{"id":219306,"date":"2019-04-05T13:49:10","date_gmt":"2019-04-05T10:49:10","guid":{"rendered":"https:\/\/www.oral.fi\/stakeholder-and-partner-register-privacy-policy-statement\/"},"modified":"2022-06-01T11:28:16","modified_gmt":"2022-06-01T08:28:16","slug":"stakeholder-and-partner-register-privacy-policy-statement","status":"publish","type":"page","link":"https:\/\/www.oral.fi\/en\/information\/information-for-customers\/data-protection\/stakeholder-and-partner-register-privacy-policy-statement\/","title":{"rendered":"Stakeholder and partner register privacy policy statement"},"content":{"rendered":"<h3>Controller<\/h3>\n<p>Name: Oral Hammasl\u00e4\u00e4k\u00e4rit Ltd<br \/>\nBusiness ID: 2863321-3<br \/>\nPostal and street address: Tekniikantie 4 A, FI-02150 Espoo, Finland<br \/>\nTel.: +358 (0)10 400 3010 (switchboard)<\/p>\n<h3>Contact person for register matters<\/h3>\n<p>Name: Sanna Elomaa<br \/>\nEmail: tietosuojavastaava@oral.fi<\/p>\n<h3>Register name<\/h3>\n<p>Stakeholder and partner register of the Oral Group<\/p>\n<h3>The legal basis for the processing of personal data<\/h3>\n<p>The legal bases for the processing of personal data are Oral\u2019s legitimate interest (for instance, stakeholder relationship or some other appropriate connection) and the agreement between Oral and its partner. The processing can also be based on the data subject\u2019s consent.<\/p>\n<h3>The purpose of the processing of personal data<\/h3>\n<p>The purposes of the processing of personal data in the register are:<\/p>\n<p>\u2022 Communications between Oral and its stakeholders and partners<br \/>\n\u2022 Managing, maintaining and developing stakeholder and partner relationships<br \/>\n\u2022 Planning and developing Oral\u2019s business operations<br \/>\n\u2022 Executive search for health care professionals for recruitment purposes<\/p>\n<h3>Categories of data subjects<\/h3>\n<p>Stakeholder personnel (e.g. health care professionals) and contact persons of existing as well as potential partners.<\/p>\n<h3>Data content of the register<\/h3>\n<p><strong>The register may contain the following personal data of stakeholder personnel:<\/strong><\/p>\n<p>\u2022 name<br \/>\n\u2022 title, profession, position or role in the company<br \/>\n\u2022 name of the employer<br \/>\n\u2022 contact details (postal address, email address and telephone number)<br \/>\n\u2022 year of birth<br \/>\n\u2022 registration number (JulkiTerhikki)<br \/>\n\u2022 health care professional\u2019s practice rights<br \/>\n\u2022 information on education and work experience<br \/>\n\u2022 revenue data<br \/>\n\u2022 data related to communications (e.g. e-mail)<br \/>\n\u2022 possible additional information provided directly by the data subject<\/p>\n<p><strong>The register may contain the following personal data of the contact persons of the partners:<\/strong><\/p>\n<p>\u2022 name<br \/>\n\u2022 title, profession, position or role in the company<br \/>\n\u2022 company name<br \/>\n\u2022 contact details (postal address, email address and telephone number)<br \/>\n\u2022 data related to communications (e.g. e-mail)<br \/>\n\u2022 possible additional information provided directly by the data subject<\/p>\n<h3>Regular sources of the register\u2019s data<\/h3>\n<p>The data can be collected directly from the data subject e.g. by phone, online, in meetings and through other forms of contact. Personal data can also be collected from the data subject\u2019s employer or from external service providers (such as Alma Talent Tietopalvelut).<\/p>\n<p>For executive searches in particular, personal data can also be collected and updated through publicly available data sources such as the websites of companies and organisations as well as public registers (for example, the central register of social welfare and health care professionals, JulkiTerhikki).<\/p>\n<h3>Regular disclosure of data<\/h3>\n<p>The personal data are not regularly disclosed to third parties. However, personal data can be disclosed to companies located in Finland or abroad that belong to the same Group.<br \/>\nTransfer of data outside the EU or EEA: The personal data are not transferred outside the European Union or the European Economic Area.<\/p>\n<p>In exception to the above, the personal data of health care professionals may be transferred to a Group company in Switzerland for the approval of recruitments or various company arrangements. The legality of the transfer of personal data to Switzerland is based on the European Commission\u2019s decision concerning the adequate level of data protection.