Danske Finance Ltd Privacy notice

Transcription

1 Danske Finance Ltd Privacy ntice Persnal custmers Danske Finance Ltd is a financing cmpany that ffers applicable financing slutins fr the prcurement purpses f each custmer. This privacy ntice describes hw we, as the data cntrller, prcess yur persnal data in different functins f Infrmatin abut the data cntrller is available n ur website. Why d we save and use yur persnal data? We save and use yur persnal data s that we can ffer yu the best pssible advice and slutins cnsidering yur situatin, enter int agreements with yu, fulfil ur statutry bligatins and carry ut and develp ur services. We nly save and use yur persnal data if we have legal grunds t d s. This means that we save and use persnal data when: Yu have signed r are cnsidering signing an agreement n a prduct r service we are ffering (GDPR art. 6.1(b)). Yu have given yur cnsent t the use f yur persnal data fr a specific purpse (GDPR art. 6.1(a)). This is ur statutry bligatin (GDPR art. 6.1(c)) in accrdance with the fllwing acts, fr example: Act n Detecting and Preventing Mney Laundering and Terrrist Financing Tax Assessment Prcedure Act Cnsumer Prtectin Act Act n Strng Electrnic Identificatin and Electrnic Signatures Credit Infrmatin Act Act n Credit Institutins Payment Services Act Act n the Prtectin f Privacy in Electrnic Cmmunicatins This is necessary in rder t prtect the legitimate interests f Danske Finance Ltd r a third party. Fr example, this means preventing any unauthrised use and lsses, safeguarding infrmatin security and safe payments and/r marketing ur services. We nly act in this way if the basic rights and liberties requiring persnal data prtectin d nt supersede legitimate interests as the basis f prcessing (GDPR art. 6.1(f)). Rekisteröity ktipaikka ja site Helsinki, Televisikatu 1, PL 1275, DANSKE BANK. Registrerad hemrt ch adress Helsingfrs, Televisinsgatan 1, PB 1275, DANSKE BANK. Registered dmicile and address Helsinki, Televisikatu 1, P.O Bx 1275, FI DANSKE

2 What type f persnal data d we save and use? We save and use the fllwing persnal data: Yur name, cntact infrmatin, persnal identity cde and custmer identifier Cpies f yur identity dcuments, such as yur passprt, driving licence r any fficial certificates Infrmatin abut yur educatin, prfessin r wrk Yur financial infrmatin, such as infrmatin abut yur incme, securities, r yur lan r credit rating Infrmatin abut the cmpletin f any military service (men under 30 years) Relatinship with the bank r a cmpany in the same Grup (e.g. persnnel) Infrmatin abut yur family and husehld, such as frm f husing Infrmatin related t prducts and services we have delivered t yu Digital infrmatin related t the use f ur websites, systems and digital applicatins, such as infrmatin abut use, lcatin and ther cmmunicatin Infrmatin abut the devices yu have used t access ur websites and technical infrmatin, such as the device type and perating system Infrmatin necessary in rder t fulfil the bligatins f the Act n Detecting and Preventing Mney Laundering and Terrrist Financing, such as infrmatin abut plitically influential persns Telephne cnversatins Infrmatin abut specific persnal data grups We nly save data abut specific persnal data grups when this is necessary in rder t give advice r t ffer a prduct r service t yu. We ask yu t express cnsent t saving infrmatin abut specific persnal data grups (GDPR art. 9.2(a)), unless we are legally authrised t save it withut yur cnsent (GDPR art. 9.2(f)), fr example, in rder t fulfil legal requirements. Our ability t ffer the best pssible advice and slutins t yu largely depends n hw well we knw yu. This is why it is imprtant that the infrmatin yu prvide is crrect and accurate, and that yu keep us infrmed f any changes in yur persnal data. Why and hw d we save and use yur persnal data? We save and use yur persnal data in rder t ffer yu services, such as: Financing prducts fr varius purchases Electrnic transactin slutins We als save and use yur persnal data fr ther purpses related t the prvisin f specific prducts and services, such as: Custmer service, advice and management Rekisteröity ktipaikka ja site Helsinki, Televisikatu 1, PL 1275, DANSKE BANK. Registrerad hemrt ch adress Helsingfrs, Televisinsgatan 1, PB 1275, DANSKE BANK. Registered dmicile and address Helsinki, Televisikatu 1, P.O Bx 1275, FI DANSKE

