data Content:
Name, contact information, and information about the customer's areas of interest.
Purpose and Legal Basis for Register Processing:
The register is used for managing house and plot sales and customer relationship management.
-
The processing of data is based on Article 6(1)(b) of the General Data Protection Regulation (performance of a contract) and Article 6(1)(c) (legal obligation, e.g., accounting).
-
Data may also be used for maintaining customer relationships and developing services, but not for direct marketing without separate consent.
Content of the Register:
-
Customer's name
-
Address
-
Phone number and email
-
Deeds of sale and contract information
-
Billing and payment information
-
Other information related to the execution of the sale
Regular Sources of Information:
-
From the customer during the sales process
-
From sales documents and contracts
Data Security:
The data is stored in a secure system with restricted access rights. Access is granted only to individuals who need the data to perform their work tasks.
Retention Period of Personal Data:
-
Data is retained for the period required by accounting and other legislation (typically 6–10 years).
-
After the sale is completed, data will not be used for marketing without the customer's explicit consent.
Regular Disclosures and Transfers of Data Outside the EU:
Data is not disclosed outside the group of companies without a legal basis. Data is not transferred outside the EU/EEA.
Rights of the Data Subject:
The data subject has the right to access their personal data, correct inaccurate data, request deletion within the limits of the law, restrict processing, and lodge a complaint with the Data Protection Ombudsman.
CUSTOMER REGISTER
Data Controller:
BHCOy, Heiniemi 4, 02940 Espoo
Person responsible for register matters:
Data Protection Office, BHCOy
Email:@...
Phone: +358 44 980 6847
Name of the Register:
BHCOy Procurement Register
Purpose and Legal Basis of Processing:
The data controller uses the information for the execution of procurements.
The processing of personal data is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR), i.e. the legitimate interests of the data controller.
For those who register themselves, the processing is based on consent (Article 6(1)(a) GDPR).
Content of the Data:
Company name, industry, contract type, address, Business ID, contact person’s name, phone number, email, other information necessary for maintaining the procurement relationship, and information provided by the data subject themselves. The IP address is also stored during registration to verify consent.
Regular Sources of Information:
Information is obtained from the data subject themselves, the data subject’s company, the Business Information System (YTJ), public registers, and if necessary, data update services.
Data Security:
The information is stored in databases protected by firewalls, passwords, and technical means. Access rights are limited to authorized users with usernames and passwords.
Retention Period of Personal Data:
Data is retained as long as the data subject is involved in tasks related to the controller’s procurement activities, unless the data subject has opted out of marketing communications. Data based on consent is deleted once the consent expires. The need for retention is assessed annually.
Disclosure and Transfer of Data:
Data is not disclosed to third parties. Data may be transferred outside the EU/EEA only in accordance with data protection legislation.
Rekisteröidyn oikeudet:
The data subject has the right to inspect their data, correct any errors, request deletion, restrict processing, object to processing (including direct marketing), transfer their data from one system to another, and withdraw consent. These rights can be exercised by contacting the person responsible for registry matters. The data subject also has the right to lodge a complaint with the Data Protection Ombudsman.
PROCUREMENT REGISTER
CONSUMER PROTECTION
If disputes arise between the consumer and the company that cannot be resolved through negotiation, the consumer may bring the matter to the Consumer Disputes Board (www.kuluttajariita.fi).
