The customer may, on his or her own initiative, use WhatsApp as the means of communication, in which case the WhatsApp Privacy Policy applies. Use of WhatsApp is only possible if the customer has installed it on his or her terminal and accepted the terms of use and privacy policy of WhatsApp. Kamux also offers its customers a standard mobile phone number.

Other transfers

In addition, we may share your information in connection with any merger, sale of our assets, or a financing or acquisition of all or a portion of our business and in connection with other similararrangements.

Personal data are also disclosed to third parties if required under any applicable law or regulation or order by competent authorities, and to investigate possible infringing use of the Products and Services as well as to guarantee the safety of the Products and Services.

7.       Protection of Personal data

We commit to follow to the security provisions of applicable data protection regulations, as well as to process personal data in compliance with good processing practices.

Personal data are protected with appropriate technical and organizational measures. We store the information in locked environments with limited physical access rights and secure IT-environments. The IT-environments are protected with firewalls and other adequate security technics, and advanced monitoring is done 24/7. Our personnel and processors that process personal data are obliged to keep personal data strictly confidential. Access to personal data is only granted to those employees that need the information to perform their work tasks. Employees and processors have personal IDs and passwords.

The digital camera recordings are kept in a locked space with limited access. The recordings can only be accessed by authorized personnel and can only be shared when required by authorities according to laws and regulations. Old recordings are regularly destroyed when a new recording overwrites them. However, recordings related to damages or crimes are saved as long as necessary for the investigation and other legal measures.

We inform the authorities and users/data subjects of data breaches according to applicable information security and data protection regulation(s).

Rights of the data subjects and the Supervisory authority

The data subjects have the rights set out in the applicable data protection legislation.

Right to access and verify

You have the right to have confirmed if we process your personal data.

You have the right to verify and access your personal data and to request us to provide you the data in writing or electronically.

Right to correct and erase (right to be forgotten)

You have the right to have corrected any incorrect or incomplete personal data. You have also the right to request us to remove data.

We also remove, correct and complete incorrect, unnecessary, incomplete or outdated data on our own initiative when we notice such data.

Right to data portability and to object and restrict processing

You have the right to transmit your data to anothercontroller.

You have the right to request us to restrict processing of your personal data in accordance with the conditions set out in the data protection legislation. We will also restrict the processing of your personal data if we cannot correct or remove incorrect data, or if there is any uncertainty related to request to erase yourdata.

You have the right to object to processing of your personal data for certain purposes. You have the right to deny any processing or transferring of data for direct marketing.

Right to withdraw consent

If the processing of your personal data is based on consent, you have the right to withdraw consent at any time. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

You can deny any direct marketing and withdraw your consent regarding electronic direct marketing by following the instructions received in connection to the marketing communication (e.g. in the marketing email or SMS).

You can always withdraw any consent including parental consent by contacting Kamux using the contact information provided in the beginning of this document (1 General information

How to exercise the rights of the data subjects

After receiving all the required information of your request (incl. confirmation of identity), we will start the processing of your request. We will do our best effort toprocess your request within a period of one (1) month.

We may reject requests that are unreasonably repetitive, excessive or manifestly unfounded.

Right to access, correct and erase your personal data

You can make a request for data subjects' rights by contacting our customer service via e-mail asiakaspalvelu@kamux.fi or phone +3589 8560 4000, or by sending a request  to the address mentioned in section 2.

Right to object and restrict processing, data portability, object to direct marketing and withdraw consent

You can exercise these rights by using the contact information in the beginning of this privacy notice.

Right to lodge a complaint with the supervisory authority

In case you consider our processing activities of your Personal data to be inconsistent with the General Data Protection Regulation (GDPR) (EU) 2016/679, you have the right to complain to the local data protection supervisory authority.

Data Protection Official

Local data protection officials in Finland, Sweden and Germany.

8.       Changes to this Privacy Notice

We may change this Privacy Notice from time to time, whenever necessary. All changes hereto will be made available on our websites (kamux.fi/kamux.se/kamux.de/kamux.com) where we publish this Privacy Notice.

This Privacy Notice has been first published on 24.5.2018.

