1. Registrar
Ninjou Ltd., later mentioned also as “Ninjou”
Business ID 2543310-1
2. Contact person
Jani Puustinen
3. The name of the registry
Ninjou Oy’s personal information, marketing and customer register.
4. Purpose of processing personal data
Ninjou Ltd.’s uses personal data in it’s payroll and billing service. In addition, Ninjou analyzes the users information on Ninjou Ltd.’s internal and external marketing planning and product development.
5. Information content of the register
Ninjou Ltd. collects the following information from users of the service:
– The persons whole name
– Social security number
– Home address
– Phone number
– E-mail address
– Bank account number
– Tax card information
– Billing information
– User’s customer register
– Salary calculations
– Age
– User activity in Ninjou Ltd.’s extranet including the current IP address from which pages were browsed
6. Regular sources of information
In its operations, Ninjou Ltd. uses information collected from users as mentioned in section 5. External sources of information include insurance companies, tax and enforcement authorities, as well as other authorities that, according to Finnish law, may transfer information to Ninjou Ltd. and from whom Ninjou Ltd. is legally required to receive information.
7. Data recipients, disclosure of information
Ninjou Ltd.’s personal data is processed by only natural persons employed by Ninjou Ltd.
a) Ninjou Ltd. will only disclose to third parties the personal data of point 5, at the request of the Finnish authorities, according to Finnish law, the following information:
– The persons whole name
– Social security number
– Home address
– Phone number
– E-mail address
– Bank account number
– Tax card information
b) Ninjou uses data collected from its users in digital analytics services. The user can not be identified in this context because the information used does not contain personal information. Analytic services store the following information:
– Billing information
– User’s customer register
– Salary information
– Users activity in Ninjou Ltd. including mouse pointer movement, edited fields, session time, browser type and current IP address from which pages were browsed
– Time stamps
8. Transfer of data outside the EU or EEA
Ninjou Ltd. does not disclose information outside the EU. The data to be associated with an individual user will be disclosed only at the request of the Finnish authorities.
9. Principles of registry protection
Customer and personal data are stored in the registrar’s premises that are locked.
Access to the register is restricted to persons working for Ninjou Ltd. who need information in their duties. Digital user data is technically protected by isolating data repositories from the public network and the service through which access can be accessed is protected by firewall and access rights. Information is only transmitted via a secure connection.
Paper documents are mainly transferred to digital format and stored in a strong security cloud service. Accounting and other material stored in paper form are kept in a locked storage.
10. Storage time
Section 7 b analytics information is stored for up to 120 days in an outside analytics service. Digital invoicing and payroll data subject to the Finnish Accounting Act will be kept for a maximum of 6 years. Invoicing and payroll data subject to the Finnish Accounting Act in paper form will be kept for a maximum of 6 years.
11. General rights of a registered person
A private individual registered with the Ninjou Service has the right to view, modify and delete their personal data freely. Ninjou does not guarantee the functionality of the service if the following data is deleted:
-Account Number
-Tax percentage
-Contact details
12. Other Registered Rights
The employees and users have the right to transfer only their personal data to a third party. Any financial data related to invoicing and payroll are confidential and is owned by Ninjou.
Employees and users have the right to object to the transfer of their data to third parties if the third party is not a Finnish authority to which the data must be disclosed by law. This should be notified to Customer Services by email to admin@ninjou.fi .
The employees and users have the right not to be subjected to automated decision-making. You will need to inform about this the customer service by email at admin@ninjou.fi.
A registered user or an employee of the Ninjou Service has the right to become completely forgotten after the termination of the customer relationship. Below you will find instructions on closing user relationship and getting forgotten.
User relationship to Ninjou can be terminated in writing by sending an e-mail at admin@ninjou.fi. After one calendar month after the end of the customer relationship, Ninjou removes all digital user information that is unique in its service. After this period, the user can not retrieve earnings certificates or other documents from the service, nor can Ninjou provide them to the user. In the form of paper, unique billing and payroll information is kept under the Finnish Accounting Act for 6 years.
13. In accordance with Regulation 2018/1725, Ninjou collects personal data only to the extent necessary to fulfil the specific purpose of our tasks.