Lahti Energia

Privacy statement of Lahti Energy’s customer and marketing register

Updated on 26 June 2023

This privacy statement describes how we at Lahti Energy collect and process personal data about our customers and potential customers.

1 Controllers

Lahti Energy Ltd (080487-1) and Lahti Energia Sähköverkko Oy (2075131-1) (hereinafter referred to as “Lahti Energy”)
Each Lahti Energy Group company, as the controller, maintains its own register for the following entities and is responsible for processing in its own operations for the purposes and on the legal bases specified in this privacy statement.

2 Contact details in matters of data protection

Lahti Energy Ltd

  • Kauppakatu 31
  • Postal address: P.O. Box 93, 15140 Lahti
  • Tel. 029 000 8000

Contact details of Lahti Energy Group’s Data Protection Officer:

  • Tel. 029 000 8000
  • Email: tietosuojavastaava@lahtienergia.fi

3 Purposes of use and grounds for processing your personal data

The processing of personal data is based on a customer contract or Lahti Energy’s legitimate interest (e.g. debt collection), statutory obligation or on your consent (e.g. cookies, marketing). The purpose of use of the personal data is:

  • managing, maintaining and developing the customer relationship;
  • customer communications, including feedback and customer satisfaction surveys and disturbance notices;
  • selling, marketing, offering, producing and developing products and services;
  • invoicing as well as payment monitoring and collection;
  • letter, telephone and electronic marketing and online advertising as well as targeting thereof;
  • conducting opinion and marketing surveys, organising promotional competitions and draws;
  • planning and developing business and services;
  • identification and access rights management of the customer and service users, e.g. the OmaWatti service;
  • detecting, preventing and investigating misconduct, fraud and other crimes; and
  • analysis, segmentation and compilation of statistics for the aforementioned purposes.

4 Personal data processed and source of the data

We process the following personal data about customers and potential customers, including newsletter subscribers, those who made a request for an offer, those who left a contact request, participants in events, visitors to the website and those who registered in the OmaWatti service:

Basic customer information

  • Name and contact details, such as phone number, email address and postal address
  • Identifying data: if necessary, personal identity code for e.g. invoicing, registration in the OmaWatti service

Information related to the customer relationship

  • Customer number and customer history, such as contract information, security information, customer satisfaction surveys/feedback and complaints
  • Information related to communication, such as electronic service forms, chat messages, call recordings
  • Billing, payment and debt collection information as well as information on creditworthiness
  • Marketing consents and prohibitions
  • Marketing measures, their use and the information provided in connection with them, such as newsletter subscription
  • Information regarding the use of the website and electronic services, such as browsing and search data, usernames and passwords, cookies, advertising identifiers or data collected through other similar technical tracking methods for the purposes specified in the cookie consent, IP addresses. For more detailed information on the use of cookies, please see “Information about cookies” on our website
  • Any other information provided by the data subject

The customer’s connection and place of use details

  • Information regarding connections and places of use, place of use number
  • Contract and consumption information

We process the following personal data about the decision-makers and contact persons of customer companies, corporations and partners (incl. newsletter subscribers, those who made a request for an offer, those who left a contact request, participants in events):

  • Name, title, company/corporation, postal address, email address, phone number
  • Customer history, e.g. participation in events and events, contacts, call recordings
  • Marketing permissions and prohibitions

The data in the register is regularly collected from the data subject by phone, in meetings or by other similar means. The register is compiled from information provided by the customer in connection with making an offer and/or concluding a contract and during the contractual relationship, as well as information obtained in other ways in the customer relationship, such as information on the use of products and services.

In addition, information regarding customers is regularly obtained from energy companies operating in the electricity market and from the centralised information exchange unit for the electricity market, Fingrid Datahub Oy (Datahub), on the basis of information exchange based on the applicable law or official regulations.
Information on potential customers is obtained in connection with competitions, draws and telephone sales, for example.

