Controller

Vibemetrics Oy (2988220-3)

Visiting address: Maria01, Lapinlahdenkatu 16, 00180 Helsinki
Postal address: Halkivahantie 3, 04300 Tuusula

info@vibemetrics.com, tuki@vibemetrics.com

Contact person for matters concerning the register

Mikko Ruokojoki

mikko.ruokojoki@vibemetrics.com

Name of the register

User register of the Vibemetrics service

Legal basis and purpose of the processing of personal data

The legal basis for the processing of personal data under the EU General Data Protection Regulation is a contract between the customer organisation and Vibemetrics Oy.

The purposes of the use of personal data in the Vibemetrics service are.

1. control of access and rights to the service

2. compiling the measurement results collected by the service according to the organisational hierarchy

3. geographic targeting of the measurement results collected by the service by organisation

4. statistical analysis of measurement results collected by the service

5. the delivery of personalised service-related messages to users of the service.

6. resolving problems with the service.

Data content of the register

The personal data stored about users are

1. e-mail address

2. mobile phone number

3. an internal user-specific identifier generated by the service

4. Organisation

5. user group within the organisation

6. interface language

7. a unique identifier for the user's terminal equipment, generated by the service

8. measurement results entered into the service by the user

9. other background information on the user related to the measurements

10. IP address, if there is a need to restrict access to the service based on IP addresses.

11. Geographical location (latitude and longitude) inferred from the IP address, if there is a need to limit the use of the service according to geographical constraints.

The data is stored in the system for the duration of the organisation's customer contract and for up to one year after the end of the contract.

Regular sources of information

• The email address, mobile phone number, organisation, user group and language of the service are obtained from the customer organisation or directly from the user.

• Measurement results are obtained directly from the user.

• The user's IP address is obtained from the network address of the user's browser or terminal.

Regular disclosures of data

The personal data contained in the register is not disclosed on a regular basis.

Transfer of data outside the EU or EEA

The personal data contained in the register will not be transferred outside the EU or EEA. The service is hosted in the cloud, where the data contained in the service is stored in data centres located in the EU or EEA.

Principles for the protection of the register

The register is processed with due care and the data processed by the information systems are adequately protected. The physical and digital security of the equipment used to store the data is adequately ensured.

Access to the personal data contained in the register is limited to those employees of Vibemetrics Oy whose job duties (for example, problem solving) require the processing of personal data.

Right of inspection and right to request correction of information

The data subject has the right to inspect the personal data stored about him or her in the register and to request the correction of any inaccurate data or the completion of incomplete data.

A request for review or rectification must be sent in writing to the controller. The controller may, if necessary, ask the applicant to prove his or her identity. The controller will reply to the applicant within the time limit laid down in the EU General Data Protection Regulation (as a general rule, within one month).

Right to object

The data subject has the right to object at any time to the processing of his/her personal data if he/she believes that his/her personal data has been unlawfully processed or that Vibemetrics is not entitled to process certain personal data.

Other rights related to the processing of personal data

The data subject has the right to request the erasure of data stored about him or her in the register. The data subject also has other rights under the EU General Data Protection Regulation, such as the restriction of the processing of personal data in certain circumstances. Requests must be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his or her identity. The controller will reply to the applicant within the time limits set by the EU GDPR (usually within one month).

The vast majority of the personal data stored in the register is necessary for the operation of the service. If the data subject requests the partial erasure of data stored about him/her, the controller may, if he/she so wishes, erase all the data, after which the data subject will no longer be able to use the service.

Contact

If you have any questions about this, please contact tuki@vibemetrics.com.