Danske Finance Ltd Privacy notice

Transcription

1 Danske Finance Ltd Privacy ntice Business custmers Danske Finance Ltd is a financing cmpany that ffers applicable financing slutins fr prcurement purpses f each custmer. This privacy ntice describes hw we, as the data cntrller, prcess yur persnal data as a persn related t ne f the business custmers f Infrmatin abut the cntrller is available n ur website. Why d we save and use yur persnal data? We must save and use data related t yu (persnal data) in rder t carry ut business activities when yu use ur services as a persn related t ne f ur crprate custmers. Yu may be a persn authrised t sign fr yur cmpany; a sharehlder and beneficiary; a manager, emplyee, guarantr r pledger; r a third party cnnected t ne f ur custmers. We can prcess yur persnal data fr the fllwing purpses, depending n why yu use ur services: Management f agreements and cntractual relatinships Fulfilment f ur cntractual bligatins and prvisin f prducts and services fr custmers Cmpliance with applicable laws, including legislatin n mney laundering Administrative purpses, such as the prtectin and maintenance f ur internal systems, envirnments and ther digital applicatins Maintenance f a sufficient level f prtectin when yu visit ur facilities Supervisry activities in rder t prevent any fraud and financial crime Custmer relatinship management, such as marketing prducts and services Implementatin and develpment f ur services Custmer authenticatin data and ther persnal data can be used t prevent, discver and investigate mney laundering and terrrist financing, and t subject mney laundering and terrrist financing and the criminal activity with which the asset r benefit targeted by mney laundering r terrrist financing has been btained t an investigatin. We nly save and use yur persnal data if we have legal grunds t d s. This means that we save and use persnal data when: Yu have signed r are cnsidering signing an agreement n a prduct r service we are ffering (GDPR art. 6.1(b)). Yu have given yur cnsent t use yur persnal data fr a specific purpse (GDPR art. 6.1(a)). This is ur statutry bligatin (GDPR art. 6.1(c)) in accrdance with the fllwing acts, fr example: Act n Detecting and Preventing Mney Laundering and Terrrist Financing Tax Assessment Prcedure Act Rekisteröity ktipaikka ja site Helsinki, Televisikatu 1, PL 1275, DANSKE BANK. Registrerad hemrt ch adress Helsingfrs, Televisinsgatan 1, PB 1275, DANSKE BANK. Registered dmicile and address Helsinki, Televisikatu 1, P.O Bx 1275, FI DANSKE

2 Cnsumer Prtectin Act Act n Strng Electrnic Identificatin and Electrnic Signatures Credit Infrmatin Act Act n Credit Institutins Payment Services Act Act n the Prtectin f Privacy in Electrnic Cmmunicatins This is necessary in rder t prtect the legitimate interests f Danske Finance Ltd r its crprate custmers. This may mean that we r ur crprate custmer has grunds based n business r cmmercial activities, such as the management f prducts and services requested by a custmer and the prvisin f access rights t digital services, the use f yur persnal data, the preventin f unauthrised use and lss, the imprvement f infrmatin security and payment security, and/r the marketing f ur services. We nly act in this way if the basic rights and liberties requiring persnal data prtectin d nt supersede legitimate interests as the basis f prcessing (GDPR art. 6.1(f)). What type f persnal data d we save and use? We save and use the fllwing persnal data: Persnal infrmatin, such as name, address, prfessin, cntact infrmatin, cuntry f residence, persnal identity cde and date f birth Identity dcuments, such as a cpy f a passprt r driving licence, r ther statutry dcuments Infrmatin related t educatin, prfessin, wrk, expertise and experience Infrmatin abut yur visits t ur facilities Digital infrmatin related t the use f ur websites, systems and digital applicatins, such as infrmatin abut use, lcatin and ther cmmunicatin Infrmatin abut the devices yu have used t access ur websites and technical infrmatin, such as the device type and perating system Infrmatin necessary in rder t fulfil the bligatins f the Act n Detecting and Preventing Mney Laundering and Terrrist Financing, such as infrmatin abut actual beneficiaries f cmpanies and plitically influential persns Telephne cnversatins Infrmatin abut specific persnal data grups We save infrmatin abut specific persnal data grups if legislatin s requires r if yu take part in an event we have rganised. We request yur express cnsent t saving infrmatin abut specific persnal data grups (GDPR art. 9.2(a)), unless we are legally authrised t save it withut yur cnsent (GDPR art. 9.2(f)), fr example, in rder t fulfil legal claims. Our ability t ffer the best pssible advice and slutins t yu largely depends n hw well we knw yu. This is why it is imprtant that the infrmatin yu prvide is crrect and accurate, and that yu keep us infrmed f any changes in yur persnal data. Rekisteröity ktipaikka ja site Helsinki, Televisikatu 1, PL 1275, DANSKE BANK. Registrerad hemrt ch adress Helsingfrs, Televisinsgatan 1, PB 1275, DANSKE BANK. Registered dmicile and address Helsinki, Televisikatu 1, P.O Bx 1275, FI DANSKE