3 Evaluatin f the creditwrthiness Develpment and management f ur prducts, services and business peratins Marketing ur prducts and services Defining the prices and fees f ur prducts and services Identifying and authenticating ur custmers Risk management Cllecting utstanding debts Prtecting Danske Finance Ltd and its custmers against misuse Fllwing statutry requirements Custmer authenticatin data and ther persnal data can be used t prevent, discver and investigate mney laundering and terrrist financing, and t subject mney laundering and terrrist financing and the criminal activity with which the asset r benefit targeted by mney laundering r terrrist financing has been btained t an investigatin. We cllect persnal data directly frm yu, fr example, when: Yu cmplete applicatins and ther frms t rder prducts and services. Yu send us dcuments. Yu call us. We will tell yu if we recrd ur telephne cnversatins. Yu use ur websites, prducts and services. Yu take part in ur custmer surveys r campaigns. In additin, we may cllect data abut yu frm third parties as described in sectin "Third parties and yur persnal data." Hw lng d we stre yur persnal data? We nly stre yur persnal data fr as lng as is necessary cnsidering the purpse f use, fr which yur data was riginally saved and used. As a result, we stre yur persnal data fr as lng as we are in a cntractual relatinship with yu. When the cntractual relatinship ends, we will stre yur data fr ten (10) years after the end f the agreement. This is defined in the Act n the Statute f Limitatins n Debt. In sme cases, the strage perid is different. Fr example: Accrding t the Act n Detecting and Preventing Mney Laundering and Terrrist Financing, we stre data fr at least five (5) years after the end f a business relatinship r a single transactin. If yur data is related t applicatins nt leading t an agreement, we stre yur data fr five (5) years after the applicatin in rder t prevent any misuse. Rekisteröity ktipaikka ja site Helsinki, Televisikatu 1, PL 1275, DANSKE BANK. Registrerad hemrt ch adress Helsingfrs, Televisinsgatan 1, PB 1275, DANSKE BANK. Registered dmicile and address Helsinki, Televisikatu 1, P.O Bx 1275, FI DANSKE

4 Third parties and yur persnal data Yur persnal data disclsed by third parties We save and use yur persnal data btained frm third parties, such as: Banks and ther payment service prviders in cnjunctin with payment transactins The Ppulatin Register Centre and ther public surces and registers. We save and use infrmatin btained frm these surces, fr example, t check the crrectness f yur persnal data. Credit rating institutins. We save and use yur persnal data btained frm these surces t assess yur credit rating, and we update this data regularly. Sumen Asiakastiet Oy Danske Bank Grup s units Our ther partners Third parties t which we disclse yur persnal data We can disclse yur persnal data within the Danske Bank Grup r t third parties in the fllwing situatins: We can disclse yur persnal data t the authrities in different situatins defined in the legislatin, such as tax fficials, the plice and executin and supervisry authrities. If yu have given yur cnsent r if this is permitted in accrdance with the valid legislatin, we can disclse yur persnal data within the Danske Bank Grup and t its external parties. If yu fail t fulfil yur bligatins twards Danske Finance Ltd, we can reprt it t credit rating institutins in accrdance with applicable regulatins. We transfer yur persnal data t data prcessrs perating in ur name, including data prcessrs lcated utside the EU and the EEA, and t Danske Bank India fr ICT develpment, maintenance and supprt. We ensure that yur rights are prtected and that yur data privacy is maintained in data transfers by fllwing standard cntractual clauses apprved by the Eurpean Cmmissin. Yu can btain a cpy f a standard cntractual clause by cntacting us. Prfiling and autmated decisins Prfiling means that yur persnal data is prcessed autmatically. We use prfiling and mdelling, fr example, t ffer targeted prducts and services, prevent mney laundering, define the prices f specific prducts and services, discver any misuse and assciated risks, assess the prbability f the nn-payment risk, evaluate assets and carry ut marketing activities. Autmated decisins mean that we use ur systems t make decisins n the basis f the infrmatin we have abut yu. Fr example, we use autmated decisins t make credit decisins and t prevent any misuse. Thrugh autmated decisins, we aim t ensure that ur decisins are quick, fair, efficient and accurate. Rekisteröity ktipaikka ja site Helsinki, Televisikatu 1, PL 1275, DANSKE BANK. Registrerad hemrt ch adress Helsingfrs, Televisinsgatan 1, PB 1275, DANSKE BANK. Registered dmicile and address Helsinki, Televisikatu 1, P.O Bx 1275, FI DANSKE

