Privacy Policy

Data Controller

Autollecom Oy Professorintie 11 B 90440 Kempele Business ID: 2661196-9 / 3238762-5

Register Name

Autollecom Oy Customer Register

Purpose of Processing Personal Data

The main purpose of collecting and storing personal data is to serve you in vehicle financing matters. Your personal data is used for automated decision-making when applying for a credit decision for you.

Your personal data may also be used for the following purposes:

• Checking credit information in connection with purchase transactions.
• With your consent, in customer communication and marketing, including direct marketing and targeted marketing.
• With your consent, for service maintenance, development and quality assurance.
• To implement Autollecom Oy's legitimate interest. When we process your personal data based on legitimate interest, we weigh the benefits of the processing and any potential harm to you, and have assessed that your rights and interests do not override our legitimate interest in processing your personal data.
• To comply with statutory obligations. For example, accounting obligations and customer identification obligations require the processing and retention of personal data.

The legal basis for processing your personal data depends on the purposes for which your personal data is processed.

Personal Data Collected

Providing personal data is a prerequisite for using Autollecom Oy's services and forming a contract. We primarily collect the necessary personal data from you. In situations permitted by law, your personal data may also be collected and updated from registers maintained by third parties, such as credit registers of credit information companies, the traffic affairs register, the population register, or other similar public or private registers, as well as from our partners. Only data necessary for the implementation of our services and the formation of a contract is collected and stored from you regarding the following:

• First names and surname / full name of legal entity
• Personal identity code / business ID
• Address
• Email address
• Phone number
• Occupation and employment information
• Nationality
• Marital status
• Information about any representative you may use.
• Vehicle make, model, registration number, serial number and other vehicle identification data necessary for customer relationship management.
• Information about customer relationships and contracts that varies case by case, such as credit application information, creditworthiness information, debt collection information, authority register information and bank account information.

Cookies and Browsing Tracking

We may collect information about the user's device using cookies and other similar technologies, such as the browser's local storage. A cookie is a small text file that the browser saves on the user's device. Cookies often contain an anonymous, unique identifier that allows us to identify and count browsers visiting our site. Third parties may place cookies on the user's device when the user visits our services to track visitor numbers across different websites. Our services may also contain links to other websites and services. We are not responsible for the privacy practices or content of these external websites. We recommend reviewing the privacy terms of these services. For more information, please see our separate cookie policy.

Retention of Personal Data

We retain your personal data for as long as necessary to fulfill the purposes defined in this privacy policy, unless legislation requires us to retain your personal data longer. If your personal data is needed for litigation or other legal proceedings to investigate, prepare, present, defend or resolve a legal claim, we may retain and use your personal data for the duration required by the proceeding in question.

Register Security and Data Storage

Depending on the data storage platform, data is stored behind locks and/or passwords. Access control is arranged appropriately, reliably and securely. Only certain, predetermined parties have access to the register. Data is retained in accordance with applicable legislation at any given time.

Protection of Personal Data

We process your personal data confidentially and securely. Your personal data is protected against unauthorized and unlawful processing as well as accidental loss, destruction or damage. We use appropriate technical and organizational safeguards. Access control to our premises and technical protections of the systems we use are arranged appropriately. Depending on the storage platform of your personal data, your personal data is protected by locks and/or passwords. Only certain, predetermined parties have access to personal data. Personal data and documents containing personal data are destroyed securely.

Disclosure of Personal Data

As a rule, your personal data is not disclosed to third parties for marketing purposes. Your personal data may be disclosed to our partners with your consent. We may use various service providers in the processing of your personal data, such as IT service providers and accounting and financial administration service providers.

We may have to disclose your personal data to third parties in the following situations:

• When you purchase a service or product from our partner, such as vehicle insurance, we disclose the necessary information to our partner for the delivery of the service or product.
• In warranty repairs and other similar actions where we use subcontractors, we disclose the necessary information to subcontractors to perform the task.
• To authorities who have a legal right to obtain personal data from the register. For example, in connection with traffic violations and crimes, and regarding suspicious transactions possibly related to money laundering, we are obligated to disclose the information requested by authorities.
• In emergencies or other unexpected situations, for example to protect people's lives and health and property.
• When we are involved in litigation or other legal proceedings.
• When we are involved in a merger, business acquisition or other corporate arrangement.

Transfer of Personal Data Outside the EU or EEA

Your personal data is not transferred outside the EU or EEA.

Rights of the Data Subject

You have the right to:

• Receive information about whether we process your personal data.
• Receive a copy of the personal data we process about you.
• Demand the correction of inaccurate and imprecise personal data.
• Demand the deletion of your personal data.
• Demand the restriction of processing of your personal data.
• Object to the processing of your personal data.
• Object to the processing of your personal data based on legitimate interest.
• Withdraw your consent if the processing of your personal data is based on your consent.
• Prohibit direct marketing targeted at you.
• Have your personal data transferred to another data controller, if technically possible.

If we refuse your request for correction, deletion, restriction of processing, objection to processing or transfer of your personal data mentioned above, we will inform you of the matter and its justifications.

You can send inquiries and requests regarding your personal data to rekisterointi@autolle.com.

Exercising your rights is generally free of charge. However, we may charge a reasonable fee corresponding to administrative costs for fulfilling the request or refuse to perform the requested action if the request is manifestly unfounded or unreasonable. If a fee is to be charged for fulfilling your request, we will contact you. If we refuse to perform the action you requested, we will inform you in writing of our refusal with justifications.

If you believe that your personal data has been processed in violation of the law, you have the right to bring the matter to the competent data protection authority or use other legal remedies. However, we ask you to first contact us if you have questions or comments about the processing of your personal data.