SOK CorporationP.O. Box 1 FI-00088 S-RYHMÄ, FinlandStreet address: Fleminginkatu 34, FI-00510 Helsinki, FinlandBusiness ID 0116323–1If you need more information about the processing of personal data, you can contact us by email at the address: partnersupport@sok.fi
Bases for the processing personal data and purposes of use
We process personal data based on legitimate interest to establish and maintain marketplace shop profiles, manage seller contact information, and support communication and cooperation. The processing is necessary to operate and administrate the online marketplace platform.We also process personal data to comply with applicable legal obligations, including know your business customer requirements and obligations related to the operation of online marketplace services. This processing enables us to verify marketplace sellers to promote consumer safety by ensuring the reliability of seller information and prevent illegal content and activities on the marketplace platform.
The personal data processed
Seller contact information:Name and titlePhone number and email addressCompany legal representative:Name and titleAddressPhone number and email addressBank account detailsCopy of identification document or other electronic identification
Where do we obtain personal data
We obtain personal data from the persons directly, or from the marketplace seller company.
Recipients of personal data
Personal data is processed in electronic systems and services for the purposes specified in this privacy notice. We use external service providers to support the operation of our systems and related support services. Personal data may be disclosed to such service providers to the extent necessary for the performance of the services they provide on our behalf.We may disclose personal data to authorities within the limits allowed and required by applicable legislation, such as answering authorities’ requests for information.We ensure that an appropriate level of protection for personal data is maintained by partners in accordance with applicable data protection legislation.
Transfers of personal data to third countries or international organisations
We use subcontracts to process personal data, and the data is transferred in a limited way outside of the European Union (EU) or the European Economic Area (EEA) for the purposes of service provision, technical administration and support. We can perform these types of transfers if the European Commission has decided that the target country or organisation has a adequate level of data protection or we can otherwise ensure an adequate level of protection of personal data in accordance with applicable legislation, such as by using standard contractual clauses approved by the European Commission.We require our subcontractors to agree to follow data protection and information security requirements imposed by applicable law and by SOK.
Retention period for personal data or criteria for determining the retention period
We process the personal data for the duration of the contractual relationship with the marketplace seller. We retain seller contact information for one year and legal representative information six months after the termination of the contractual relationship with the marketplace seller.
Data subject rights
The data subject has the following rightsRight to access the dataRight to correct inaccurate dataRight to erasure of data when there is no other legal basis for retaining the dataRight to restrict processingRight to object to processingRight to data portabilityIf the data subject wishes to exercise their rights or obtain more information about the processing of their personal data, they can contact the data controller mentioned in this privacy notice.The data subject also has the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates applicable data protection legislation. In Finland, this supervisory authority is the Data Protection Ombudsman.
Effects of not providing personal data on the contractual relationship between SOK and the marketplace seller
If the required personal data is not provided, it will not be possible to enter into an agreement, nor to establish or continue the business relationship.
General description of technical and organizational security measures
We carefully protect personal data throughout its entire lifecycle by using appropriate data protection and information security measures.System suppliers process personal data in secure server facilities. Only designated employees of companies acting on behalf of and for SOK, as well as S Group employees whose job description it includes, have the right to use the register and maintain its data. Access to personal data is restricted, and all personnel are bound by a duty of confidentiality. In S Group, we protect personal data, inter alia, through proactive risk management and security planning, and by using telecommunications safeguards and secure facilities, as well as access control and security systems. After initial processing, physical documents containing personal data are stored in locked and fireproof storage facilities. Granting and monitoring of access rights is controlled. We regularly train personnel involved in the processing of personal data and ensure that also the employees of our partners understand the confidential nature and importance of secure handling of personal data. We carefully select our subcontractors. We continuously update our internal policies and guidelines.If personal data ends up in the wrong hands despite our protective measures, there is a risk it could be misused. Should we detect such an event, we will begin to investigate it without delay and aim to prevent any damage. We will notify relevant authorities and affected individuals of any personal data breach in accordance with legal requirements.
