EU General Data Protection Regulation (EU 2016/679)
Semel Oy (hereinafter ”Semel”)
Business ID 0113821-2
Valimotie 21, 00380 Helsinki
Phew. 020 742 9400
Semel Reissu Service Customer Register
Personal data is processed on the basis of a customer relationship or with the consent of the data subject.
The personal data of registered individuals is processed for the purpose of producing, offering, and developing the Reissu service, as well as for maintaining, managing, developing, analyzing, and statistically processing customer relationships related to the service. Furthermore, data may be processed to fulfill and plan the tasks of Semel and its registered partners. Data may also be processed for customer communication and marketing by Semel or its registered partners.
The register contains information belonging to the following groups:
The customer transfers personal data to Semel. By logging into the service, the customer accepts the transfer of data. Personal data is collected upon registration for the service, when using the service, or otherwise directly from the data subject.
Information may be processed by companies belonging to the same group as Semel. Semel discloses information to a service provider in connection with the making and processing of a service request and in relation to a service event. Semel may disclose personal data within the limits permitted and required by applicable legislation.
Payment card details are not stored in the customer register when registering the payment card. Card details are entered into the card payment service, after which the card is verified in the payment card issuer's service. A payment key provided by the card payment service is saved in the Reissu mobile application's customer register only if the user has selected the option to save card details in the application.
Due to the technical implementation of data processing, some data may be located on cloud servers of external subcontractors outside of Semel's premises, and is processed via a technical connection.
Information may be transferred to the controller's designated partners who process the information on behalf of the controller, based on a cooperation agreement between the parties. In such cases, the data processor does not have the right to process the transferred information for their own purposes in their own personal data registers.
Registration data will not be disclosed outside the European Union or the European Economic Area.
Logging into the application requires a personal password. The use of the register and logins are monitored.
Information is collected into the service's shared databases, which are protected by firewalls and other technical means. The databases are located in locked and guarded premises, and only specific, pre-defined individuals have access to the information. The register consists solely of electronic material.
The data subject has the right to check what information concerning them has been stored in the personal data file. The data subject has the right to demand the correction of incorrect data.
Inspection and repair requests must be submitted in writing and signed to the following address:
Semel Oy
Inspection request / Personal register information / Trip
PL 1000
00380 Helsinki
A request for inspection can also be submitted at Valimotie 21, Helsinki.
The customer has the right to refuse direct marketing and the right to refuse other communications once they have deleted their profile from the service.
