Privacy Statement for Debt Collection Register (Client that has given the collection assignment)

1. GENERAL

CreditVisor (hereinafter referred to as “the Company” or “We/Us”) is committed to ensuring the confidentiality and data protection of the personal data it holds. This privacy statement applies to the personal data we collect about the contact persons of our clients that have given us collection assignments in connection with our debt collection register (hereinafter referred to as “the Register”). This privacy statement describes the personal data we collect and how we process it. For more information on the processing of personal data, please contact our Data Protection Officer Lauri Aittamo ([email protected]). 

We may update this privacy policy from time to time due to legal amendments or other reasons. This privacy statement was last updated on 21 December 2023.  

2. DATA CONTROLLER AND DATA PROTECTION OFFICER

Name: CreditVisor Oy 

Address: Konepajankuja 3, 00510 Helsinki

Telephone: +358 09 47655655 

Business ID: 3126049-7 

CreditVisor’s Data Protection Officer:  

Lauri Aittamo 

Email: [email protected]  

3. DATA SUBJECTS

In the Register, we process the personal data of the contact persons of our clients that have given us debt collection assignments.  

4. TYPES OF PERSONAL DATA

In the Register, we process the following personal data:  

  • your name and your job description;
  • your contact details (e-mail address and postal address);
  • your personal user ID and phone number in “Anitta” debt collection system (system used to carry out debt collection services);
  • your name and e-mail address in “Nova Backstage” system (system used to carry out debt collection services).

5. SOURCES OF PERSONAL DATA

We receive the personal data from our collection assignment clients and directly from the data subject.

6. GROUNDS, PURPOSES AND EFFECTS OF PROCESSING YOUR PERSONAL DATA

The processing of your personal data is based on the legitimate interest of CreditVisor, which is to carry out the obligations set to CreditVisor in debt collection assignments and to be able to contact the client’s personnel when needed.

7. REGULAR DISCLOSURES AND TRANSFERS OF YOUR PERSONAL DATA TO THIRD PARTIES

We may disclose personal data to our service providers who assist us in carrying out debt collection services. Our service providers include OneByte Oy (Anitta) and Alektum Group Ab (Nova). We use the Anitta and Nova systems to handle debt collections assignments. Anitta is used in domestical (Finnish) assignments and Nova is used with geographically wider clientele.

Our partners may only process your personal data for the purposes of the measures to be taken on our behalf. We always ensure that our partners do not process transferred personal data for any other purposes. 

We may also need to share your personal data with competent authorities in accordance with the legislation on the processing of personal data.

8. TRANSFERS OF YOUR PERSONAL DATA OUTSIDE THE EU OR THE EEA

We may transfer your personal data outside the European Union or the European Economic Area. If the debt collection client is located in Switzerland, we will transfer your personal data to Switzerland. 

The European Commission has decided that an adequate level of data protection is ensured in the recipient country in question (equivalence decision).

9. PRINCIPLES FOR THE RETENTION OF PERSONAL DATA

The following principles apply to the retaining of your personal data:

The personal data of a creditor-client’s representatives shall be retained as long as the customer relationship continues. After the customer relationship has ended, we only store personal data as long as it is necessary for the legal purpose for which the data was collected.

We also keep the data until the expiry of the limitation period for the filing of various claims in order to be able to defend ourselves against legal claims. 

10. RIGHTS RELATED TO THE PROCESSING OF THE DATA SUBJECT’S PERSONAL DATA

In accordance with applicable data protection legislation, you have the right, at any time, to:  

  • be informed of the processing of your personal data; 
  • gain access to your data and inspect the personal data we process about you;  
  • object to the processing of your personal data on grounds relating to your particular situation to the extent that our legitimate interests are the basis for processing your personal data;  
  • receive your data in a machine-readable format and transmit the data to another controller, provided that you have personally provided the data to us, we process the data on the basis of a contract or your consent and the processing is carried out automatically;  
  • request the restriction of processing of your personal data;  
  • require the rectification and completion of inaccurate personal data; and 
  • request the erasure of your personal data.

To exercise the aforementioned right, you must submit your request to us in accordance with section “Contacts” of this privacy statement. We may ask you to specify your request in writing and verify your identity before processing the request. We may refuse to comply with your request on the grounds set out in applicable law. 

You also always have the right to submit a complaint to the relevant supervisory authority or the supervisory authority of the EU Member State where you reside or work, if you consider that we have not processed your personal data in accordance with applicable data protection legislation. 

11. THE REGISTER’S PROTECTION PRINCIPLES

We respect the confidentiality of your personal data. Any manual materials shall be stored in a locked space that can only be accessed by designated persons. Personal data processed digitally shall be protected and stored in our information system, which has limited access only to persons who need such data in order to perform their duties. These persons shall use their personal usernames and passwords.  

We encrypt any personal data sent outside of our Company.

12. CONTACTS

All requests for the exercise of the above rights, questions about this privacy statement and other contacts must be made by email to [email protected]. You can also contact us via the contact function on the website or in writing at the address below: 

CreditVisor Oy 
Lauri Aittamo 
P.O. Box 104 
FI-00101 Helsinki, Finland