Personal information in Navigora
Data content, storage and disclosure of personal data
Navigora’s registers (Navigora Oy as the controller) contain personal data in several personal data groups, such as company managers and company decision-makers. Personal data typically includes the name, contact information and position information of the company decision-maker. In addition, Navigora also processes personal data about the users of its services and its personnel as the controller.
Data resources and life cycle of personal data
Personal data is collected from trusted data sources. The information collected is necessary and is checked using various methods before being stored in the database. The information is retained for the necessary period. The retention period is defined for each data group/service separately. The retention periods are defined in the section “what information is collected in databases”.
Data life cycle
Collection of personal data
Personal data is collected from several different sources. Data sources and legal bases for processing are defined in the documentation related to the data processing of Navigora.
Personal data verification
The data is validated by automatic checks at Navigora.
The personal data stored in the registers of Navigora are defined in accordance with the requirements of the regulation.
Personal data must be: necessary, up-to-date and minimized. Personal data is always processed in accordance with the law.
Personal data in registers and systems
Personal data is stored in several different databases.
Access to the data is limited.
Data security has been taken into account sufficiently comprehensively.
Disclosure of personal data
To authorities, when required by regulation and legistlation.
To customers in accordance with a separate agreement.
To the data subject himself, when they exercise their right to receive this information.
Deletion of data
The rules for deleting data have been defined for each data group.
The retention periods for data have been defined for each register.
Personal data groups
Below are described the data contents, disclosures and data retention periods.
1. Business persons (responsible persons)
Data content
Information describing the position or task of the person and contact information. Official position information, such as members of the board of directors, managing director, partners of a general partnership and limited partnership, entrepreneur, business name holder, signatory, authorized signatory, shareholder, founding shareholder, auditor and administrator of the bankruptcy estate.
Information related to these positions: position, name, profession, address, domicile, start and/or end date of the position or date of the information, nationality.
In addition, possible information about the additional explanation provided by the data subject to the Trade Register information and the signature style of authorized signatories.
Disclosure of information
Information is disclosed to the data controller’s customers who have entered into a customer agreement with the data controller on the use of the information. Information is also disclosed without a permanent customer relationship, without identifying the user (including the open business information service of the Financial Observatory). Information about the company’s responsible person is also disclosed for direct marketing purposes and other addressed mailings.
Information is also disclosed from the register to the data subject based on the data subject’s request.
Data retention period
The information is updated regularly. The data controller deletes, corrects or supplements incorrect, unnecessary, incomplete or outdated information in the register on its own initiative or at the request of the data subject/registered employer without undue delay. The purpose of the data correction, supplementation or deletion is decisive.
The information is deleted in accordance with the Credit Information Act when a person resigns from the above-mentioned position. The aim is to delete the information within twelve (12) months of the resignation being entered in the Trade Register.
2. Company decision-maker information
Data content
The register contains information concerning the data subject’s duties or position in business or public office and is used to send information related to their work duties. Such information includes, among others, the person’s contact information.
The register also contains other information that the data controller considers necessary for the purpose of using the register.
The register also contains information regarding persons who have requested a ban on processing data (Article 21 of the Regulation).
Disclosure of information
Information from the register is disclosed to those who need the information to send the data subject information related to their work duties. The information can also be used for opinion or market research and for updating the customer register.
The terms of use of the information are agreed in customer agreements and/or terms of use.
The information is disclosed via a browser (web service) and as electronic files.
Users of the data are obliged to disclose the source of the address in their addressed communications and to comply with data protection regulations and regulations on the use of data in their own operations.
Data from the register is also disclosed to the data subject upon request.
Data retention period
The data is updated regularly. The controller deletes, corrects or supplements incorrect, unnecessary, incomplete or outdated data in the register on its own initiative or at the request of the registered person/registered employer without undue delay. The purpose of use of the data is decisive in correcting, supplementing or deleting it.
3. User data of Navigora online service
Data content
With regard to Navigora online service, there is only information about persons with contact information whose employers have a customer relationship with Navigora Oy. In addition, the register contains Navigora’s own staff who have user rights to the services.
There is information about the person’s position, job duties and other similar information that is relevant to managing the customer relationship and using the services. The registered persons are not themselves in a customer relationship with Navigora Oy.
Personal information of customers of Navigora online service:
First name
Last name
Contact information:
Email
Mobile phone number
Address
Postal code
Postal town
Marketing permissions by email or telephone
Information related to customer service and use of content, such as:
Start and end of Navigora online service subscription
User ID
Information about subscribed Navigora online service plan
Information about the functionality of advertising and direct marketing
Information about the use of the content of the online service
Information related to online shopping, such as purchase transactions and their times and payment transaction information
With the help of the cookies and other technologies described below, we can also collect information about how the user uses the site or our services.
