Privacy notice: Processing of customer data
Processing of customer data
Privacy notice: Processing of customer data: joint informative document for data subjects (Articles 13 and 14 of the General Data Protection Regulation [2016/679]).
Purposes of processing personal data
Sales invoicing, managing contracts/agreements or legitimate interests (supplier).
Legal basis for processing
The processing of personal data is based on the execution of the contract/agreement or legitimate interests (Customer).
Personal data content and retention periods of the register
Customers of HAMK Ltd, HAMI Ltd and HAMK Academy Ltd
Regular sources of data
Data source is the person him/herself.
Regular disclosures of data
Invoices to be collected by a collection agency
Principles of data protection of the register
|Data category name||Retention period|
|First name, last name||10 years|
|Contact details||10 years|
|Personal identity code (collection, paid)||3 years after payment|
|Personal identity number (collection, unpaid)||10 years|
|Invoice row||10 years|
|Personal data contained in contracts and agreements||Duration of the contract + 6 years (contracts and agreements related to projects: 15 years)|
A Manual material
Invoice recovery data is retained in a folder kept in a locked space. Contracts and agreements are kept in a locked space.
B Data processed through automated data processing
Data is stored in an information system. Users have personal user IDs. Access is granted only to those persons who are entitled to access and use the data in the system in order to perform their duties.
No automated decision-making is performed on the recorded data.
Transfer of data outside the EU or EEA
No data is transferred outside the EU or EEA.