Data policy and Privacy Notice
KRUT Collective Ab Oy (Krut) processes and produces data, therefore it is important for us and our customers that we follow the best practices when processing data. We always strive to process data responsibly and transparently and to protect data in all stages of its life cycle. We protect personal data and sensitive business contents in accordance with laws, contracts and best practices, and we inform our customers and other stakeholders how their data is protected.
Data protection principles
This data policy also serves as our privacy statement, where we inform the data subjects and other stakeholders how we process and store personal data and ensure the legal rights of the data subject. We do identify and implement the requirements of data protection legislation in when handling personal data.
We act as a data controller for our company’s core operations, but we can also act as a data processor on behalf of our clients.
Our legal grounds for processing personal data are, depending on the context, the data subject’s consent, a contract, legitimate interest and the controller’s legal obligation in relation to the management of our company.
We do limit access to personal data to only those persons and entities who have a role-based need to process the data and who are committed to comply with our data protection and data security principles.
Third countries
We do not transfer personal data to such services, countries or entities whose level of data protection we have not sufficiently verified.
Storage periods
We store personal data for three years, unless there are statutory or contractual grounds for a longer storage period.
Rights of the registrant
In terms of data protection, a data subject is defined as a natural person whose personal data is collected, stored or processed by the controller, i.e. Krut. The data subject can be, for example, a customer or a person who reads our pages.
As a data subject, you have the right to
• get information about how we process your personal data
• access your information
• correct your information
• delete your data and be forgotten
• restrict data processing
• object to data processing
• not to be subject to automatic decision-making.
The registrant cannot exercise all rights in all situations, in certain situations we may have a legal or contractual obligation to continue processing or storing personal data.
Technical and organisational security measures
We protect personal data with appropriate data security measures and by regularly reviewing our processing procedures.
Information security principles
Our company is committed to ensuring a high level of information security in all our operations in terms of data confidentiality, integrity, and availability. In our company, information security is based on risk management and the implementation of best practices, contracts, and statutory requirements.
When processing data, we primarily always use well-known and high-quality IT services.
In order to ensure a high level of information security and to constantly improve our security, we regularly conduct reviews with the support of an external partner.
We ensure that access to our information and services is appropriate and that the security of our services is sufficiently hardened in case of information security vulnerabilities.
We cooperate with our stakeholders in terms of information security, especially by preparing in advance for the processing of possible information security deviations.
Copyright
Basically, we retain the copyright to the content we create, unless it is content owned by our customer.
Inquiries and change requests
Our contact information, also in matters related to data policy, data protection and information security, is info@krut.fi, our postal addresses are:
info@krut.fi
+358 40 5088176
c/o A Grid PB 13100, 00076 Aalto
The date of this instruction
This data policy was last updated on XX.7.2024, we recommend checking at https://krut.fi/data-policy/ whether the content of the policy has been updated.
© KRUT Collective & U Data Security