This privacy policy for Minilex Oy (business ID: 2411251-7), which is in accordance with the EU General Data Protection Regulation (GDPR), describes how information obtained through Minilex Oy, the Minilex.fi website and the company’s social media platforms, are handled. In addition, this privacy policy describes the rights of those registered to Minilex Oy, the Minilex.fi website and the company’s (hereafter referred to as “Minilex” or “Company”) social media platforms.

In matters related to personal data, a user can contact:

Minilex Oy
Hallituskatu 11 C 44
90100 Oulu
tietosuoja@minilex.com

The appointment of a separate Data Protection Officer has not been deemed necessary by Minilex.

The basis for the processing of personal data and its purpose

A contract-based customer relationship between Minilex and its client, the consent of a client, an assignment given by a client or some other relevant connection can serve as a basis for the processing of personal data.

Other personal data that is directly associated with the assignments can also be stored in the register. These can be, for example, the client’s partners or opponents.

The processing and storing of personal data is done by Minilex in order to be able to answer contact and quotation requests, take care of judicial assignments as well as to follow up on the traffic to the Minilex.fi website. The processing of personal data can also be done in order to develop and maintain the Company’s business and marketing. The processing of personal data can additionally be done in order to fill the requirements regarding the storing, reporting and inquiry duties as set by the law or the orders or guidelines of the authorities.

Registration

Minilex can gather data about the users and clients of the Company’s website.

Processed data

Minilex only gathers necessary data on each registree. The information given by the registree through the Company’s website is gathered as follows:

Logging in as a user:

- email

The Ask a lawyer form:

- email
- phone number

In connection with the Ask a lawyer service, a user often writes information related to the question, in which the user on their own initiative, against the warnings of Minilex, might leave their own or another person’s (such as the opponent’s) personal data into the points in question.

We can disclose contact information to our partners within the limits of the legislation in force.

The retention period of personal data

Personal data is stored only as long as it is necessary for the operation of the registrar.

Transfer of data outside the EU or EEA

Personal data will not be transferred outside of the European Union (EU) or the European Economic Area (EEA).

The website’s cookies and monitoring

Minilex uses cookies to monitor the traffic to the Minilex.fi website using the Google Analytics program (Google Inc.). Your internet browser, for example, sends your IP address and the used website’s address automatically to Google. Minilex only receives anonymous information through this, and so Minilex does not receive information of the user’s IP address, thus Minilex cannot identify the user through this. However, in certain situations user’s IP address may be saved into a log file temporarily.

With the help of Google Analytics, the Company receives important data of the users of the website, like the number of visitors, the duration of the visit to the website, the specific web pages that the user visits as well as the information about whether or not the user has previously visited the Company’s website.

With the help of this information, Minilex can improve and optimize its website so that it can serve its users better than before. A user can prevent Google Analytics from gathering information about them. More information about this can be found on Google’s website.

In order to make it easier to share the content of the website, the Minilex website may include social media services (Facebook, Twitter, Instagram, Pinterest, G+ and so forth) and their cookies.

The users always have the right to prevent the gathering of cookies or delete and administer cookies with the settings provided by the browser or mobile device.

Privacy policy, access to personal data and the encryption of personal data

Data security is important to Minilex. Access to users’ personal data is reserved only to specific people and this is ensured through access rights. Access to a user’s personal data always requires logging in with one’s personal username and password. All persons processing personal data have an obligation to observe secrecy.

The Minilex.fi website uses an encrypted HTTPS connection, that is used to securely transfer data online. The data is encrypted before it is sent with the help of the TLS protocol. Therefore, all data that has been gathered on the website is protected. When one uses the Minilex.fi website, one will notice a green padlock in the browser’s address bar as well as the text https://. This is how one can identify that the web page is encrypted.

The data gathered through the Google Analytics service is saved and processed only in this specific Google service. The use of the Google Analytics account connected to Minilex requires a username and password. These are accessible only to a few key persons within Minilex.

All personal data that may be in paper or other non-electronic form, are always stored in locked spaces and locked cabinets to which outsiders do not have access. All personal data is destroyed with utmost care and in compliance with data security.

The rights of the registree

If a user wants, they can check their data saved into our register or check to see that no information about them is found in our register. As a registree, a user also has the right to receive a copy of their registered personal data. They can realize this right by sending a request of this, signed by them (or certified by some other equivalent method) to the address mentioned in the beginning of this privacy policy either by mail or email.

As a registree, one can also demand to correct, improve or remove unnecessary, incorrect, defective or outdated personal data that is potentially stored in our register. Such demands can be made either by mail or email to the address mentioned in the beginning of this privacy policy. In this message, a user is asked to include their name, contact details and those changes they wish to see so that we can ask for additional information or otherwise be in touch related to the matter, should a need for this arise.

A user also has the right to deny the processing of their personal data as well as the right to forbid the transferring of their personal data for distance sales, direct mail advertising and direct marketing purposes. This can be done through the use of the above-mentioned Minilex privacy policy addresses.