Privacy Policy
1. Data controller
Opetustarvike Oy
Nuijamiestentie 7, 00400 Helsinki
Tel. +358504482935
Business ID 1719758-3
2. Name of the register
Opetustarvike Oy’s digital services
- www.liikenneopetus.fi
- www.eautokoulu.fi
3. Purpose of the register
The purpose of the processing is to manage the customer relationship, implement the rights and obligations of the customer and Opetustarvike Oy, and process personal data in accordance with the Personal Data Act for purposes related to online services, customer management, research activities, and to direct the advertising and/or direct marketing of Opetustarvike Oy and/or its partners based on customer data through Opetustarvike Oy’s media and services without disclosing personal data to a third party.
Personal data is processed to implement the liikenneopetus.fi and eautokoulu.fi services, and the system in question is used as the controller’s customer management system and to implement the teaching activities at the driving school. The driving and teaching data obtained through the service is stored for teaching purposes. Personal data is also processed for the above-mentioned purposes to keep student records.
The basis for processing personal data is an agreement between the parties or the controller’s legitimate interest, which is based on a factual connection between the parties.
The Finnish Transport Safety Agency issues regulations to driving schools on student records in driver training aimed at obtaining a driving license and on notifications made therefrom. The type of personal data processed is mainly formed in accordance with the Finnish Transport Safety Agency’s instruction TRAFl/56267 /03.04. 03.06/2015.
The controller will process your personal data in this register as long as the controller has one of the grounds for processing the data described in this statement, as well as for a reasonable period thereafter, or as long as it has a statutory obligation to retain personal data. For example, student records must be kept for 5 years from the beginning of the calendar year following the year in which the student records were prepared.
4. Data content of the register
The register may contain the following grouping of customer information:
- First and last name
- Personal identification number
- Email address
- Identification information for your own account, username
- Driving license and vehicle information
- Mobile phone number
- Company and position
- Company address information
Opetustarvike Oy uses cookies on its websites to improve the user experience. Cookies are small text files that are sent to the user’s computer at the request of the browser and stored there. Cookies can be prohibited by adjusting the browser settings.
5. Regular data sources of the register
Information is created in the register both by the data subjects themselves, by the employer, and through the controller’s own activities. Student and teaching data is also stored through client companies (the controller).
6. Disclosure of personal data
In order to create an identification system, a person is registered as a service user and stores their own data in the system. The scope of the data depends on the service used.
The controller does not disclose the personal data of the Customers to third parties, except when required by Finnish authorities.
Open data includes, for example, the contact information of driving schools in driving school search services.
The name, subject and date of the students who received theory instruction in the online theory service of the Finnish Driving School Association are reported to the student’s driving school for student records. After notifications, the student data is deleted from the online service and stored manually.
7. Register protection
Manual material: The register is compiled from Opetustarvike Oy’s customer information systems and the data is maintained by manual updating. Reports containing personal data taken from the information systems are processed and destroyed in accordance with a good information security policy.
Data processed by computer: The register is used by Opetustarvike Oy’s personnel whose job description includes tasks in accordance with the purpose of the register. Using the register requires a personal username and password. The username and password are given when granting access rights. The access rights end when the person leaves Opetustarvike Oy’s service and leaves the tasks for which they have been granted access rights. Personal data is kept confidential. Opetustarvike Oy’s information network and the equipment on which the register is located are protected by a firewall and other necessary technical measures.
8. Informing the data subject
The data subject has been informed at the contract conclusion stage that personal data concerning him/her will be registered and maintained by Opetustarvike Oy.
9. Right of inspection and exercise of the right of inspection
According to sections 26-28 of the Personal Data Act, a person has the right to check what information about him or her has been stored in the consumer customer register of Opetustarvike Oy. The request for inspection must be submitted in writing and signed to the address: Opetustarvike Oy, Nuijamiestentie 7, 00400 Helsinki.
The customer must provide the information necessary to search for the information: Name, address and personal identification number.
10. Correction or deletion of information
Data subjects have the right to have their data deleted without undue delay, for example when the personal data are no longer needed for their original processing purposes, the personal data have been processed unlawfully or the data subject withdraws their consent and there is no other legal basis for the processing.
The data subject has the right to request that the controller correct inaccurate or incorrect personal data concerning him or her without undue delay.
The data subject has the right to request that the controller restrict processing in certain situations, for example when the data subject disputes the accuracy of their data or the processing is unlawful.
Right to object: In certain situations, the data subject has the right to object to the processing of personal data, for example when processing personal data for direct marketing purposes, or when the processing is based on a legitimate interest.
Right to data portability: If the data subject’s personal data are processed automatically with your consent or based on a contract and the data has been obtained from the data subject, the data subject has the right to request that the data be transferred from one system to another.
Right to withdraw consent: If the processing is based on the data subject’s consent, the data subject has the right to withdraw their consent at any time.
Right to lodge a complaint with a supervisory authority: The data subject primarily hopes that any disagreements regarding the processing of personal data will be resolved amicably between the parties. However, if such a matter cannot be resolved amicably, the data subject has the right to lodge a complaint with the supervisory authority responsible for data protection matters.
11. Right to object
The customer has the right to object to the disclosure and processing of his or her data for direct advertising and other marketing purposes.