Privacy Policy for DRA Consulting Oy’s customer register

1 Controller

DRA Consulting Oy
Pakkalankuja 7, 01510 Vantaa
+358 9 825 64 200

(hereafter “DRA Consulting”)

2 Contact person for register matters

Leena Hainio
Pakkalankuja 7, 01510 Vantaa
+358 9 825 64 200

3 Name of register

DRA CONSULTING OY CUSTOMER REGISTER

4 What is the purpose and legal basis of processing personal data?

The purpose of this personal data register is marketing and communication to our Customers. The information is used for providing agreed services, developing services and products, invoicing, and for the needs of customer relations. The basis of processing personal data is DRA Consulting’s justified interest on the basis of a customer relationship or other appropriate connection or implementing a contract.

The basis of processing personal data is:

  • the delivery and development of our products and services,
  • fulfilling our contractual and other promises and obligations,
  • taking care of the customer relationship,
  • analyzing and profiling behaviour of a customer or other data subject,
  • electronic and direct marketing,
  • invoicing

5 What data do we process?

We process the following personal data of our customers or other data subjects, like individuals participating in our trainings, in connection with the customer register:

  • Information of company and company’s contact persons, such as *Business ID, *address, *names, *titles, and *contact details of the contact persons.
  • Information of the customership and the contract, such as past and current contracts and orders, order history, payment and account information, general correspondence with the customer’s contact persons, and other information of the customership, such as name, title, email-address, and phone number of the contact person.
  • Other possible information gathered with data subject’s consent, such as for training or customer events, such as diet restrictions, allergies, or mobility restrictions.

Committing personal data, marked with a star, is a requirement for our contractual and customer relationship. Without the necessary information, we are not able to provide the service.

6 From where do we receive data?

We receive information primarily from the data subjects.

For the purposes described in this privacy policy, personal data may also be collected and updated from publicly available sources, and based on information received from authorities, or other third parties within the limits of the applicable laws and regulations. Data updating of this kind is performed manually, or by automated means.

7 To whom do we disclose data and do we transfer data outside of EU or EEA?

We process information ourselves and use subcontractors that process personal data on behalf of and for us. We have outsourced the ITmanagement, and the execution of some of our marketing campaigns to external service providers, to whose server the data is stored. The servers are protected and managed by the external service providers.

We disclose personal data to external service providers offering direct marketing. Data may be disclosed to authorities under compelling provisions.

We do not disclose personal data outside of EU/EEA.

8 How do we protect the data and how long do we store them?

Only those of our employees, who on behalf of their work are entitled to process customer data, are entitled to use a system containing personal data. Each user has a personal username and password to the system.

The information is collected into databases that are protected by firewalls, passwords, and other technical measures. The databases and the backup copies of them are in locked premises and can be accessed only by certain pre-designated persons.

We store the data as long as it is necessary for the purpose of processing the data. For the basic contact information (name, title, email address, and phone number) of the company’s contact persons, the storage time is two years, and for the sensitive information collected for training or customer events such as dietary, mobility restrictions, and allergies, the storage time is 1 month, after which the information is deleted.

We estimate regularly the need for data storage taking into account the applicable legislation. In addition, we take care of such reasonable actions of which purpose is to ensure that no incompatible, outdated or inaccurate personal data is stored in the register taking into account the purpose of the processing. We correct or erase such data without delay.

9 What are your rights as a data subject?

As a data subject you have a right to inspect the personal data conserning yourself, which is stored in the register, and a right to require rectification, or erasure of the data. You also have a right to withdraw or change your consent.

As a data subject, you have a right, according to EU’s General Data Protection Regulation (applied from 25.5.2018) to object processing or request restricting the processing and lodge a complaint with a supervisory authority responsible for processing personal data.

For specific personal reasons, you also have a right to object profiling and other processing concerning you, when processing the data is based on the customer relationship. In connection to your claim, you should identify the specific situation on which you object the processing. We can refuse to act on such request on the basis of the law.