<\/p>\n<h3>The principles of register protection<\/h3>\n<p>The register\u2019s data are stored in data systems that use technical and programmatic measures to ensure a sufficient level of data security. Each person using the register has a personal user ID and password to access the system. Only designated people have access to the data in the register to the extent necessary for the purposes of performing their tasks.<\/p>\n<h3>Data retention period<\/h3>\n<p>The personal data in the register are retained for as long as necessary for the purposes of the register. Oral shall regularly assess the necessity of retaining the data and Oral shall take care of such reasonable measures that ensure that no personal data related to the data subjects that are obsolete, inaccurate or incompatible with the purpose of the processing of the personal data are stored in the register.<\/p>\n<h3>Rights of the data subject<\/h3>\n<p><strong>Right to inspection<br \/>\n<\/strong>Data subjects have the right to inspect the personal data on them stored in Oral\u2019s stakeholder and partner register. The inspection request must be submitted to the contact person of the register in writing.<\/p>\n<p><strong>Right to request the rectification of data<br \/>\n<\/strong>Data subjects have the right to request the rectification of inaccurate personal data concerning them. The rectification request must be submitted to the contact person of the register in writing.<\/p>\n<p><strong>Right to request the erasure of data<br \/>\n<\/strong>Data subjects have the right to request the erasure of personal data concerning them in the register unless there is a legal basis for the retention of the data. The erasure request must be submitted to the contact person of the register in writing.<\/p>\n<p><strong>Right to request the restriction of the processing of personal data and the right to object to the processing of personal data<br \/>\n<\/strong>Data subjects have the right to request the restriction of and to object to the processing of their personal data if, for example, they deny the validity of the personal data concerning them. In this case, processing is restricted until Oral ensures the validity of the data or proves the existence of a legitimate basis for the processing. The restriction and\/or objection request concerning the processing of personal data must be submitted to the contact person of the register in writing.<\/p>\n<p><strong>Right to withdraw consent regarding the processing of personal data<br \/>\n<\/strong>If the processing of personal data is based on the data subject\u2019s consent, the data subject has the right to withdraw their consent regarding the processing of personal data at any time. The consent can be withdrawn by submitting a request to the contact person of the register in writing.<\/p>\n<p><strong>Right to lodge a complaint to the supervisory authority<br \/>\n<\/strong>Data subjects have the right to lodge a complaint concerning failures in the processing of personal data to the supervisory authority (Data Protection Ombudsman).<\/p>\n<p>\u00a0<\/p>\n<p>Updated 1 July 2022<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Controller Name: Oral Hammasl\u00e4\u00e4k\u00e4rit Ltd Business ID: 2863321-3 Postal and street address: Tekniikantie 4 A, FI-02150 Espoo, Finland Tel.: +358 (0)10 400 3010 (switchboard) Contact person for register matters Name: Sanna Elomaa Email: tietosuojavastaava@oral.fi Register name Stakeholder and partner register of the Oral Group The legal basis for the processing of personal data The legal &hellip; <a href=\"https:\/\/www.oral.fi\/en\/information\/information-for-customers\/data-protection\/stakeholder-and-partner-register-privacy-policy-statement\/\">Continued<\/a><\/p>\n","protected":false},"author":25,"featured_media":0,"parent":7787,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-219306","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.oral.fi\/en\/wp-json\/wp\/v2\/pages\/219306","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.oral.fi\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.oral.fi\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.oral.fi\/en\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.oral.fi\/en\/wp-json\/wp\/v2\/comments?post=219306"}],"version-history":[{"count":1,"href":"https:\/\/www.oral.fi\/en\/wp-json\/wp\/v2\/pages\/219306\/revisions"}],"predecessor-version":[{"id":232237,"href":"https:\/\/www.oral.fi\/en\/wp-json\/wp\/v2\/pages\/219306\/revisions\/232237"}],"up":[{"embeddable":true,"href":"https:\/\/www.oral.fi\/en\/wp-json\/wp\/v2\/pages\/7787"}],"wp:attachment":[{"href":"https:\/\/www.oral.fi\/en\/wp-json\/wp\/v2\/media?parent=219306"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}