5 Yur rights Viewing persnal data Yu can view yur persnal data we have saved and use, and btain infrmatin abut where the data has been btained and fr what purpses we use it. Yu can als btain infrmatin abut hw lng we stre yur persnal data and wh has access t yur persnal data, insfar as we disclse it. Hwever, the legislatin, the prtectin f ther peple's persnal data and any limitatins set by ur business activities and practices may restrict yur right t btain infrmatin. Furthermre, ur knw-hw, business secrets and internal audits and material can be excluded frm yur rights t btain infrmatin. Manual prcessing Yu can btain infrmatin abut hw an autmated decisin was made and what cnsequences the decisin has. Yu als have the right t request an autmated assessment t be prcessed manually. Right t bject t prcessing Yu have the right, in certain situatins, t bject t the prcessing f yur persnal data, fr example, when we prcess yur persnal data fr direct marketing r prfiling n the basis f legitimate interests. Refusing direct marketing Yu have the right t refuse the use f yur persnal data fr direct marketing, including any prfiling related t such purpse f use. Crrecting r erasing yur persnal data held by Danske Finance Ltd If yur persnal data is incrrect, incmplete r irrelevant, yu have the right t request that the data is crrected r erased. This means that yu have the right t have yur data rectified r erased and the right t be frgtten. Restricted use Yu can require that we restrict the use f yur persnal data t saving it, fr example, in situatins where the data we have saved abut yu is incrrect r where yu have bjected t the use f yur persnal data. Hwever, we may have the right t use yur data fr ther purpses, regardless f any restrictins, in rder t prepare a legal claim r if yu have given yur cnsent t it. Withdrawing cnsent If the prcessing f yur persnal data is based n yur cnsent, yu can, at any time, withdraw yur cnsent t the prcessing f yur persnal data. Please nte that, if yu withdraw yur cnsent, we may nt be able t ffer yu specific prducts r services. Hwever, we can cntinue t prcess yur persnal data, even if yu have withdrawn yur cnsent, if we are entitled t d s n the basis f legislatin. Rekisteröity ktipaikka ja site Helsinki, Televisikatu 1, PL 1275, DANSKE BANK. Registrerad hemrt ch adress Helsingfrs, Televisinsgatan 1, PB 1275, DANSKE BANK. Registered dmicile and address Helsinki, Televisikatu 1, P.O Bx 1275, FI DANSKE

6 Transfer f data If we use yur persnal data n the basis f yur cnsent r an agreement and yur persnal data is prcessed autmatically, yu have the right t btain a cpy f the data yu have prvided in electrnic cmputer-readable frmat and t transfer this data t a third party. Changes in the ntice We may revise this privacy ntice, fr example, if there are changes in legislatin. We aim t take reasnable actin in rder t ntify yu f any changes and their impact well befrehand. We advise yu t read this privacy ntice whenever yu btain infrmatin abut any changes in it. Cntact infrmatin and cmplaints Yu can cntact us at any time if yu have any questins abut yur rights t prtect yur persnal data r abut the saving and use f yur persnal data. Yu can send a cntact request by cmpleting the nline frm at r by calling the telephne service f Danske Finance Ltd Yu can als cntact ur data prtectin functin dpfunctin@danskebank.cm. Yu can file a cmplaint with the Data Prtectin Ombudsman: Data Prtectin Ombudsman, Ratapihantie 9, Helsinki, tietsuja@m.fi. Rekisteröity ktipaikka ja site Helsinki, Televisikatu 1, PL 1275, DANSKE BANK. Registrerad hemrt ch adress Helsingfrs, Televisinsgatan 1, PB 1275, DANSKE BANK. Registered dmicile and address Helsinki, Televisikatu 1, P.O Bx 1275, FI DANSKE