Privacy Policy

1. Data controller

2. Name of the register

Autokoulu Pasila's customer register and student register.

3. Purpose and legal basis for processing personal data

We process personal data for the following purposes:

• Organising driving courses and delivering instruction
• Fulfilling statutory obligations related to driving licence training (e.g. notifications to Traficom and Ajovarma)
• Managing the customer relationship, invoicing and payment tracking
• Booking and managing driving lessons and theory lessons
• Responding to enquiries and contact requests
• Developing our services

The legal basis for processing personal data is the performance of a contract (course enrolment), compliance with statutory obligations (the Driving Licence Act, the Act on Driving Tests) and the legitimate interest of the data controller (customer service and communications).

4. Personal data processed

We collect and process the following personal data:

• Name, date of birth and personal identity code
• Contact details: address, phone number, email address
• Driving licence details and any previous driving licence categories
• Information about the student's progress (completed theory and driving lessons, test results)
• Billing and payment information
• Possible health information, if necessary for obtaining the driving licence (e.g. a medical certificate)
• Information provided via the registration form or by other means

5. Sources of data

Personal data is collected primarily from the data subject during registration, course completion and interactions with us. Data may also be received from Traficom's and Ajovarma's systems within the scope of statutory obligations.

6. Disclosure and transfer of personal data

Personal data is disclosed to the following parties when required by law or necessary to deliver the service:

• Traficom – driving licence permit applications and student register notifications
• Ajovarma Oy – theory and driving test bookings
• Driving practice tracks (e.g. UAR, Vantaa) – skid-training bookings
• Accountant – billing and payment information in accordance with the Accounting Act

Personal data is not transferred outside the EU or the EEA. Data is not disclosed to third parties for marketing purposes.

7. Data processors (external service providers)

We use external service providers who process personal data on our behalf. These providers act as data processors, and we have ensured through contracts that they process data in accordance with the requirements of the GDPR.

• Customer service system – a system used for customer service, in which customers' contact details and enquiries are processed
• Accounting service – an external accounting firm handles bookkeeping, in which billing and payment information is processed in accordance with the Accounting Act

Service providers process personal data only in accordance with the instructions given by Autokoulu Pasila and have no right to use the data for their own purposes. We have agreed the data processing agreements required by the GDPR with each service provider.

8. Data retention period

We retain personal data only for as long as necessary for the purpose of processing or as required by law:

• Student register data is retained in accordance with the Driving Licence Act and Traficom's guidelines
• Accounting records are retained for the period required by the Accounting Act (6 years from the end of the financial year)
• Contact form data is deleted once the enquiry has been handled, unless it results in a customer relationship

9. Protection of the register

We use appropriate technical and organisational measures to protect personal data:

• Electronically stored data is protected with user credentials, passwords and firewalls
• Physically stored documents are kept in locked premises
• Access to personal data is restricted to those whose duties require it

10. Your rights

Under the EU General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of access – the right to know what personal data we hold about you
• Right to rectification – the right to request correction of inaccurate or incomplete data
• Right to erasure – the right to request deletion of your data, unless there is a statutory ground for retaining it
• Right to restriction of processing – the right to request that processing be restricted in certain situations
• Right to data portability – the right to receive your data in a machine-readable format
• Right to object – the right to object to processing based on legitimate interest

You can exercise your rights by contacting us by email at info [at] autokoulupasila.fi or by visiting our office. We will respond to your request within 30 days.

If you believe that the processing of your personal data is not appropriate, you have the right to lodge a complaint with the supervisory authority:

11. Cookies

Our website may use cookies to improve the site's functionality and user experience. Cookies are small text files stored on your device. Necessary cookies enable the site's basic functionality. You can manage your cookie preferences from your browser settings.

12. Changes to this privacy policy

We reserve the right to update this privacy policy. Material changes will be announced on our website. We recommend reviewing the policy periodically.