Leppäkosken Sähkö Oy Etusivulle

Privacy Notice: Stakeholders

This Privacy Notice explains how Leppäkoski processes the personal data of its stakeholders. Stakeholders include, for example, business partners, contractors and individuals who are not customers of Leppäkoski.

The Data Controller is the Group company with which the stakeholder has a contractual relationship or which the stakeholder’s representative contacts.

 

1. Data Controller

Leppäkosken Sähkö Oy
Business ID: 3086071-4
Address: Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland
Telephone: +358 3 453 400
www.leppakoski.fi

Leppäkosken Lämpö Oy
Business ID: 0840218-6
Address: Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland
Telephone: +358 3 453 400
www.leppakoski.fi

Leppäkoski Group Oy
Business ID: 0133023-9
Address: Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland
Telephone: +358 3 453 400
www.leppakoski.fi

Ulvilan Lämpö Oy
Business ID: 0642955-3
Address: Friitalantie 13 B, FI-28400 Ulvila, Finland
Telephone: +358 2 677 4823
www.leppakoski.fi

For data protection matters concerning the Leppäkoski Group, please contact us by email at tietosuoja@leppakoski.fi.

 

2. Purposes and legal bases for processing personal data

We process personal data for purposes including:

  • providing services or products in accordance with an agreement
  • maintaining and developing stakeholder relationships
  • communications relating to our operations
  • ensuring and improving corporate security and occupational safety
  • rectifying faults and disruptions
  • organising events

The processing of personal data may be based on:

  • an agreement between the Data Controller and the stakeholder
  • the data subject’s consent
  • compliance with the Data Controller’s legal obligations
  • the protection of the Data Controller’s vital interests
  • the Data Controller’s legitimate interests

Personal data is not used for automated decision-making or profiling.

 

3. Personal data processed

We process only personal data that is relevant to stakeholder activities. The personal data processed includes:

  • contact and identification details, including:
    • name
    • telephone number
    • email address
    • address
    • the organisation represented
  • information relating to events, such as information about special dietary requirements
  • information relating to contractors, including:
    • Business ID
    • tax number
    • information on qualifications, inductions and training completed
    • bank account number
  • any other information provided by the data subject or on their behalf

 

4. Sources of personal data

Personal data is obtained from the data subject or the organisation they represent.

Providing personal data is not based on a statutory or contractual obligation. However, certain personal data may be required in order to fulfil an agreement between the Data Controller and the stakeholder or to respond to an enquiry from the stakeholder’s representative.

 

5. Recipients of personal data

We may engage business partners in managing stakeholder matters. Business partners that process personal data include, for example, providers of event management systems.

We ensure that our business partners process personal data only for the purposes described in this Privacy Notice, in accordance with our instructions and applicable legislation.

The Data Controller may also be required to disclose personal data to public authorities, for example where required by mandatory legislation.

 

6. Transfers of personal data outside the EU or EEA

As a general rule, personal data is not transferred outside the European Union or European Economic Area.

Where personal data is transferred outside the EU or EEA, the transfer will always be carried out in accordance with applicable legislation and on the basis of an adequacy decision adopted by the European Commission or by using standard contractual clauses approved by the European Commission, together with any necessary supplementary safeguards.

 

7. Retention period

Personal data is retained only for as long and to the extent necessary for the purposes described in this Privacy Notice. The retention period may vary depending on the category of personal data. Further information on personal data retention periods is available in the table on our website.

 

8. Rights of the data subject

The data subject has the right to:

  • request access to their personal data and obtain a copy of the data we process
  • request the rectification of inaccurate or incomplete personal data
  • request the erasure of personal data in certain circumstances
  • withdraw their consent to the processing of personal data
  • request the restriction of processing or object to processing in certain circumstances
  • receive their personal data in a commonly used, machine-readable format and request that the data be transferred to another system in certain circumstances

Requests to access or rectify personal data may be submitted using Leppäkoski’s online form or in person at Leppäkoski’s premises at Eino Salmelaisen katu 23, FI-39500 Ikaalinen, Finland.

The data subject also has the right to lodge a complaint with the Data Protection Ombudsman. Further information on lodging a complaint is available on the website of the Office of the Data Protection Ombudsman at www.tietosuoja.fi.

This Privacy Notice was last updated on 30 September 2025.