Personal data may also be collected and updated from public and private registers, such as the registers of the Population Register Centre, Suomen Asiakastieto Oy and other controllers providing address, updating and other similar services. The data is also updated on the basis of the rules for information exchange on the electricity market published by Finnish Energy.

5 Parties to whom we transfer and disclose data and transfer of data outside the EU or EEA

Data may be transferred to Lahti Energy’s group companies, subcontractors, service providers and partners in accordance with the purpose of use of the register. We use service providers for the processing of personal data for the following services:

  • customer service, maintenance of customer information and invoicing, call recordings and chat;
  • maintenance of the OmaWatti service;
  • marketing and sales;
  • maintenance of newsletter mailing lists and sending of the newsletter;
  • implementation of customer satisfaction surveys; and
  • maintenance and processing of the information of participants in events.

In accordance with the data protection agreement, each service provider processes personal data only to the extent that it is necessary to provide the service in question, such as in connection with system maintenance and fault repair.

In addition, data may be disclosed to the authorities, debt collection agencies for the collection of invoices and in connection with legal proceedings or official processes, to electricity market parties and the centralised information exchange unit for the electricity market, Fingrid Datahub Oy (Datahub), within the limits permitted and/or required by the electricity market and other legislation. Fingrid Datahub Oy’s privacy statement is available at www.fingrid.fi.

We may transfer your personal data outside the EEA if it is necessary for the purposes of processing personal data described above or for the technical implementation of data processing. The level of data protection outside the EEA may be lower than in the EEA. In such situations, in the absence of a data protection adequacy decision by the EU Commission, Lahti Energy will apply appropriate additional safeguards to ensure the protection of your personal data, such as by applying the standard clauses of the European Commission on the transfer of personal data to third countries (available at https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en).

7 Your rights as a data subject in relation to data processing

Requests concerning the rights of data subjects must be sent to the address mentioned in section 2. As a data subject, you have the following rights:

  • Right of inspection and the right to demand the rectification and erasure of data
  • You have the right to receive information about the processing of your personal data, to inspect the data about you stored in the personal register as well as the right to demand the rectification of incorrect data and the erasure of data. If you are registered in the OmaWatti service, you can also inspect your data through the service (https://omawatti.lahtienergia.fi).
  • Right to withdraw consent
  • You have the right to withdraw your consent to the processing of personal data at any time. The withdrawal of consent has no effect on the lawfulness of data processing carried out prior to the withdrawal.
  • Right to prohibit marketing
  • You have the right to prohibit the processing of your data for the purpose of market and opinion research or related profiling. In addition, you can prohibit marketing at any time or cancel the electronic marketing permission you have given by notifying the address mentioned in section 1 of the prohibition or by using the link in the marketing message to prohibit marketing.
  • Right to object and right to restrict processing
  • You have the right to object to or request the restriction and transfer of the processing of your data.
  • Right to lodge a complaint with the supervisory authority
  • You have the right to lodge a complaint with the competent supervisory authority if you believe that the EU General Data Protection Regulation has not been complied with in the processing of your personal data.

8 Changes to the privacy statement

We are constantly developing our operations and data protection tools and reserve the right to change the privacy statement. Where required by law, we will notify you of updates and changes that affect you.

9 Contact in matters related to data protection

If you have any questions or comments about the processing of your personal data or the privacy statement, or if you wish to exercise your rights, you can contact Lahti Energy’s Data Protection Officer through the OmaWatti service or using the contact details mentioned in section 2. In particular, avoid sending your personal identity code with the request; we will ask for more detailed information separately in a secure manner and if it is necessary for the processing of your request.

Through the OmaWatti service, you can view your data and we can identify you directly for the processing of your request.

Lahti Energy will respond to your requests within the timeframe required by legislation and in accordance with them.

If you are not satisfied with the response given by Lahti Energy, or if you believe that Lahti Energy is processing your personal data unlawfully, you can contact the Office of the Finnish Data Protection Ombudsman.