Matkahuolto's Customer Register
PERSONAL DATA FILE DESCRIPTION
Personal Data Act (523/99), Section 10
1 June 2017
File controller
Oy Matkahuolto Ab (hereinafter “Matkahuolto”)
Business identity code 0111393-9
P.O. Box 100
00101 Helsinki, Finland
Tel. 020 710 5000
Contact person responsible for the data file
Oy Matkahuolto Ab
P.O. Box 100
00101 Helsinki, Finland
Name of the data file
Matkahuolto’s customer register
Purpose of the personal data file
The processing of personal data is based on the customer relationship between the Matkahuolto customer and Matkahuolto (relevant connection), the customer’s consent, the law and/or the provision of services to customers (necessity requirement).
Content of the data file
Customer details:
name,
phone number, and
email address.
Service details:
details, such as discount groups and favourite routes, provided by the customer in order to personalize the service,
details related to purchases and the use of services in various channels, such as online and mobile services,
direct marketing consents and prohibitions.
Regular sources of data
The data are provided by Matkahuolto customers. In addition, data are generated through the purchase and use of services, such as ticket purchases.
Marketing consents and prohibitions
Customers may give their consent to receive marketing messages or prohibit them completely for each channel (text messages, email) separately.
If a customer prohibits marketing messages for all channels, he or she will only receive communications necessary for managing purchased services and the customer relationship.
Regular disclosures and transfer of personal data to outside the European Union or EEA
The first and last name of the buyer as well as travel data are forwarded to the bus operator responsible for the connection. No data shall be forwarded to any other parties or for any other purposes.
File protection policy
The data are transmitted from the buyer’s terminal device to the server using an SSL-encrypted web connection. The personal file data generated through purchases are stored in a machine-readable format for the period of time specified in the Accounting Act.
The machine-readable service is located in a protected and locked computer room accessible only by technical personnel with access badges. The servers are firewall-protected.
Access to the servers and applications is limited to the controller’s local area network (LAN) and authorised personnel within the LAN holding the necessary user IDs and passwords.