InCar Oy’s Privacy Policy on Customer Register

Controller

• InCar Oy
• Takomotie 1-3, 00380 Helsinki, Finland
• Business ID: 0829741-9

Registry matters are handled by

• Data Protection Officer
• tietosuoja@suviagroup.com

Name of the register

InCar Oy’s register of users and customers of electronic services

Purpose of the register

Customer data may be processed for the following purposes:

• customer relationship management, development and analysis
• customer communication
• implementation of the service
• verification of customer transactions
• customer service and business development
• Marketing
• analysis and statistics

Customer data may also be processed by other Finnish companies belonging to the InCar Group.

The data contained in the register may be used, as permitted by law, for direct marketing, distance selling or other direct marketing, opinion or market research or other similar addressed mailings by partners of companies belonging to the InCar Group, as well as for customer communication, including by electronic means, if the Customer has given his/her consent to this when using the service.

Data content of the register

The register may contain the following information:

• Customer name
• Address, postcode and town
• Date of birth
• E-mail address
• Phone number
• Permissions and consents, if any
• Change history of customer data
• Customer identifiers
• Vehicle registration number and other information provided by the customer about the vehicle, such as make, model and first year of use
• Information on the owner and holder of the vehicle
• Information relating to the accident, such as the damage to the vehicle(s) and information on other parties, the time of the accident, the location of the accident and the circumstances of the accident. In addition, the register shall contain information on personal injuries, police investigations and witnesses to the accident.
• Any other data collected with the customer’s consent
• Customer relationship information, such as billing and payment information, product and order information, customer feedback and contacts, sweepstakes and contest response information, and cancellation information.

Regular sources of information

Information about the Customer is obtained from the Customer himself or, with his permission, from the insurance company, during the customer relationship via the Internet, in customer service situations, by telephone, e-mail or other similar means. Updates of name, address and mortality data may also be obtained from authorities and companies providing update services.

Regular disclosure of data

The Controller will disclose the Customer’s traffic, car or glass damage data only to the non-life insurance companies, car rental companies, InCar Partner repair shops and the persons designated by Evacar Autopalvelut Oy and ALD Automotive to process the damage data.

Within the limits permitted and required by applicable law, the controller may disclose the data to, among others, partners selected by the controller for marketing purposes, if the Customer has given consent to this when using the service.

Transferring data outside the EU or EEA

Customer data is processed in accordance with the EU General Data Protection Regulation. For partners outside the EU or EEA, we require an EU-US Privacy Shield agreement or other means acceptable under the GDPR.

Principles for the protection of the register

Access to the customer register is restricted to those persons employed by InCar Group and its service providers who need the information for their tasks. They have access to personal usernames and passwords. The data is collected in databases protected by firewalls, passwords and other technical means. The databases and their backups are located in locked premises and managed by the IT service provider in accordance with security principles.

Right of access, right to rectify inaccurate information and right to erasure

The customer has the right to check the information on his/her consumer customer register. The request for inspection must be made in person at the offices of the controller. The request for inspection may be made free of charge once a year. Requests for inspection will be answered without delay, usually within two weeks of the request.

You have the right to object to the use of your data for marketing or profiling purposes and the right to request the correction of inaccurate data. The customer also has the right to request the deletion of their personal data from the customer register. Not all personal data can necessarily be deleted due to legal obligations.

Requests for personal data (inspection, correction, deletion) must be made in person at the controller’s offices.

InCar Oy reserves the right to update this Privacy Policy due to service developments or changes in legislation. This Privacy Policy replaces the previous Privacy Policy.

Cookie Statement

We use cookies and similar technologies such as local storage on our website to perform functions and analytics. Cookies are small text files between the browser on your terminal and the server.

We use Google Analytics to analyse the use of our website and trends, among other things. The information sent to Google is anonymised.

We also use the Facebook pixel on our website to collect information about visitors to our website for use in Facebook advertising.

Our chat service Giosg also uses cookies for personalisation and analytics.