Privacy Policy for Motiva’s Energy Advisory Services
This Privacy Policy describes Motiva Oy’s current privacy policy for consumer services.
1. The controller
Name: Motiva Oy
Business ID: 1629255-4
Address: Siltasaarenkatu 8-10, 00530 HELSINKI
E-mail: tietosuoja@motiva.fi
2. Name of the register
Motiva Oy’s consumer services personal register.
3. Purposes and legal grounds for processing personal data
The purpose of processing personal data is to provide services to data subjects and to communicate, market and develop services.
Energy advice is provided at the choice of the data subject when contacting the helpdesk by phone, email, chatbot or by filling in a form on the online service and when subscribing to consumer information products, such as newsletters. In addition to consumers, energy advice is offered to contact persons in housing associations and rental housing companies. The personal data collected in the context of the advice will also be used to obtain feedbackto assess the effectiveness of the advice.
Personal data are collected from the data subjects themselves when the controller and the regional energy advisors provide advisory services. Data of contact persons of housing companies and rental housing companies are also obtained from public sources. In the Energy Expert Service, personal data are obtained when the data subject makes a contact or request for a quote to a company registered with the service through the service directory of energy service providers maintained by the controller. The purpose of the processing of personal data is to forward contacts, monitor the use of the service and carry out feedback surveys and other communication related to the service.
The legal basis for the processing of personal data is the legitimate interest of the controller. The controller has assessed that the interests or fundamental rights and freedoms of data subjects, which require the protection of personal data, will not be prejudiced by the collection or other processing of personal data in connection with the legal ground. Furthermore, the sending of the newsletter is based on the consent of the data subject, which the data subject may withdraw if he or she so wishes.
4. Personal data processed
Energy advice:
- Contact information such as name, email address and phone number
- Subject of the consultation and information relating to the subject, such as home address or similar contact details, property data such as size of the apartment, number of storeys, type of heating, electricity and water consumption data, information on technical systems and equipment
- Contact data generated when the controller contacts the data subject after the counselling service
- Event data, such as the data subject’s participation in events
- Information about the marketing content used by the data subject, such as message open and click data
Energy experts service:
- Service directory login information: name and contact details (e.g. email address and phone number).
- The category of service selected in connection with the service and other information on the use of the service, such as the type of contact form and the information provided on the form.
- Requests for tenders and feedback sent.
5. Recipients or categories of recipients of personal data
Personal data will be disclosed to public authorities within the limits permitted and required by applicable law.
The controller uses the services of third parties for the processing of data, for example for IT services, in which case the controller ensures the lawful processing of data through contractual arrangements and by instructing third parties on the processing of data. The third parties may change.
Processors of personal data are also the regional advisors selected by the Energy Agency and instructed by the controller: Regional Energy Advisors
6. Transfer of personal data to a third country
Some of the services used by the controller to process personal data may operate outside the territory of the Member States of the European Union or the European Economic Area. In such cases, the transfer of data will be subject to the requirements of data protection legislation, for example by using the standard contractual clauses of the European Commission when agreeing the transfer of data with the data processor.
7. Retention period of personal data
Personal data will be kept for as long as it is necessary to fulfil the purpose for which it was collected in accordance with this Privacy Policy. Personal data will be deleted after 3 years from the date of inactivity.
8. Rights of data subjects in the processing of personal data
Right to inspect data
The data subject has the right to check what data relating to him or her has been recorded in the personal data file and to obtain a copy of the data. The data subject should send a request for inspection to tietosuoja@motiva.fi. The data subject must provide in the request for inspection the information necessary for the search. If necessary, the controller will ask for additional information to identify the data subject.
The reply to the request for inspection will be sent to the person who made the request by e-mail, unless the data subject requests that the information be sent by other means.
Right to rectification of information
The controller shall ensure, to the best of its ability, the quality of the personal data it processes. The controller shall rectify, erase or complete inaccurate or unnecessary personal data on its own initiative or at the request of the data subject.
Right to restriction of processing
The data subject has the right to have the controller restrict processing if, for example, the data subject contests the accuracy of the personal data. In such cases, processing will be limited for a period of time during which the controller can verify the accuracy of the data.
Right to request erasure or object to the processing of your data
Data subjects have the right to request the erasure of their personal data or to object to their processing where there is a legitimate interest. Data subjects always have the right to withdraw their consent to receive the newsletter at any time.
Right to lodge a complaint with a supervisory authority
The data subject may lodge a complaint about the processing of personal data with the supervisory authority, which is the Data Protection Ombudsman.
9. Changes to the data protection policy
The controller may make changes to this Privacy Policy and related information. The controller recommends that data subjects check this privacy policy regularly to be aware of any changes that may have been made to it.