Privacy Statement

This is Navitas Kehitys Oy’s register and privacy statement, which meets the requirements of the EU’s General Data Protection Regulation (GDPR). The report was prepared on 28th of August 2023. According to the data protection regulation, the controller has an obligation to clearly inform data subjects of their rights. This statement fulfills the information obligation and this privacy statement provides information on how personal data is handled in the Norths Savo Energy Cluster project.

Data controller


Navitas Kehitys Oy, company ID: 0775736-4
Wredenkatu 8, 78250 Varkaus (Finland)
toimisto@navitas.fi

The contact person responsible for the register


Sari Ronkainen (data protection coordinator)
Tiina Rajamäki (data protection officer)
toimisto@navitas.fi

Registry name

North Savo Energy Cluster`s stakeholder and marketing register.

Purpose and legal basis of personal data processing

We process your personal data only for the purpose where the legality of the processing is met. In accordance with the EU’s General Data Protection Regulation, our processing purposes are based on the following legal grounds for processing personal data:

  • An agreement as processing basis
  • Personal data is processed on the basis of the registered customer relationship/ membership, which is based on the agreements made (for example the contractual realtionship between the registered member company and North Savo Energy Cluster).
  • Consent as a basis for processing
    • The person has given his consent to the processing of his personal data in order to manage contact and maintain the relationship, by submitting personal data e.g. by email or verbally.
  • Legitimate interest as a basis for processing
    • Personal data concerning communication and marketing aimed at stakeholders. For example, on the form on the website, the person has given his personal information for ordering the newsletter.

The purpose of processing personal data is primarily to communicate with stakeholders and maintain customer relations, as well as marketing and communication of our operations. The information is not used for automated decision-making or profiling.

Data content of registers

Customer and stakeholder company information to be stored in the register:

  • Member register and stakeholder/ cooperation register

name of the company

the names of the contact person/s

decision-making position of the contact person/s in the company (title)

contact information (phone number, email address)

Information of the contact person/ private person to be saved in the register:

  • Information and marketing register

– the name of the company/ organization represented

– the person`s position/ title in the company/ organization (optional)

– the name of the person

– the person`s email address

As a general rule, personal data stored in the register is processed as long as the customership is valid. The agreement and information from the stakeholder registers will be kept for five years in accordance with the archiving obligation required by the project financier, insofar as they are essentially related to the reporting of the Energy Cluster’s activities. Personal data stored in the information and marketing register is processed and stored as long as the customership/order is valid.

Website cookies

Our website uses cookies. Cookies are text files that can be found on the device you use for browsing. We use analytics cookies to improve the user experience on our website and to track the number of users on our website pages. You can reject the use of cookies or delete cookies, which may, however, limit the usability of our website.

IP addresses of website visitors and cookies necessary for the functions of the service are processed on the basis of a legitimate interest, e.g. to take care of data security and for the collection of website visitor statistics in cases where they can be considered to be personal data. If necessary, consent is requested separately for third-party cookies.

We use analytics software (Google Analytics) provided by a third party on our website. Cookies are used to improve the site’s user experience and enable marketing personalization.

The browser tells you if a tracking cookie is already in use. If it is not found, a new cookie is placed in the browser. You can delete cookies in your browser settings. However, a new cookie will be placed in your browser the next time you visit our site. We never pass on user information obtained from tracking cookies to a third party.

Cookies are used to collect mainly the following information:

  • the user’s IP address
  • devices used (mobile phone, computer)
  • pages used/traffic redirection to pages
  • actions performed on the site; time spent on the site and initiated sessions
  • from which web address the user came to the website
  • from which server the user came to the website
  • from which domain the user came to the website

Most browsers allow you to disable the cookie function.

Regular sources of information

The information to be recorded in the register is obtained from the person, e.g. from messages sent via web forms, by e-mail, by phone, via social media services, contracts, customer meetings and other situations where the customer/contact person discloses their information themselves. Information about contact persons of companies and other organizations can also be collected from public sources such as websites, directory services and other companies.

The website uses Google Analytics to create reports on the use of our website so that we can improve our website and our service. More information about Google Analytics can be found at http://www.google.com/analytics. You can reject data collection by Google Analytics by downloading an add-on to your browser at https://tools.google.com/dlpage/gaoptout.

Regular transfers of data and transfer of data outside the EU or EEA



Information is not regularly disclosed to other parties. Information can be published to the extent agreed with the person.

Principles of registry protection


Care is taken when processing the register and the information processed with the help of information systems is properly protected. When registry data is stored on Internet servers, the physical and digital data security of their hardware is taken care of accordingly. The register controller ensures that stored data as well as server access rights and other data critical to the security of personal data are handled confidentially and only by those employees whose job description it is.

The right of inspection and the right to demand correction of information

Every person in the register has the right to check their data stored in the register, which personal data we process and to demand the correction of any incorrect data or the completion of incomplete data. If a person wants to check the information stored about him/her or demand correction, the request must be sent in writing to the controller. If necessary, the registrar can ask the requester to prove his/her`s identity. The controller responds to the customer within the time regulated in the EU data protection regulation (generally within a month).

Other rights related to the processing of personal data

A person in the register has the right to request the removal of personal data about him/her from the register (“right to be forgotten”). Registered also have other rights according to the EU’s General Data Protection Regulation, such as limiting the processing of personal data in certain situations. Requests must be sent in writing to the controller. Register controller can ask the requester to prove his/her identity. The controller responds to the customer within the time regulated in the EU data protection regulation (generally within a month). The supervisory authority is the Office of the Data Protection Commissioner, whose contact information is;

Visiting address: Ratapihantie 9, 6 krs., 00520 Helsinki (Finland)
Postal address: PL 800, 00520 Helsinki (Finland)
Phone number: (+358) 029 56 66735
Email: tietosuoja@om.fi


Prepared on 25th of August 2023. Latest change 3rd of July 2024.