Register and Privacy Policy

Register and Privacy Policy of Sila Invest Oy in accordance with the Finnish Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Prepared on 24 May 2018. Last updated on 17 June 2026.

1. Controller

Sila Invest Oy
Vanajantie 6 A, 13110 Hämeenlinna
Tel. 03 653 7666
[email protected]
Business ID: 0348489-9

2. Contact person responsible for the register

Kai Rantanen, [email protected], 03 6537666

3. Name of the register

Sila Invest Oy customer register

4. Legal basis and purpose of processing personal data

The legal basis for processing personal data under the EU General Data Protection Regulation is
– the person’s consent documented, voluntary, specific, informed and unambiguous
– the legitimate interest of the controller customer relationship.

The purpose of processing personal data is communication with customers. The data is not used for automated decision-making or profiling.

5. Data content of the register

The data stored in the register includes: the person’s name, contact details phone number, email address, IP address of the network connection, information about ordered services and changes to them, and other information related to the customer relationship and ordered services.

The data is stored for 5 years, after which it is deleted.

6. Regular sources of data

The data stored in the register is obtained from the customer, for example through messages sent via website forms, by email, by phone and in other situations where the customer provides their information.

7. Regular disclosures of data and transfer of data outside the EU or EEA

Data is not regularly disclosed to other parties. Data is also not transferred by the controller outside the EU or EEA.

8. Principles of register protection

The register is handled with care, and data processed through information systems is protected appropriately. When register data is stored on Internet servers, the physical and digital security of the server hardware is handled appropriately. The controller ensures that stored data, server access rights and other information critical to the security of personal data are handled confidentially and only by employees whose duties require it.

9. Right of access and right to request rectification

Every person included in the register has the right to access the data stored about them in the register and to request the correction of any incorrect information or the completion of any incomplete information. If a person wishes to access the data stored about them or request rectification, the request must be sent in writing to the controller. The controller may, if necessary, ask the person making the request to prove their identity. The controller will respond to the customer within the time specified in the EU General Data Protection Regulation usually within one month.

10. Other rights related to the processing of personal data

A person included in the register has the right to request the deletion of personal data concerning them from the register “the right to be forgotten”. Registered persons also have other rights under the EU General Data Protection Regulation, such as the right to restrict the processing of personal data in certain situations. Requests must be sent in writing to the controller. The controller may, if necessary, ask the person making the request to prove their identity. The controller will respond to the customer within the time specified in the EU General Data Protection Regulation usually within one month.

 

This privacy policy has been translated from Finnish for informational purposes. In case of any discrepancies, the Finnish version shall prevail.