Disclosure of information
Information about the user IDs of Navigora online service may be disclosed to the organization represented by the service user (e.g. employer).
Information from the register is also disclosed to the data subject based on the request made by the data subject.
We may disclose user data of the open business information service for justified purposes.
Information provided by users through the website may be disclosed to parties belonging to the following groups:
Service providers participating in the implementation of the website and our services, such as payment service providers
Authorities in cases where the law requires it
Data retention period
The controller will delete, correct or supplement, on its own initiative or at the request of the registered person or registered employer, incorrect, unnecessary, incomplete or outdated information in the register without undue delay. The decisive factor in correcting, supplementing or deleting the information is the purpose of use of the information, i.e. managing the customer relationship.
In the free-use part of Navigora online service, information is stored for the duration of the customer relationship and for twenty (24) months after the end of the customer relationship.
If the person has given marketing permission, the information is stored for five (5) years.
4. Navigora customer register
Information content
The register contains information only on persons with contact information whose employers have a customer relationship with Navigora Oy or which companies are potential customers of Navigora Oy.
The registered persons contain information on the employer, the person’s position, work duties and other similar information that is relevant to managing the customer relationship. The registered persons themselves are not in a customer relationship with Navigora Oy.
Disclosure of information
The information in the register is not disclosed to a third party.
Information from the register is disclosed to the registered person based on the request made by the latter.
Data retention period
The information is updated regularly. The controller deletes, corrects or supplements incorrect, unnecessary, incomplete or outdated information in the register on its own initiative or at the request of the registered person or the registered employer without undue delay. The purpose of the data is decisive in correcting, supplementing or deleting it.
5. Navigora marketing database
The purpose of processing personal data is to use the controller’s centralized marketing database for communication and marketing to customers, those registered for online services and those who have joined our marketing lists.
Data content
Contact and position information of decision-makers.
Disclosure of data
The data will not be disclosed to third parties.
Data from the register will also be disclosed to the data subject based on their request.
Data retention period
For the duration of the customer relationship, and five years for those registered for services and those who have joined marketing lists.
6. Navigora personnel data
Data content
The register only contains information about persons with contact information who are or have been employed by Navigora Oy.
Data groups:
basic personal information (date of birth, personal identification number, contact information)
information regarding employment
payroll information
education information
work history
possible information about security clearance
Disclosure of information
Annual declarations to pension companies and tax authorities.
Notifications to accident insurance companies.
For outsourced payroll accounting
Information from the register is also disclosed to the data subject upon request.
Data retention period
The data controller shall, on its own initiative or at the request of the data subject or the registered employer, delete, correct or supplement incorrect, unnecessary, incomplete or outdated information in the register without undue delay. The decisive factor in correcting, supplementing or deleting the information is the purpose of use of the information, i.e. the management of employment matters.
Statutory deletion periods are valid and applied for for stored personal information.
Disclosure of personal information to Navigora customers
Information is disclosed to Navigora customers and partners who have a legal basis for processing personal information (Finnish Credit Information Act, GDPR). Users of Navigora online service have personal user IDs for Navigora online service.
Below is a list of services in which personal data is transmitted. Registers containing personal data as data content are described separately in connection with data collection and processing. Personal data is transmitted as individual data elements and as part of reports.
The following personal data is transmitted by Navigora online service:
Company representatives and company decision-maker information (responsible persons, signatories)
A person’s business connections (responsible person positions limited in the Finnish Credit Information Act)
Company reports of the business information service in which personal data (name, email) is part of the reports (responsible persons, signatories, decision-makers)
Subscriber responsibility report (responsible person, signatorie)
Visitor data (cookie data via web service analytics)
Cookies
Navigora online service uses so-called cookies on its website to enable the user to use certain functions and to obtain information about visits to the website.
What are cookies?
A cookie is a small text file containing information that is stored on the user’s computer. There are two types of cookies. The first are so-called persistent cookies, which store the file on the user’s computer until the file is deleted. The second are so-called session cookies, which are deleted when the user closes the web browser.
What are cookies used for?
Session cookies are sent between the user’s computer and Navigora servers to obtain information about the user, for example, which user ID they use. In addition, third-party cookies are used to collect information about how the user uses the website, for example, which parts of the website they visit most often, with the aim of analyzing website usage and improving the user experience.
How can the user disable cookies?
The user can choose whether or not to accept cookies. The user can avoid receiving cookies by changing the settings of the web browser. However, this may result in the service not functioning properly. How to disable cookies depends on the web browser you are using. Instructions can be found in the web browser’s “Help” menu or similar menu.