As a data subject you have the right to object processing at any time free of charge, including profiling in so far as it relates to direct marketing.

10 Who can you be in contact with?

All contacts and requests concerning this privacy policy shall be submitted in writing or in person to the person mentioned in section two (2).

11 Changes in the Privacy Policy

Should we make amendments to this privacy protection statement, we will place the amended statement on our website, with an indication of the amendment date. If the amendments are significant, we may also inform you about this by other means, for example by sending an email or placing a bulletin on our homepage. We recommend that you review these privacy protection principles from time to time to ensure you are aware of any amendments made.

12 Cookies

This website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.

Cookies are small text files that can be used by websites to make a user’s experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.

Please state your consent ID and date when you contact us regarding your consent.

Your consent applies to the following domains: dra.fi

Your current state: Deny. 

Your consent ID: uVMCa2ay45fP5mVCUWomkbdXjUi55XVQSA5JYLCCV4mCWrCZ5pBGKg==Consent date: Monday, May 23, 2022 at 10:30:27 AM GMT+3

Change your consent

Cookie declaration last updated on 23.7.2022 by Cookiebot:

Necessary (13)

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

NameProviderPurposeExpiryType
__stripe_midMailjetThis cookie is necessary for making credit card transactions on the website. The service is provided by Stripe.com which allows online transactions without storing any credit card information.1 yearHTTP Cookie
__stripe_sidMailjetThis cookie is necessary for making credit card transactions on the website. The service is provided by Stripe.com which allows online transactions without storing any credit card information.1 dayHTTP Cookie
actualOptanonConsentMailjetDetermines whether the user has accepted the cookie consent box.1 yearHTTP Cookie
CONSENT [x2]Google
YouTube
Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website.2 yearsHTTP Cookie
CookieConsentCookiebotStores the user’s cookie consent state for the current domain1 yearHTTP Cookie
li_gcLinkedInStores the user’s cookie consent state for the current domain2 yearsHTTP Cookie
mStripeDetermines the device used to access the website. This allows the website to be formatted accordingly.2 yearsHTTP Cookie
OptanonAlertBoxClosedMailjetDetermines whether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again upon re-entry.1 yearHTTP Cookie
OptanonConsentMailjetDetermines whether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again upon re-entry.1 yearHTTP Cookie
personalization_idTwitter Inc.This cookie is set by Twitter – The cookie allows the visitor to share content from the website onto their Twitter profile.2 yearsHTTP Cookie
rc::aGoogleThis cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.PersistentHTML Local Storage
rc::cGoogleThis cookie is used to distinguish between humans and bots.SessionHTML Local Storage

Preferences (15)

Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.

NameProviderPurposeExpiryType
__atuvcOracleUpdates the counter of a website’s social sharing features.13 monthsHTTP Cookie
__atuvsOracleEnsures that the updated counter is displayed to the user if a page is shared with the social sharing service, AddThis.1 dayHTTP Cookie
_at.cwwOracleUsed by the social sharing platform AddThisPersistentHTML Local Storage
_at.hist.#OracleUsed by the social sharing platform AddThis to store the user’s usage history of the AddThis sharing widgetPersistentHTML Local Storage
at-lojson-cache-#v1.addthisedge.comUsed by the social sharing platform AddThisPersistentHTML Local Storage
at-randOracleUsed by the social sharing platform AddThisPersistentHTML Local Storage
lang [x2]LinkedInSet by LinkedIn when a web page contains an embedded “Follow us” panel.SessionHTTP Cookie
VISITOR_INFO1_LIVEYouTubeTries to estimate the users’ bandwidth on pages with integrated YouTube videos.179 daysHTTP Cookie
yt-remote-cast-installedYouTubeStores the user’s video player preferences using embedded YouTube videoSessionHTML Local Storage
yt-remote-connected-devicesYouTubeStores the user’s video player preferences using embedded YouTube videoPersistentHTML Local Storage
yt-remote-device-idYouTubeStores the user’s video player preferences using embedded YouTube videoPersistentHTML Local Storage
yt-remote-fast-check-periodYouTubeStores the user’s video player preferences using embedded YouTube videoSessionHTML Local Storage
yt-remote-session-appYouTubeStores the user’s video player preferences using embedded YouTube videoSessionHTML Local Storage
yt-remote-session-nameYouTubeStores the user’s video player preferences using embedded YouTube videoSessionHTML Local Storage

