Privacy policy: Vantaan Energia Sähköverkot Oy

This privacy policy provides the information required by data protection laws to the registered person i.e. the customer of the registrar/controller and to the controlling authority.

1 Registrar/controller

Vantaan Energia Sähköverkot Oy (“Vantaa Energy Electricity Networks”)
Business (VAT) ID: FI20384080
Mailing address: PO Box 95, 01301 Vantaa, Finland
Telephone: +358 9 829 0900
Online service: www.vantaanenergiasahkoverkot.fi

2 Persons responsible for the register and their contact information

In charge of the register

Janne Hartikainen
Mailing address: PO Box 95, 01301 Vantaa, Finland

Data Protection Officer

Heidi Itkonen
Mailing address: PO Box 95, 01301 Vantaa, Finland
Street address: Peltolantie 27, 01300 Vantaa, Finland

Data security inquiries
https://tietopalvelu.vantaanenergia.fi/tiotesuojavastaavalomake

3 Title of the register

Vantaa Energy Electricity Networks’ customer register (“customer register”)

The registrants are Vantaa Energy Electricity Networks’ customers including private persons, companies or communities.

4 The purpose and legal basis of processing personal information

The purpose of processing the personal information in the customer register is to manage the customer relations and assignments related to Vantaa Energy Electricity Networks’ operations and business, to offer services and products, to sell and communicate them, as well as to assure, maintain and develop the quality of customer relations and existing and future services and products.

Vantaa Energy Electricity Networks organizes public and customer-specific competitions and draws and records the personal information of the participants for these purposes.

For the above purposes, personal information may be processed to manage Vantaa Energy Electricity Networks’ customer relations as well as to analyze, offer and develop the use of its services and products, to recognize customer accounts and registered customers, to compile statistics, to communicate to customers, as well as to survey opinions and markets.

In processing personal information, Vantaa Energy Electricity Networks complies with applicable laws, including the Data Protection Act and EU’s General Data Protection Regulation (GDPR). Personal information may be processed to comply with obligations related to applicable laws and official orders and guidelines.

The legal basis for processing personal information is an agreement, legal obligation, or legitimate interest pursued by the registrar/controller. Legitimate interests include the production, support and development of business and services.

5 Information included in the register/data file

The following information related to a customer or other registered person (registrant) may be processed related to the customer register:

basic information of the registered person (including names, date of birth, social security number, address, business/VAT ID, account number, location ID, user ID and/or other identifier, password, and the language used in transactions);
information about contact persons in a company (including employer and professional status);
contact information (including address, telephone number and email address);
information related to payments and invoicing (including billing, fees, transactions and debt collection, prospects, standard compensation, indemnity and credit inquiries);
information related to customer accounts and contracts (including contracts, orders and services currently in force or terminated, transactions, authorizations, contact records (such as phone calls and emails), correspondence with Vantaa Energy Electricity Networks, other contacting, and marketing);
information about services and products (including orders, those currently in force, changes and terminations, power failures, online and mobile services (as necessary), the registrant’s entries regarding personal interests, cookies and their use, and user profiles created based on the information processed for the customer register);
information about electricity consumption (including location-specific metering and electricity consumption reports);
marketing bans and authorizations (including direct marketing ban, telemarketing ban, and consent to digital marketing);
any other information collected with the consent of the registrant.

6 Regular sources of data

Information about the registrant is regularly received from the following sources:

the registrant when they become a customer of Vantaa Energy Electricity Networks, when they register for Vantaa Energy Electricity Networks’ services, when they use Vantaa Energy Electricity Networks’ services, or when any other factual contact is created between the registrant and Vantaa Energy Electricity Networks;
the registrant when they request for an offer from Vantaa Energy Electricity Networks or consent to add their information to the customer register of Vantaa Energy Electricity Networks;
information on the data subject is regularly obtained from energy companies operating in the electricity market and from the central data exchange unit of the electricity market (datahub) on the basis of an exchange of information pursuant to applicable law or official regulations, and
The information for the Vantaa Energy Electricity Networks’ customer register may be collected, saved and updated from, for example, the Finnish Digital and Population Data Services Agency, Suomen Asiakastieto Oy, or other similar service provider’s register of addresses, updates and other information.

