This is IDR Oy's Registry and Privacy Statement in accordance with the EU General Data Protection Regulation (GDPR) regarding the use of the website idrcloud.com. Prepared on 14 May 2021. Latest change 5 June 2023.
IDR Oy
Lönnrotinkatu 5
00120
Helsinki Finland
Matti Lehmus, firstname.surname@idrcloud.com
Homepage user register.
According to the EU's General Data Protection Regulation, the legal basis for processing personal data is the person's consent through the Cookiebot service. The purpose of processing personal data is to analyze the web traffic of the company's website and to correctly allocate development actions.
No personal data is automatically stored through the homepage. The Google Analytics GA4 version in use does not store the user's IP address. If the website user sends personal information to IDR via forms, the information is stored in the CRM system used by the company (www.pipedrive.com). Information to be recorded in the register is: person's name, position, company/organization and contact information (phone number, e-mail address, address).
The information to be recorded in the register is obtained from messages sent by the user via www forms, in which the user wants to provide their information.
Personal data will not be disclosed to other parties or transferred outside the EU or EEA.
Special attention is taken when processing the register and the used information systems are properly protected. The registrar ensures that stored data as well as server access rights and other critical personal data are handled confidentially and disclosed to only those employees whose job description requires such access.
Every person in the register has the right to check their information stored in the register and demand the correction of any incorrect information or the completion of incomplete information. If a person wants to check the information stored about them or demand correction, the request must be sent in writing to the person in charge of the register.
A person in the register has the right to request the removal of personal data about them from the register ("right to be forgotten"). Requests must be sent in writing to the controller.