Oulun Energia logo

Privacy Policy statement for stakeholders

The purpose of this Privacy Policy statement is to explain why and how Oulun Energia processes the personal data of its stakeholders. Stakeholders include Oulun Energia Group partners, suppliers, authorities, or interest groups and their contact persons ("stakeholders").

Data controller

The data controllers, in accordance with data protection legislation, are Oulun Energia Oy, Oulun Energia Sähköverkko Oy, and Turveruukki Oy (hereinafter referred to as the "group company" or “data controller" and all together as "Oulun Energia").

At Oulun Energia, stakeholder data can be processed by one or more data controllers belonging to the Oulun Energia Group, each of whom is independently responsible for the processing of personal data for its own purposes. Each group company is independently responsible as a data controller for ensuring that the processing of personal data is carried out in accordance with this Privacy Policy statement and applicable data protection legislation.

For more information on the processing of personal data for marketing purposes, please refer to the Oulun Energia marketing privacy statement.

Contact information for the data controller:

What personal data do we collect?

In principle, we collect information about our stakeholders from the representative of the stakeholders themselves. In certain circumstances, the data controller may also collect information about stakeholders from other sources, such as the contact details provided by stakeholders themselves on their websites.

The following information about stakeholders is collected and processed:

On what basis do we process your personal data, and what do we use it for?

We may process personal data for the following purposes and on the following grounds:

Management of cooperation under the Agreement

Personal data shall be processed for the purposes of organising and managing the business cooperation of the data controller, such as communication, organisation, maintenance, and development of cooperation between the data controller and stakeholder. Where an agreement on cooperation (e.g. a cooperation agreement or subcontracting agreement) has been concluded between the parties, the processing shall be based on an agreement between the data controller and the stakeholder.

Other cooperation with stakeholders

The data controller cooperates with a number of stakeholders, such as public authorities (e.g. Energy Agency), interest groups (e.g. energy industry) and other companies, for example in connection with the development of the energy sector. However, not all cooperation is necessarily based on a contractual relationship, but on maintaining generally good cooperation relations in the field of energy. Cooperation may include, for example, communication and organising events. In this respect, the processing shall be based on the legitimate interest of the data controller in maintaining appropriate cooperative relations with energy stakeholders.

Purposes required by legislation

Personal data may also be collected and processed on the basis of legislation, if required by the legislation applicable to the data controller, for example for accounting purposes.

To whom do we transfer or disclose your personal data?

We may transfer and disclose the personal data of our customers to third parties in the following situations:

Do we transfer your personal data outside the EU or the EEA?

We may transfer personal data outside the EU or the European Economic Area (EEA) if our trusted service provider operates completely or partly outside these territories. In these cases, we will ensure appropriate safeguards in accordance with the applicable data protection legislation, for example by using the European Commission's standard contractual clauses.

How long do we retain your personal data?

Information shall be retained only for as long as it is necessary to fulfil the purposes specified in this Privacy Policy statement. Personal data is generally retained for the duration of the contractual relationship or project, and then deleted unless we are obliged to retain the data by law or by the contractual rights and obligations of the parties. Personal data processed on the basis of a legitimate interest shall be retained only for as long as it is necessary for the purposes of cooperation; for example, when a contact person changes, the old data shall be deleted and replaced by the contact details of the new contact person.

What rights do you have?

An individualised request to exercise your rights as a data subject or a request for information on the processing of personal data should be sent to: mira.juola@oulunenergia.fi. When you request information, we will verify your identity. We will respond to requests within one (1) month of submitting the request, unless there are special reasons to extend the response time. We may also refuse to comply with your request on the grounds provided by applicable law.

For more information on the processing of personal data for marketing purposes and your rights related to marketing, please refer to the Oulun Energia marketing privacy statement.

As a data subject, the following rights are guaranteed to you under applicable data protection legislation:

Right of access:

Right to request rectification and erasure of data and to restrict the processing of personal data:

Right to object to the processing of personal data:

Right to transfer data between systems

The right of the data subject to withdraw consent

Right to lodge a complaint with the supervisory authority

How do we protect your personal data?

We have the necessary technical and organisational data security measures in place to protect personal data from elimination, destruction, misuse, and unauthorised access. Our security measures include data protection and security training for our staff, and management of access and access rights (firewalls, secure equipment facilities, facility access control, limited and personal role-based access rights), whereby we restrict access to your data only to personnel who need to process such data for their work. With regard to subcontractors, we have ensured the implementation of data protection legislation by means of a separate data protection agreement.

Amendment of the Privacy Policy statement

We reserve the right to change and update this Privacy Policy statement. If we make changes to the Privacy Policy statement, we will add this information to our website, where you can also find the latest version of the Privacy Policy statement.

Contact information

If you have any questions about the Privacy Policy statement or personal data concerning yourself, please contact our contact person by e-mail at mira.juola@oulunenergia.fi.