Privacy policy

Netox.fi visitors

The Netox.fi website uses cookies, which the visitor can either accept or reject. You can change the selection in the cookie settings if you wish. Read more about cookies here.

Anyone can subscribe to the Netox newsletter. Subscription to the newsletter is consent to receive the newsletter and the subscription can be canceled if desired by using the “unsubscribe from mailing list” link in the newsletter. After cancellation, your email address will be deleted from Netox’s systems. The e-mail address requested in the order is only used to deliver the newsletter.

Clients and assignments
With regard to the data collected for managing the customer relationship, Netox acts as the data controller. When performing tasks agreed with the customer, such as IT support services, Netox acts as a data processor and the customer as a data controller, whereby the processing takes place in accordance with the written instructions received from the customer.

Collected information and its use

For the processing and implementation of the contract, the following information is collected about the Customer (company or person):

name (company, contact person)
email address
telephone number
address information
billing information

As a rule, the information is collected from the customer himself in connection with the conclusion of the contract. Information can also be collected in connection with negotiations that take place even before the contract, during the mapping phase of potential customers or when a company/natural person shows interest in Netox, for example by subscribing to a newsletter or requesting an offer for Netox services. The information can also be used for sending information about the service, for satisfaction surveys, and for other marketing purposes

Personal data processed in the customer’s orders (for example, data of the customer’s employees):

Information based on the customer’s orders and Customership and other personal data generated during the customer relationship are treated confidentially for the following purposes (for example, data of the customer’s employees):

name
email address
telephone number
home address
IP address
name of the computer
employer
supervisor
mission
station

Data protection

The personal data held by Netox is processed in a server environment with a very high and certified (ISO/IEC 270001 / ISO 20000-1) information security level. Our services meet the requirements set by the EU General Data Protection Regulation for data processing and protection. Only people who need it in their work have access to the data, and all use is recorded in log data, which is kept for the time required by legislation.

Our staff are trained industry professionals who follow Netox’s information security and data protection policy in their work. They are also regularly trained in the areas of information security and data protection. Both our staff and the subcontractors we use are bound by a duty of confidentiality for all the information they process.

Third parties and disclosures

Netox also partly uses subcontractors to provide services. These can be, for example, the supplier of the invoicing system, the supplier of the customer service system (tickets and their registration) and the supplier of the server environment. Netox uses safe partners operating in the EU/EEA area, whose safe operation is ensured both by contract and, if necessary, by audits. The partners required to provide the service are approved in the contract.

Netox does not hand over the personal data received in connection with customers or orders to others, unless the applicable legislation requires otherwise.

Data retention period

Customer data is only stored for the duration of the valid customer relationship, unless applicable legislation requires otherwise.

Data transfers

Customer data is stored in Netox’s data centers in the EU/EEA region. If, in the Customer’s orders, Netox processes data located on the Customer’s own servers that are outside the EU/EEA region, it is processed there using a remote connection from Finland.

Processing grounds

The basis for processing customer data is compliance with Netox’s statutory obligations and the implementation of the contract.

The basis of data processing in connection with customer assignments is the execution of the contract.

Registrant’s rights

The registrant has the following rights:

The right to access personal data
Right to rectification of data
The right to delete data
The right to restrict processing
Right to object
The right to transfer data from one system to another
The right to withdraw consent if the processing is based on consent
The right to file a complaint with the supervisory authority (https://tietosuoja.fi/ilmoitus-tietosuojavaltutututu)

The customer can exercise his/her rights either by contacting Netox’s customer service or at the address tietosouva@netox.fi

Information requests related to personal data processed in connection with the customer’s assignments are directed to the customer, who as the data controller is responsible for their processing.

Yhteystiedot

Netox Oy

Saaristonkatu 22, 2krs. 90100 Oulu

Eteläesplanadi 8, 00130 Helsinki

tietosuoja@netox.fi