3 Hw lng d we stre yur persnal data? We stre yur persnal data fr as lng as is necessary cnsidering the purpse f use fr which yur data was riginally saved and used. As a result, we stre yur data fr as lng as we are in a cntractual relatinship with yur cmpany, n the basis f which we prcess yur data. When the cntractual relatinship ends, we will stre yur data, in additin t the afrementined, fr ten (10) years after the end f the agreement. This is defined in the Act n the Statute f Limitatins n Debt. In sme cases, the strage perid is different. Fr example: Accrding t the Act n Detecting and Preventing Mney Laundering and Terrrist Financing, we stre data fr at least five (5) years after the end f a business relatinship r a single transactin. If yur data is related t applicatins nt leading t an agreement, we stre yur data fr five (5) years after the applicatin in rder t prevent any misuse. Third parties and yur persnal data Yur persnal data disclsed by third parties We save and use yur persnal data btained directly frm yu r frm third parties, such as: Yur emplyer r the cmpany yu represent Banks and ther payment service prviders in cnjunctin with payment transactins The Ppulatin Register Centre and ther public surces and registers. We save and use infrmatin btained frm these surces, fr example, t check the crrectness f yur persnal data. Credit rating institutins. We save and use yur persnal data btained frm these surces t assess yur credit rating, and we update this data regularly. Sumen Asiakastiet Oy Danske Bank Grup s units Our ther partners Third parties t which we disclse yur persnal data We can disclse yur persnal data within the Danske Bank Grup r t third parties in the fllwing situatins: We can disclse yur persnal data t the authrities in different situatins defined in the legislatin, such as tax fficials, the plice and executin and supervisry authrities. If yu have given yur cnsent r if this is permitted in accrdance with the valid legislatin, we can disclse yur persnal data within the Danske Bank Grup and t its external parties. Rekisteröity ktipaikka ja site Helsinki, Televisikatu 1, PL 1275, DANSKE BANK. Registrerad hemrt ch adress Helsingfrs, Televisinsgatan 1, PB 1275, DANSKE BANK. Registered dmicile and address Helsinki, Televisikatu 1, P.O Bx 1275, FI DANSKE