Statistics (14)

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

NameProviderPurposeExpiryType
_ga [x2]Google
Mailjet
Registers a unique ID that is used to generate statistical data on how the visitor uses the website.2 yearsHTTP Cookie
_ga_#GoogleUsed by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit.2 yearsHTTP Cookie
_galiMailjetRegisters a unique ID that is used to generate statistical data on how the visitor uses the website.1 dayHTTP Cookie
_gat [x2]Google
Mailjet
Used by Google Analytics to throttle request rate1 dayHTTP Cookie
_gid [x2]Google
Mailjet
Registers a unique ID that is used to generate statistical data on how the visitor uses the website.1 dayHTTP Cookie
AnalyticsSyncHistoryLinkedInUsed in connection with data-synchronization with third-party analysis service.29 daysHTTP Cookie
collectGoogleUsed to send data to Google Analytics about the visitor’s device and behavior. Tracks the visitor across devices and marketing channels.SessionPixel Tracker
locOracleGeolocation, which is used to help providers determine how users who share information with each other are geographically located (state level).13 monthsHTTP Cookie
uvcOracleDetects how often the social sharing service, AddThis, encounters the same user.13 monthsHTTP Cookie
xtcOracleRegisters the user’s sharing of content via social media.13 monthsHTTP Cookie
YSCYouTubeRegisters a unique ID to keep statistics of what videos from YouTube the user has seen.SessionHTTP Cookie

Marketing (15)

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

NameProviderPurposeExpiryType
__tld__MailjetUsed to track visitors on multiple websites, in order to present relevant advertisement based on the visitor’s preferences.SessionHTTP Cookie
_fbp [x2]Meta Platforms, Inc.
Mailjet
Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.3 monthsHTTP Cookie
ads/ga-audiencesGoogleUsed by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor’s online behaviour across websites.SessionPixel Tracker
bcookieLinkedInUsed by the social networking service, LinkedIn, for tracking the use of embedded services.2 yearsHTTP Cookie
bscookieLinkedInUsed by the social networking service, LinkedIn, for tracking the use of embedded services.2 yearsHTTP Cookie
frMeta Platforms, Inc.Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.3 monthsHTTP Cookie
i/adsct [x2]Twitter Inc.The cookie is used by Twitter.com in order to determine the number of visitors accessing the website through Twitter advertisement content.SessionPixel Tracker
lidcLinkedInUsed by the social networking service, LinkedIn, for tracking the use of embedded services.1 dayHTTP Cookie
muc_adsTwitter Inc.Collects data on user behaviour and interaction in order to optimize the website and make advertisement on the website more relevant.2 yearsHTTP Cookie
trMeta Platforms, Inc.Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.SessionPixel Tracker
UserMatchHistoryLinkedInUsed to track visitors on multiple websites, in order to present relevant advertisement based on the visitor’s preferences.29 daysHTTP Cookie
ytidb::LAST_RESULT_ENTRY_KEYYouTubeStores the user’s video player preferences using embedded YouTube videoPersistentHTML Local Storage
yt-remote-cast-availableYouTubeStores the user’s video player preferences using embedded YouTube videoSessionHTML Local Storage

Unclassified (1)

Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.

NameProviderPurposeExpiryType
mail_sessionMailjetPending6 daysHTTP Cookie