Registration overview pursuant to § 10 of the Personal Data Act (523/99)
1. Controller of the Register
The Environmental Register of Packaging PYR Ltd
Mikonkatu 15 B
FI-00100 HELSINKI
Finland
Tel. +358 9 616 230
2. Person in Charge of the Register
IT Manager
Tel. +358 9 616 230
3. Name of the Register
The register of firms kept by the Environmental Register of Packaging PYR Ltd (hereafter PYR Oy) with the mailing register of PYR Oy’s newsletter as a sub-register.
4. Purpose of the Personal Data in the Register
The main purpose of the register is the registration of firms that place packed products on the market as well as the collection of packaging data and compilation of statistics. Personal data is collected to maintain customer contacts and relations and to provide information on matters pertaining to the recovery of packaging. The data may also be used for the purpose of studying PYR Oy’s own customer satisfaction or other corresponding data unless the customer has refused such use of the data.
5. Contents of the Register
ID and basic information: the firm’s customer code number; the firm’s/association’s name, Finnish company ID code, full postal address, registration and deregistration dates, and postal language (Finnish, Swedish or English); the firm’s turnover data, invoicing data, packaging statistics, and the name of the firm’s contact person, its telephone number, fax number and email address.
6. Regular Sources of Data
The basic data concerning the customer is entered from the contract made by the firm, telephone contacts or other similar communications made to the controller of the register during the period of customer relationship. Updates of the name, address or other details are carried out on the basis of the activity of the customers and their associations and also using the contact details forms and/or the packaging data declaration form annually sent out by PYR Oy and returned by customers. The customer may also send the above mentioned data via the net or on electronic forms via email. Data concerning turnover and business sector and any general data may be obtained from the firms that produce such data.
7. The Regular Provision of Data and the Transfer of Data outside the EU or the European Economic Area
Personal data is not forwarded outside the EU or the European Economic Area for commercial reasons. PYR Oy forwards, for official use only, such data concerning firms that is required by law or by other decisions made by the authorities. A firm under contract with PYR Oy will only be provided with such data that concerns the firm itself by special request for the purpose of monitoring the packaging data or contract details. If PYR Oy’s use of an outsourced service requires data pertaining to a customer, that data is only shared for that particular instance of use and the subcontractor is not permitted to forward the data.
8. Principles governing the Security of the Register
PYR Oy observes strict confidentiality. The register is only used by those whose work requires its use.
a. Manual material
Manual material is stored in locked areas on PYR Oy’s premises. Only PYR Oy employees are entitled to handle manual customer data.
b. Data Entered using ADP
The right to use the register requires user ID granted by the main user of the data base. The main user also determines the level of the right of use that is granted to a user. Using the application requires a personal password. Use and access of the register are controlled. The system is protected against outside contacts by a firewall. The data bases are stored in locked areas and only people with prior authority can access the data.
PYR Oy’s data security is set up on the basis of laws and regulations governing data security and in strict observance of instructions and recommendations issued on data security.
Helsinki, 7 November 2007
THE ENVIRONMENTAL REGISTER OF PACKAGING PYR LTD