Personal information may be collected and updated from authorities and other third parties within the limits of applicable laws for the purposes described in this privacy policy.

Vantaa Energy Electricity Networks record customer service calls to assure and improve customer service quality.

7 Regular disclosure of information

In order to provide services, personal information may be transferred to the use of Vantaa Energy Electricity Networks’ carefully selected partners for the purposes described in this privacy policy.

Personal data may be disclosed and transferred to the controller’s group companies, service providers, public authorities, electricity market participants and the central data exchange unit of the electricity market (datahub) to the extent permitted and required by electricity market and other legislation.

8 Data retention period

Personal information data is retained only as long as is necessary for the purposes described in this privacy policy; in principle, for the length of the customer relationship. After this, the data is removed, except if the rights and obligations given by law or by a mutual contract require that we retain the information.

The retention period for customer data based on an agreement is ten (10) years from termination. The retention period for contact records is one (1) year. The retention period for competition- and draw-related data is one (1) month.

The customer may influence the data retention period according to the rights described in this privacy policy.

9 Data transfer outside the EU or the EEA

Customer register data is not transferred outside the European Union (EU) or the European Economic Area (EEA).

10 Principles of register/data file protection

Personal information in digital format is protected by reasonable technical means generally approved for the industry, including firewalls and passwords. Other than digital information included in the customer register is kept in locked premises which unauthorized persons cannot enter.

Only the dedicated registrar or the employees assigned and managed by the registrar have access to the personal information processed in the customer register according to the user rights admitted by Vantaa Energy Electricity Networks. Vantaa Energy Electricity Networks takes into consideration the applicable laws, official orders, and industry associations’ guidelines to secure the processing of confidential personal information.

11 Right of inspection, prohibition and rectification

The registrant has the right to inspect their personal information recorded in the customer register. A digital request to inspect can be submitted in digital format at https://tietopalvelu.vantaanenergia.fi/sahkoverkotlomake. A written request to inspect can be submitted in person at the registrar’s office where the registrant’s identity will be verified. If the registrant uses their right of inspection more than once per year, Vantaa Energy Electricity Networks will charge a reasonable fee for their service.

Based on the GDPR, the registrant has the right to prohibit the use of their personal information for direct marketing and advertising, telesales, market surveys and opinion polls. This right of prohibition does not concern customer communications related to services ordered by the customer or other communications concerning offers of other services related to the ordered services.

The data subject has the right under the General Data Protection Regulation (GDPR) to require Vantaa Energy Electricity Networks Ltd to rectify, erase or supplement personal data in the register or in the central data exchange unit (datahub) that is inaccurate, unnecessary, incomplete or outdated with regard to the purpose of the processing. The data subject may also submit a request for updating to Vantaa Energy Sähköverkot Oy of data maintained by the electricity trader’s central data exchange unit (datahub). In this case, Vantaa Energy Sähköverkot Oy sends the update request to the central data exchange unit (datahub), according to which the electricity seller of the data subject is responsible for updating the data.

Based on the GDPR, the registrant also has the right to restrict the processing and transfer of their personal information to another registrar.

The registrant is personally liable for the accuracy of the information given. The registrant must inform the registrar of any changes to their personal information.

12 Filing a complaint to the supervisory authority

If the registrant believes that the processing of their personal information violates the applicable laws or that their legal rights have been violated, they can file a complaint to the Office of the Data Protection Ombudsman whose contact information is available at www.tietosuoja.fi/en.

24 June 2024

Printing: To print this privacy policy: Right-click > Select ’Tulosta/Print’