Change history

Updated 17 May 2023

The purpose of this privacy notice is to give you information on how we at Kamux Group process personal data relating to recording camera surveillance

1.    Data controller
Kamux Corporation (business ID 2442327-8)

Each Kamux Group company is responsible for the processing of personal data in its own activities for the purposes and on the legal basis set out in this privacy notice and may use personal data collected by other Kamux Group companies for the same purposes as necessary.

2.    Contact details in privacy matters
As a data subject you may contact Kamux in all privacy matters using following contact information: 
Kamux Corporation / Privacy matters
Parolantie 66 
FI-13130 Hämeenlinna, Finland

Contact details of Data Protection Officer: privacy@kamux.fi  

3.    For what purposes and on what basis do we process your personal data?
The processing of data is based on the legitimate interests of Kamux. The purpose of camera surveillance is:
•    protect property, prevent vandalism and crime
•    to help detect and prevent crime that has already occurred and situations that endanger property and security
•    ensuring the safety of persons and areas within the area.

Additionally, the records of the camera surveillance may be used for the following purposes:
•    verifying the ground for the termination of employment
•    investigating or verifying harassment or molesting in accordance with the Act on Equality between Women and Men or harassment or inappropriate behavior in accordance with the Occupational Safety and Health Act, if there is a reasonable ground for suspecting that the employee is guilty of harassment, molesting or inappropriate behavior 
•    investigating an occupational accident or other situation, which has caused danger or risk, in accordance with the Occupational Safety and Health Act.

4.    What type of information is collected and where do we collect personal data from?
The register contains footage of people moving around the company's premises and areas. 
Areas and premises subject to camera surveillance are marked with camera surveillance signs. In addition to the image, the date and time of the events are recorded. 
 
The personal data recorded in the register is collected in the context of the recording camera surveillance. Other data sources are used within the limits set by law.

5.    Do we share your personal information and may information be transferred outside the EEA?
We do not regularly transfer your personal data outside the Kamux Group, neither do we transfer it outside the EEA. Data may be disclosed to authorities, such as the police, for the purpose of investigating criminal offences.
We use external service providers to carry out camera surveillance. We make data processing agreements with service providers acting as processors and ensure that our partners process personal data only to the extent that is necessary for the provision of the service in question.

6.    How your personal information is protected and how long we process information
The data is stored in systems that use both technical and software means to ensure data security and control access to the data.

The recordings are kept for as long as they are necessary to fulfil the purpose of the camera surveillance. In principle, records are kept for two months. Recordings that are needed, e.g. as evidence, are kept until the case has been concluded, e.g. until a final judgement has been obtained.

7.    Your rights as a data subject in relation to data processing
You can make a request for data subjects' rights by contacting our customer service via e-mail asiakaspalvelu@kamux.fi or phone +3589 8560 4000, or by sending a request  to the address mentioned in section 2.

As a data subject, you have the following rights according to the data protection law. 
•    Right of access, rectification and erasure 
o    As a data subject you are entitled to obtain information of your personal data processed by Kamux. You have also a right to inspect the personal data concerning yourself, which is stored in the register, and a right to require rectification or erasure of your data. 
•    Right to ask for the restriction or object the processing 
o    You have the right to ask for the restriction or object your personal data processing. 
•    Right to lodge a complaint with a supervisory authority
o    If you consider that the processing of personal data relating to you infringes the data protection regulation, you have the right to lodge a complaint with a supervisory authority. You may lodge your complaint in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

Updated 27 April 2023

1.    Purpose of this notice and data controller
The purpose of this notice is to give you information regarding how we process personal data related to investor relations whether you are investor or prospective investor and/or interested in our business and solutions. The data controller of your personal data is Kamux Corporation (business ID 2442327-8).  

If you have any questions related personal data processing and/or this notice, please contact Data protection Officer: privacy@kamux.fi 

2.    Contact details in privacy matters 
As a data subject you may contact Kamux in all privacy matters using following contact information: 
Kamux Corporation / Privacy matters
Parolantie 66 
FI-13130 Hämeenlinna, Finland
Contact details of Data Protection Officer: privacy@kamux.fi  

3.    For what purpose is your personal information collected  and what type of information is collected and where? 
We publish a range of reports to share information about Kamux’s business and solutions such as financial news to media, analysts, investors and shareholders. You can order releases and publications such as our stock exchange or press releases. 