4 If yu fail t fulfil yur bligatins twards Danske Finance Ltd, we can reprt it t credit rating institutins in accrdance with applicable regulatins. We transfer yur persnal data t data prcessrs perating in ur name, including data prcessrs lcated utside the EU and the EEA, and t Danske Bank India fr ICT develpment, maintenance and supprt. We ensure that yur rights are prtected and that yur data privacy is maintained in data transfers by fllwing standard cntractual clauses apprved by the Eurpean Cmmissin. Yu can btain a cpy f a standard cntractual clause by cntacting us. Prfiling and autmated decisins Prfiling means that yur persnal data is prcessed autmatically. We use prfiling and mdelling, fr example, t ffer targeted prducts and services, prevent mney laundering, define the prices f specific prducts and services, discver any misuse and assciated risks, assess the prbability f the nn-payment risk, evaluate assets and carry ut marketing activities. Autmated decisins means that we use ur systems t make decisins n the basis f the infrmatin we have abut yur cmpany and its respnsible persns. Fr example, we use autmated decisins t make credit decisins and t prevent any misuse. Thrugh autmated decisins, we aim t ensure that ur decisins are quick, fair, efficient and accurate. Yur rights Viewing persnal data Yu can view yur persnal data we have saved and use, and btain infrmatin abut where the data has been btained and fr what purpses we use it. Yu can als btain infrmatin abut hw lng we stre yur persnal data and wh has access t yur persnal data, insfar as we disclse it. Hwever, the legislatin, the prtectin f ther peple's persnal data and any limitatins set by ur business activities and practices may restrict yur right t btain infrmatin. Furthermre, ur knw-hw, business secrets and internal audits and material can be excluded frm yur rights t btain infrmatin. Right t bject t prcessing Yu have the right, in certain situatins, t bject t the prcessing f yur persnal data, fr example, when we prcess yur persnal data fr direct marketing r prfiling n the basis f legitimate interests. Refusing direct marketing Yu have the right t refuse the use f yur persnal data fr direct marketing, including any prfiling related t such purpse f use. Rekisteröity ktipaikka ja site Helsinki, Televisikatu 1, PL 1275, DANSKE BANK. Registrerad hemrt ch adress Helsingfrs, Televisinsgatan 1, PB 1275, DANSKE BANK. Registered dmicile and address Helsinki, Televisikatu 1, P.O Bx 1275, FI DANSKE

5 Crrecting r erasing yur persnal data held by Danske Finance Ltd If yur persnal data is incrrect, incmplete r irrelevant, yu have the right t request that the data is crrected r erased. This means that yu have the right t have yur data rectified r erased and the right t be frgtten. Restricted use Yu can require that we restrict the use f yur persnal data t saving it, fr example, in situatins where the data we have saved abut yu is incrrect r where yu have bjected t the use f yur persnal data. Hwever, we may have the right t use yur data fr ther purpses, regardless f any restrictins, in rder t prepare a legal claim r if yu have given yur cnsent t it. Withdrawing cnsent If the prcessing f yur persnal data is based n yur cnsent, yu can, at any time, withdraw yur cnsent t prcessing yur persnal data. Please nte that, if yu withdraw yur cnsent, we may nt be able t ffer yu specific prducts r services. Hwever, we can cntinue t prcess yur persnal data, even if yu have withdrawn yur cnsent, if we are entitled t d s n the basis f the legislatin. Transfer f data If we use yur persnal data n the basis f yur cnsent r an agreement and yur persnal data is prcessed autmatically, yu have the right t btain a cpy f the data yu have prvided in electrnic cmputer-readable frmat and t transfer this data t a third party. Changes in the ntice We may revise this privacy ntice, fr example, if there are changes in the legislatin. We aim t take reasnable actin in rder t ntify yu f any changes and their impact well befrehand. We advise yu t read this privacy ntice whenever yu btain infrmatin abut any changes in it. Cntact infrmatin and cmplaints Yu can cntact us at any time if yu have any questins abut yur rights t prtect yur persnal data r abut the saving and use f yur persnal data. Yu can send a cntact request in nline banking services, by cmpleting the nline frm at r by calling the telephne service f Danske Finance Ltd Yu can als cntact ur data prtectin functin dpfunctin@danskebank.cm. Yu can file a cmplaint with the Data Prtectin Ombudsman: Data Prtectin Ombudsman, Ratapihantie 9, Helsinki, tietsuja@m.fi. Rekisteröity ktipaikka ja site Helsinki, Televisikatu 1, PL 1275, DANSKE BANK. Registrerad hemrt ch adress Helsingfrs, Televisinsgatan 1, PB 1275, DANSKE BANK. Registered dmicile and address Helsinki, Televisikatu 1, P.O Bx 1275, FI DANSKE