This is a Privacy Notice prepared by Caranto Capital Oy. This notice is intended to describe what personal data we may collect and how it is handled and stored. Caranto Capital Oy is committed to processing data in accordance with the GDPR.
What data we may collect about you?
We collect the following types of personal data from our investors, prospects, clients, employees and other people the organization has a relationship with or may need to contact:
- phone number
- email address
- company address
- information required in Anti-Money Laundering procedure or other regulation
Any other personal data will be anonymized so that it can no longer be associated with you, in which case it is no longer personal data.
Why do we process personal data?
All data processed by Caranto Capital Oy is related to our business and it is collected by lawful bases: consent, contract, legal obligation, vital interests, public task or legitimate interests. Caranto Capital Oy ensures that personal data is limited to what is necessary in relation to the purposes for which they are processed. We send marketing material only after receiving an explicit consent.
How the data is collected?
Personal data is mainly collected from the individual himself or herself. We may also collect data from public registers maintained by Patent and Registration Office or the Tax Administration.
With whom may we share your data?
Your personal data may be shared with lawyers, courts, law enforcement authorities, regulatory authorities, financial institutions as well as consultants or other professionals in order to fulfill Caranto Capital Oy’s legal or contractual obligations.
We are established in Finland. We use cloud based platforms to storage personal data, such as Onedrive and Dropbox. These platforms may process personal data on our behalf on servers outside the European Economic Area.
How long will we retain your data?
Your personal data may be retained for as long as necessary to fulfil the purposes for which it was collected including any legal or reporting requirements. We will keep data relevant to our cooperation for five years following the last date of activity unless longer period is required by law.
All individuals who are the subject of personal data held by Caranto Capital Oy are entitled to:
- have access to your personal data;
- have your personal data corrected;
- have your personal data erased;
- restrict or object processing of your personal data;
- have your personal data transferred to another party.
Subject access requests from individuals should be made by email. Please contact us using the contact details listed below. We may need to request specific information from you to help us confirm your identity. The estimated delivery time of data requests is 14 days.
If you require any further information, please do not hesitate to contact us at: firstname.lastname@example.org.