REGISTER STATEMENT in accordance with section 10 of the Personal Data Act (523/1999).

The information is valid from 1 August 2018

Your privacy is important to us. This Privacy Statement defines what personal information we collect from you and how we use that information. Personal information is any information from which a person (hereinafter “User”) can be identified.

CUSTOMER REGISTER

Registrar

In accordance with the applicable data protection laws, the registrar means Little Buck Oy (hereinafter “Vakuutuslaskuri” or “we”). Vakuutuslaskuri is responsible for ensuring that personal data is processed in accordance with insurance law, personal data and applicable data protection legislation. The solutions provided by Vakuutuslaskuri are hereinafter referred to as the “Services”.

CONTACT DETAILS OF THE REGISTRAR:

Little Buck Oy

Address: Maariankatu 1B 44, 20100 Turku

PERSON RESPONSIBLE FOR REGISTRATION

Little Buck Oy

Ari-Pekka Pelkonen

email: info@vakuutuslaskuri.fi

Purpose of the processing of personal data

Collection of personal information

We collect and process personal information about the User in a variety of ways, which are described below.

Most of the personal information we process is obtained directly from the User. We may also collect personal information in connection with the provision of the Service, as well as from various registers such as the credit register. In addition, personal data may be obtained as transfers from other companies in accordance with insurance and data protection legislation.

Information collected during user registration

Our service is aimed at people who are 18 years of age or older. We do not collect data from children (under 16 years of age).

When a User registers with our Service, we collect the information needed to open a user account. When we register, we collect some basic personal information, such as:

• The name of the person
• The personal identification number of the person
• Address and contact information of the person
• Information required to insure a person’s vehicle, such as vehicle registration number, vehicle specifications, and vehicle owner information
• Consent or Prohibition of Direct Marketing

Information related to the use of the service

We may also collect information automatically when a User uses our Service. This information includes:

• User activity on the Service, such as information stored based on User activity as well as transaction information that User uploads to the Service;
• Mandate and power of attorney information required to perform the brokerage service.

User fees are paid in our service through third-party payment service providers. We use secure and transparent payment methods from these service providers. We do not store any card information in our systems.

Information we automatically receive about your use of the Service

• We also receive technical user information from our Service, such as: Timestamps and log information relating to the use of the Service;
• Information about the devices used to access the Service, including IP addresses and software versions. This information is obtained through the User’s browsers and cookies.

How we use personal information

We process personal data for three main purposes.

Provision of service

Use of our service requires the processing of personal data so that we can search and compare the prices and contents of insurance policies on behalf of the User. In addition, we process the User’s personal data when concluding assignment and power of attorney agreements with the User required by insurance broker legislation. The data processing in this case is based on the agreement between the User and Vakuutuslaskuri.

Service development and research

We may use personal information to improve the quality of the Service, to resolve issues identified with the Service, and to develop the features of the Service for Users. Data processing is based on our desire to improve our Service and its features and content for our Users. We may also generate anonymous statistics for research purposes, including business analytics.

Marketing and communication

We may use personal information to send important information about the Service to the User. Personal information may also be used for marketing purposes to Users.

We may create general User Profiles to provide better content and ads. This is based on our genuine desire to provide our users with value-added content and services

The user has the right to prohibit direct marketing at any time.

What our register contains

Our register contains the following groups of data

Basic information about the person (such as the person’s name, personal identity number, address, and contact information)

Details of the insured person’s object (such as vehicle registration number, vehicle specifications)

Permits issued by the person required to manage the customer relationship (such as power of attorney, assignment, marketing ban)

Customer relationship contact information (such as personal contact information, correspondence, marketing campaign information)

Insurance counter service license information and service audit trail information

Sharing or disclosing personal information

We may provide personal information to third parties:

• when permitted or required by law;
• if we are involved in a merger, acquisition, or sale of a business or part of a business;
• when we believe in good faith that providing the information is necessary to protect our rights, to protect the safety of the User or others, to investigate fraud, or to meet government requirements.

Vakuutuslaskuri does not sell the Users’ personal data to third parties. However, Vakuutuslaskuri may sell or pass on information related to vehicle offers without a personal identification number, street address and car registration number to third parties. An individual customer cannot be identified on the basis of information relating to vehicle offers for sale or transmission.

Transfer of personal data outside the EU / EEA

As a general rule, we do not transfer Users’ personal data outside the EU / EEA. Should Vakuutuslaskuri use a trusted service provider operating in the United States, we may be required to transfer some of your Users’ personal information to the United States. We only select as partners service providers who are committed to complying with European data protection laws and complying with the EU Privacy Shield Agreement.

Storing of personal information

With regard to the storage of the user’s personal data, we comply with the retention periods required by the insurance, personal data and accounting legislation in force in Finland. We will automatically delete a User’s personal information when our obligations no longer require the retention of personal information.

User Privacy Rights

We comply with EU GDPR regulations.

The User has the right to receive the personal data we hold about that User. The user has the right to receive, correct, update, change or delete personal data at any time. Certain laws and our obligations may require the retention of certain personal information. This data may not be deleted by the User, but will be deleted automatically on behalf of the User, unless we are obliged to retain the data.

The user has the right to object to certain data processing, such as profiling and marketing. The user also has the right to restrict the processing of data to the extent required by applicable data protection law.

The user has the right, within the limits required by law, to the portability of data. In other words, the user has the right to receive his personal data in a clearly legible form. Personal information is provided in a commonly used, machine-readable form.

The User may correct, destroy or otherwise process personal data in the Service or contact Vakuutuslaskuri’s customer service to destroy, correct or process the data.

The User has the right to lodge a complaint with the User’s national data protection authority in the EU / EEA if the User considers our data processing to be a problem. In Finland, this authority is the Data Protection Commissioner.

Cookies

We use cookies or other similar technologies to provide the Service. Cookies are small text files placed on a User’s device to collect normal Internet log information. Certain functionalities of the service require the use of cookies. We use cookies to increase the functionality of the Service and to make it easier to use.

The user can set the settings of their browser so that it does not accept the use of cookies. The user can also restrict the use of cookies or delete cookies from the browser. It should be noted that restricting the use of cookies may affect the functionality of the Service

Safety

We take security seriously. We take various measures to protect personal information from loss, misuse and unauthorized access or disclosure.

Changes to the registry description

We may change our registry description from time to time. We will send a notice of the changes to our Users through our service.