Privacy Policy
Data Controller and Contact Details
Juho Heikkinen, sole proprietor of JHM Agency
Business ID: 3281547-4
Email: juho.h.media@gmail.com
Phone: 044 3750252
Name of the Register
Customer register of JHM Agency.
General Information
This Privacy Policy explains what personal data we collect from our customers and how we use such data in accordance with applicable data protection legislation. It also provides information about your rights concerning your personal data.
We always process personal data in accordance with applicable legislation.
1. Legal Basis and Purpose of Processing Personal Data
The legal bases for processing personal data are:
The contractual relationship between the data subject and the Data Controller;
Compliance with the Data Controller's legal obligations; and
The legitimate interests of the Data Controller based on the customer or contractual relationship between the data subject and the Data Controller.
The purposes of processing personal data include providing the Data Controller's services to users; maintaining customer relationships and partnerships related to these services; developing services; direct marketing of services; contacting individuals; and conducting potential market research.
Please note that not all direct marketing activities require explicit consent. For example, we may send you emails based on an existing customer relationship to market products or services that belong to the same product category or are otherwise similar to a product or service you have previously ordered.
We may also send marketing communications to your work email address without consent based on your professional position where the marketed product or service relates to your work duties.
Personal Data We Process
The Data Controller collects only personal data that is relevant and necessary for the purposes described in this Privacy Policy.
We store personal data necessary for identifying customers, carrying out assignments, invoicing, and maintaining customer relationships.
Personal data we may collect from customers includes, among other things:
Name;
Personal identity code and/or Business ID;
Postal address and email address;
Telephone number;
Billing information;
Employer;
Profession and position within a company; and
Other information concerning a person and/or company that is necessary for carrying out an assignment, such as credit information, health information, nationality, insurance information, marital status, and financial information.
In connection with the provision of services, we may also collect requests for quotations and related information and transactions, orders and purchases, uploaded images, messages and reviews submitted under your name, usernames and passwords related to the use of services, communications and conversations, and technical identification information.
We primarily obtain your personal data directly from you. However, we may also collect personal data from public authorities and other reliable sources to the extent permitted by law.
Data Retention Period
The Data Controller retains personal data for as long as necessary to carry out an assignment.
After an assignment has ended, the data will be retained for four years, after which the material will be securely destroyed unless longer retention is required or permitted by law.
The Data Controller may be required to retain certain personal data included in the register for longer periods in order to comply with legislation or requirements imposed by public authorities, for example in relation to taxation, invoicing, and accounting.
Rights of the Data Subject
Right of Access
The data subject has the right to obtain confirmation as to whether personal data concerning them is being processed and, where such data is being processed, the right to obtain a copy of their personal data.
Right to Rectification
The data subject has the right to request the correction of inaccurate or incorrect personal data concerning them.
The data subject also has the right to have incomplete personal data completed by providing the necessary additional information.
Right to Erasure
The data subject has the right to request the erasure of personal data concerning them where:
a. the personal data is no longer necessary for the purposes for which it was collected; or
b. the personal data has been unlawfully processed.
Right to Restriction of Processing
The data subject has the right to request restriction of the processing of their personal data where:
a. the data subject contests the accuracy of their personal data;
b. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead; or
c. the Data Controller no longer requires the personal data for the original purposes of processing, but the data subject requires it for the establishment, exercise, or defence of legal claims.
The right to erasure is subject to certain limitations and does not apply, for example, where the Data Controller has a legal obligation to retain the data or where the processing of personal data is necessary for the establishment, exercise, or defence of legal claims.
Please note that providing certain information and allowing its processing may, in some circumstances, be a prerequisite for accessing or using a service and may also, in part, constitute a legal obligation.
The Data Controller reserves the right to suspend the provision of services or prevent access to services if you do not provide information that is essential for the service or if you request the deletion of such information.
Right to Object
The data subject has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them.
The Data Controller may no longer process the data subject's personal data unless the Data Controller can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
Where personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such marketing, including profiling to the extent that it is related to such direct marketing.
Right to Data Portability
The data subject has the right to receive personal data concerning them that they have provided in a structured, commonly used, and machine-readable format and has the right to transmit such data to another data controller.
Right to Lodge a Complaint with a Supervisory Authority
The national supervisory authority for personal data matters in Finland is the Office of the Data Protection Ombudsman, which operates in connection with the Ministry of Justice.
You have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data infringes applicable data protection legislation.
Updates to This Privacy Policy
This Privacy Policy is maintained and updated regularly to reflect applicable legislation and current data processing needs.
The latest version of our Privacy Policy is available electronically on our website.