• Finferries
• History
• Board and management
• Contact information
• Finferries mobile app and about collected data
• Privacy policy
• Feedback
• Whistleblowing reporting channel
• Corporate Responsibility
• Supplier Code of Conduct

Privacy policy

Data Controller

Suomen Lauttaliikenne Group

Contact person for registry matters

Sampo Suvitie
Lemminkäisenkatu 59, 20520 Turku, Finland, P.O Box 252, 20101 Turku, Finland
+358 20 711 8755

Registry Name

Suomen Lauttaliikenne Group’s supplier, customer, and job applicant registry

Purpose and Legal Basis for Processing Personal Data

their representatives, including accounting purposes, handling customer feedback from traffic users, and in connection with customer inquiries. Supplier and subcontractor information is processed for accounting purposes and due to requirements related to contractor liability legislation. Job applicant information is processed in relation to the company’s recruitment activities.

Content of the registry

The groups of individuals whose data may be processed include Suomen Lauttaliikenne Group’s corporate customers and their representatives who have provided feedback or made other inquiries using their own names, as well as the contact persons of subcontractors and suppliers used by the company, and individuals who have submitted job applications to the company.

The following information about the data subject may be stored:

•  Basic personal information such as name, address, phone number, job title/position within the company, or other personal information provided by the individual.
  
  

Retention period for Personal Data

Personal data is stored in the registry until the basis for processing the personal data ends. The retention periods comply with the applicable legislation.

Regular sources of Information

Information is primarily collected directly from the data subject. Customer-related information about corporate clients and individuals associated with subcontracting and suppliers is collected based on agreements from third parties. Additionally, information may be collected from authorities.

Regular Disclosures of Data and Transfer of Data Outside the European Union or the European Economic Area

Personal data may be disclosed to authorities in accordance with the applicable legislation. Personal data is not transferred outside the EU or EEA areas without a separate agreement or consent.

Principles of Registry Protection

Manual material is stored in the company’s archive or otherwise in a locked space. Digital material is protected by firewalls and hardware designed for advanced threat detection and prevention. Access to the material is restricted to authorized individuals. Personnel handling personal data are also trained in terms of data processing.

Rights of the Data Subject

•   Right to Object to Data Processing
   - The data subject has the right to object to the processing of their personal data in specific situations. When making such a request, the data subject must specify the particular circumstances on which they base their objection. Suomen Lauttaliikenne may refuse to comply with the objection request based on legal grounds.
  
  
•  Right to Access Information
  -  The data subject has the right to review the information Suomen Lauttaliikenne has stored about them. The right of access may be denied based on legal provisions.
  
  
• Right to Request Correction, Deletion, and Restriction of Processing
  - The data subject has the right to request corrections to erroneous, unnecessary, incomplete, or outdated information. They also have the right to request restrictions on processing while awaiting a response regarding data correction or deletion.
  
  
•  Right to Data Portability
  - The data subject has the right to transfer their data to the extent that they themselves have provided it to the data controller and it is processed based on the data subject’s consent or mandate.
  
  
• Right to Lodge a Complaint with Supervisory Authorities
  - The data subject has the right to lodge a complaint with the competent supervisory authority if Suomen Lauttaliikenne has not complied with applicable legislation in its operations.
  
  

Contact Information

For all questions related to the registry description and requests related to the registry, please contact the designated contact person mentioned in this description. Requests related to the data subject’s rights can be addressed only if the requester can be reliably identified.