Processing of personal data in Piceasoft

Version 1.0
27-Nov-2020

Controller
Piceasoft Ltd.
Finlaysoninkatu 5
33210 Tampere
Finland
+358 10 5040770
piceasoft@piceasoft.com

Contact person
Privacy Officer
Piceasoft Ltd.
Finlaysoninkatu 5
33210 Tampere
Finland
privacy.officer@piceasoft.com

The purpose and lawfulness of processing

Piceasoft collects and processes personal information for the following purposes.

1) Customer relations management.
a. Accounting
b. Customer support
c. Information sharing
d. Sales contacts
e. Marketing activities
2) Management of job applications.
3) Management of company ownership information.
4) PiceaServices operations, operation analysis and reporting.
5) Piceasoft tools access management.

This processing is based on the GDPR Article 6 (a), (b) and (c) which are copied below for
clarity:
(a) the data subject has given consent to the processing of his or her personal data for one or
more specific purposes;
(b) processing is necessary for the performance of a contract to which the data subject is
party or in order to take steps at the request of the data subject prior to entering into a
contract;
(c) processing is necessary for compliance with a legal obligation to which the controller is
subject;


Categories of personal data processed

For the purposes of processing, the following personal data is collected.
1) Address
2) Bank account number
3) Device identification information (IP address, IMEI code)
4) Email address
5) Name
6) Passport copies (Piceasoft board members only)
7) Personal identification number
8) Phone number
9) Pictures taken during PiceaServices operations

Not all of the above data is necessarily collected on a single data subject.

For the purposes of selected mobile initiated operations, the following additional personal
data may be collected.

1) Passport- / personal ID number
2) Photo of identification document

Regular recipients of personal data

Recipient Reason Categories of personal data
disclosed
Staria Oyj Accounting Address, bank account
number, name, phone
number
Intrum Oy Invoice collection Address, email address,
name, phone number
Collector Bank AB Invoice collection Address, email address,
name, phone number
Licensee of the
PiceaServices product
used in operation
creating the data		 PiceaServices operations
reporting		 IMEI code, pictures taken
during PiceaServices
operations
Licensee of the
PiceaServices product
used in operation
requesting the data		 PiceaServices operation
initiated commercial action		 Address, email address,
IMEI code, name, passport-
/ personal ID number,
phone number, photo of
identification document

 

Data transfers to third countries

Piceasoft may transfer personal data to its partners located outside of the EU. EU Standard
Contractual Clauses for data transfers are signed between Piceasoft and its partners to
provide safeguards for personal data in these situations.

Data retention time

Data retention time is presented here dependent of the purpose of the data collection.

Accounting
Retention time for accounting information and contracts is ten years.

Customer support
The retention time for personal data related to customer support is tied to contract period.

Marketing
Email and mail addresses for marketing purposes are retained for contract period or in case
of customer leads for two years.

Sales contacts
Contact information for sales purposes is retained for contract period or in case of customer
leads for two years.

Job applications
Retention time for job applications and CVs is 12 months.

Company ownership information
Retention time of contact information of company owners is retained as long as the
ownership status is retained.

PiceaServices operations, operation analysis and reporting
For audit trail purposes, the PiceaServices usage information is retained for ten years.
The personal data collected by PiceaServices application for special commercial purposes is
not retained by Piceasoft.

Piceasoft tools access management
Login information for Piceasoft tools is retained for contract period.

Rights of the data subject

Right of access
The data subject has right to obtain the personal data concerning him or her.
Access request shall be sent via email to privacy.officer@piceasoft.com or via mail to
Piceasoft Ltd, Privacy Officer, Finlaysoninkatu 5, 33210 Tampere, Finland.

Right to rectification
The data subject has right to rectify the personal data concerning him or her.
Rectification request shall be sent via email to privacy.officer@piceasoft.com or via mail to
Piceasoft Ltd, Privacy Officer, Finlaysoninkatu 5, 33210 Tampere, Finland.

Right to be forgotten
The data subject has right to request for erasure of the personal data concerning him or her.
However, this applies only to information which retention is not required by law.
Erasure request shall be sent via email to privacy.officer@piceasoft.com or via mail to
Piceasoft Ltd, Privacy Officer, Finlaysoninkatu 5, 33210 Tampere, Finland.

Right to restriction of processing and right to object
The data subject has the right to obtain from the controller restriction of processing and right to object, on grounds relating to his or her particular situation according to the General Data Protection Regulation by EU (EU 2016/679 Article 18).

These requests shall be sent via email to privacy.officer@piceasoft.com or via mail to
Piceasoft Ltd, Privacy Officer, Finlaysoninkatu 5, 33210 Tampere, Finland.