When you wish to subscribe for information from us, such as Kamux’s press releases and reports, we ask you to provide such personal data as is required to fulfill the particular service. Examples of the categories of personal data that we collect and process include name, contact details (such as email address, postal address), details of the company or organization that you represent, your position and other professional details. Personal data is used to distribute press releases, reports, invitations to seminars and similar events. We process personal data on the basis of a legitimate interest of conducting our business and maintaining contacts with you and the companies and organizations that you represent and on the basis of subscription of releases.

Personal data is collected from you by webpage forms, by phone, in meetings, or by other equivalent means.
 
4.    Who do we share your personal information and may information be transferred outside the EEA? 
We use services of external service providers for, e.g. investor relation tool to maintain mailing lists and for processing information. In accordance with data protection agreements, each service provider can only process personal data to the extent that is necessary for the provision of the service in question. Where your personal data is transferred outside of the EEA we will ensure that appropriate mechanisms are in place to ensure the protection of your personal information, including the use of specific contracts approved by the European Commission giving your personal data the same protection as it has in Europe.

We use investor relation tool to maintain information and send releases and publications. Some the data processing functions of the service are performed outside the EEA area, e.g. from the UK and the United States. The transfer of data to the UK is carried out based on the adequacy decision issued by the EU Commission. The level of data protection may be lower outside the EEA. Unless the country to which the data is transferred, such as the United States, has received the EU Commission's adequacy decision, we apply other appropriate protective measures to ensure the protection of personal data, for example by applying standard contract clauses in accordance with the European Commission's decision on the transfer of personal data to third countries. Available: https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en  

5.    How your personal information is protected and how long we process information
We apply physical, technical, and administrative protection measures to protect personal data. Only those parties who have the right to process personal data for their work performance are authorized to use the systems containing data. We make data processing agreements with all subcontractors that process personal data in order to ensure appropriate data protection.

We store personal data for as long as it is necessary to initiate, maintain or manage a professional relationship with you, the company or organization that you represent or as long as the individual requests the erasure of the data. In this case we will store the data that legislation obligates us to store and the data about the erasure. You may unsubscribe from our subscription services and similar distributions at any time, following which your personal data will not be saved for these purposes.

We assess the necessity of retaining data regularly. In addition, we take care of such reasonable measures which ensure that no incompatible, outdated or inaccurate personal data, taking into account the purpose of the processing, are stored in our registers.

 
6.    Your rights as a data subject
You can make a request for data subjects' rights by contacting our customer service via e-mail asiakaspalvelu@kamux.fi or phone +3589 8560 4000, or by sending a request  to the address mentioned in section 2.

As a data subject, you have the following rights according to the data protection law:
•    Right of access, rectification and erasure 
o    As a data subject you are entitled to obtain information of your personal data processed by Kamux. You have also a right to inspect the personal data concerning yourself, which is stored in the register, and a right to require rectification or erasure of your data. 
•    Right to object the processing 
o    You have the right to object your personal data processing. 
•    Right to lodge a complaint with a supervisory authority
o    If you consider that the processing of personal data relating to you infringes the data protection regulation, you have the right to lodge a complaint with a supervisory authority. You may lodge your complaint in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

Updated 27 March 2023

The purpose of this privacy notice is to give you information on how we at Kamux Group process personal data relating to our whistleblowing scheme. 

1.    Data controller
Kamux Corporation (business ID 2442327-8)

Each Kamux Group company is responsible for the processing of personal data in its own activities for the purposes and on the legal basis set out in this privacy notice and may use personal data collected by other Kamux Group companies for the same purposes as necessary. 

