Privacy Policy

Controller

Huoneistohotelli Citykoti Oy, Malminkatu 38, 00100 Helsinki

Contact person in issues concerning the Register

Name of the Register

Customer Register of Citykoti Apartments.

Purpose of processing personal data

The Register is used for the purpose of maintaining the customer Register of Citykoti Apartments, filing and processing of customer orders and management of customer relationship. The data may be used for the development of the operations of Citykoti Apartments, for statistical purposes, provision of other personal targeted content and communication in the framework of our services.

Citykoti Apartments may use cooperation partners in maintaining the customer and service relationship. Some of the registry data may be transferred to the servers of a cooperation partner due to technical requirements. The data will only be used for maintaining customer relationships of Citykoti Apartments through technical interfaces.

Contents of the Register

Main data in the Register:

Name of the company
Address details of the company
Telephone number of the company
E-mail address of the company
Name of the person
Address details of the person
Telephone number of the person
E-mail address of the person
Payment and invoicing details
Details of accommodation
Details related to customership and contracts
Details related to services and products

Regular sources of information

The principal sources of information are customers themselves.

Data may also be updated with input from the authorities or third parties within boundaries permitted by applicable legislation, for the purposes described in this registration certificate.

Regular transfers of data

Registry data will only be at the disposal of Citykoti Apartments, except when Citykoti Apartments is using an external service provider to provide a value-added service. However, the data will not be transferred outside Citykoti Apartments or for use by cooperation partners, except unless required by law.

Registry data is not delivered to external parties, except in cases required by law.

Personal data of a registered person are deleted at the request of the user, unless deletion of such data is prevented by legislation, contractual matters or provision of a service to the user.

Transfer of data outside the EU or the EEA

The data in this Register is not delivered outside the EU or European Economic Area.

Principles of protection of the Register

Electronically stored personal data is protected with reasonable technical measures, which are generally acknowledged in the field, such as firewalls and passwords. Registry materials, which contain personal data, but are not in electronic form, are stored in locked rooms, where access for unauthorized persons is prohibited.

Only the appointed data controller and the employees of companies commissioned by or acting on behalf of the controller have access to the personal data processed in the Register, in conformity with the user rights granted by Citykoti Apartments. Citykoti Apartments follows the applicable legislation and regulations of the authorities and guidelines of the industry associations for ensuring confidential processing of personal data.