2.    Contact details in privacy matters 
As a data subject you may contact Kamux in all privacy matters using following contact information: 
Kamux Corporation / Privacy matters
Parolantie 66 
FI-13130 Hämeenlinna, Finland

Contact details of Data Protection Officer: privacy@kamux.fi  

3.    For what purpose is your personal information collected? 
The purpose of the whistleblowing scheme is to monitor the Kamux Group's activities and to ensure the protection of persons reporting breaches of European Union and national law. The processing of personal data is based on national laws enacted under the Whistleblowing Directive (e.g. in Finland, the Act on the Protection of Persons Reporting Breaches of European Union and National Law § 2 and § 10). and EU Market Abuse Regulation. The whistleblowing channel allows the company to monitor its compliance with the rules and laws governing its activities, to protect whistleblowers and to ensure the confidentiality of the processing of data. The information will be used to monitor and investigate wrongdoing and, if necessary, to prepare, present or defend a legal claim.

Through the whistleblowing channel, persons who, in the course of their work, have discovered or suspect that they have discovered an infringement of European Union or national laws may submit a report under the applicable law for activities in the public interest in areas such as: public procurement; financial services, money laundering and prevention of terrorist financing; product safety; transport safety; environmental protection; radiation and nuclear safety; food and feed safety; animal health and welfare; public health; consumer protection; protection of privacy and personal data; security of network and information systems; taxation; grants and state aid; competition rules and financial market rules and regulations.

4.    What type of information is collected and where do we collect personal data from?
The register may contain the following types of personal data about the whistleblower and the subject of the report and other related persons, such as witnesses:
•    Name of the whistleblower, email address, telephone number. The report may also be made anonymously.
•    Name of the subject of the report, information related to the illegal activity (incl. place and time), information about witnesses
•    Information related to the reporting and processing of the report and messages (including report code and status).
•    Any other information provided by the whistleblower himself.

In addition, information is stored on the handlers of reports coming through the channel, such as name, job title, e-mail address, user IDs in the system, log information on the use of the system. 
The primary data source for the information stored in the register is the whistleblower himself. In addition, the data will consist of information recorded during the process of handling whistleblowing reports. Other data sources are used within the limits set by law.

5.    Who do we share your personal information and may information be transferred outside the EEA? 
Kamux does not regularly disclose data to outside the Kamux Group and does not transfer data outside the EEA. However, personal data may be disclosed in accordance with the law, such as for police investigations. 

Kamux uses a subcontractor to manage the whistleblowing system and to process reports. As such, personal data will be transferred to subcontractors only to the extent necessary to implement the whistleblowing channel and process reports.

6.    How your personal information is protected and how long we process information?
Only persons who have the right to process the data for their work may use the system which contains personal data. The handlers of the reports are bound by the obligation of secrecy. Each user has a personal username and password for accessing the system. The data is collected in databases which are protected by firewalls, passwords, and other technical means. The databases and their backups are situated in locked premises, and only certain individuals who are named beforehand have access to the data. Kamux shall ensure the realization of data protection with data processing agreements concluded with the subcontractors that process personal data.

Data in the register is stored for as long as is necessary for the purpose of monitoring or to fulfil statutory obligations. In principle, the report data is retained for five years from the date of the report, unless further retention is necessary for the purposes of an ongoing criminal investigation, judicial proceedings or administrative enquiry or for the protection of the rights of the whistleblower or of the subject of the report. Personal data that is clearly irrelevant to the processing of the report will be deleted without delay.

7.    Your rights as a data subject
You can make a request for data subjects' rights by contacting our customer service via e-mail asiakaspalvelu@kamux.fi or phone +3589 8560 4000, or by sending a request  to the address mentioned in section 2.

As a data subject, you have the following rights according to the data protection law. In certain circumstances, the company may have the right to restrict the exercise of the rights set out below, for example if it is necessary for the investigation of a crime or to protect the identity of the whistleblower.

•    Right of access, rectification and erasure 
o    As a data subject you are entitled to obtain information of your personal data processed by Kamux. You have also a right to inspect the personal data concerning yourself, which is stored in the register, and a right to require rectification or erasure of your data. 
•    Right to object the processing 
o    You have the right to object your personal data processing. 
•    Right to lodge a complaint with a supervisory authority
o    If you consider that the processing of personal data relating to you infringes the data protection regulation, you have the right to lodge a complaint with a supervisory authority. You may lodge your complaint in the EU Member State of your habitual residence, place of work or place of the alleged infringement.