{"id":8356,"date":"2018-09-18T12:39:28","date_gmt":"2018-09-18T09:39:28","guid":{"rendered":"https:\/\/medfilesgroup.com\/privacy-policy\/"},"modified":"2018-09-18T12:39:28","modified_gmt":"2018-09-18T09:39:28","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/medfilesgroup.com\/ja\/privacy-policy-careers\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\n<figure class=\"wp-block-image alignfull size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"295\" src=\"https:\/\/medfilesgroup.com\/wp-content\/uploads\/2021\/08\/medfiles-header-logo-1024x295.jpg\" alt=\"\" class=\"wp-image-4470\" srcset=\"https:\/\/medfilesgroup.com\/wp-content\/uploads\/2021\/08\/medfiles-header-logo-1024x295.jpg 1024w, https:\/\/medfilesgroup.com\/wp-content\/uploads\/2021\/08\/medfiles-header-logo-300x87.jpg 300w, https:\/\/medfilesgroup.com\/wp-content\/uploads\/2021\/08\/medfiles-header-logo-768x222.jpg 768w, https:\/\/medfilesgroup.com\/wp-content\/uploads\/2021\/08\/medfiles-header-logo-1536x443.jpg 1536w, https:\/\/medfilesgroup.com\/wp-content\/uploads\/2021\/08\/medfiles-header-logo.jpg 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<div class=\"wp-block-group alignfull\"><div class=\"wp-block-group__inner-container is-layout-flow wp-block-group-is-layout-flow\">\n<h1 class=\"wp-block-heading\">Privacy policy<\/h1>\n\n\n\n<p><strong>Controller<\/strong><\/p>\n\n\n\n<p>Oy Medfiles Ltd<br>Volttikatu 5, 70700 Kuopio<\/p>\n\n\n\n<p><strong>Persons responsible for the filing system<\/strong><\/p>\n\n\n\n<p>Client register: Sales and marketing coordinator,<\/p>\n\n\n\n<p>Vendor register: QA-Team<\/p>\n\n\n\n<p><strong>Purpose and grounds for processing personal data<\/strong><\/p>\n\n\n\n<p>Purpose for processing personal data:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Marketing for companies<\/li><li>Handling of client relations<\/li><li>Implementation of service agreements<\/li><li>Fulfill GxP reguirements for Vendor management<\/li><\/ul>\n\n\n\n<p>Personal data is processed based on the client relationship or consent given in connection with submitting a contact form.&nbsp;The processing of personal data for marketing purpose is also based on legitimate interests and legitimate interest has been evaluated by the balance test.<\/p>\n\n\n\n<p><strong>Personal data source<\/strong><\/p>\n\n\n\n<p>Personal data is collected<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>in connection with making and executing service agreements<\/li><li>in connection with contact requests<\/li><li>from communities and companies\u2019 websites and other public information sources such as social media<\/li><\/ul>\n\n\n\n<p><strong>Data content of the filing system<\/strong><\/p>\n\n\n\n<p>Company\u2019s contact person\u2019s<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Name<\/li><li>Title<\/li><li>Work contact information<\/li><\/ul>\n\n\n\n<p>And also vendors\u2019<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>CV (consultant, freelancer)<\/li><\/ul>\n\n\n\n<p><strong>Data subject group<\/strong><\/p>\n\n\n\n<p>Partner, client and vendor<\/p>\n\n\n\n<p><strong>Personal data storage information<\/strong><\/p>\n\n\n\n<p>The accuracy of personal information is regularly monitored at the time of contact and obsolete information is corrected or deleted as soon as it becomes available.<\/p>\n\n\n\n<p>Vendor register information concerning vendors that are no longer used are archived for 25 years and then deleted from the system. Supporting documentation, excluding audit documentation, is archived 25 years before deleted. Audit documentation is archived, no destruction allowed.<\/p>\n\n\n\n<p><strong>Format and location of the data Format<\/strong><\/p>\n\n\n\n<p>Format: Electronic and Vendor data also in paper<br>Location: M-files and Visma Severa system and paper documents in fire-proof cabinet at Medfiles<\/p>\n\n\n\n<p><strong>Access to personal data<\/strong><\/p>\n\n\n\n<p>Persons whose job description includes marketing or sales work and handling customer contracts and billings.<\/p>\n\n\n\n<p>Executive team and QA-team vendor responsible person and responsible person deputy in Medfiles have access to vendor register.<\/p>\n\n\n\n<p><strong>Disclosure \/ transfer of data<\/strong><\/p>\n\n\n\n<p>Client data is not disclosed outside the company. Data can be transferred within the company in EU or EEA countries.<\/p>\n\n\n\n<p>Vendor register information and\/or supporting documentation&nbsp;will only be disclosed outside the EU or the company for the purpose of carrying out the actions required by the audits and, where appropriate, to the Authority.<\/p>\n\n\n\n<p><strong>Practices on assessment and maintenance<\/strong><\/p>\n\n\n\n<p>Personal data in is maintained and updated where appropriate. Vendor register data is updated at least once a year.<\/p>\n\n\n\n<p><strong>Technical means of protection \/ data security<\/strong><\/p>\n\n\n\n<p>The filing system data is secured technically with the M-Files filing-system-specific definitions for right of access (ACL = Access Control List). This practice prevents unauthorised use of the filing system and ensures that the filing system is usable for the parties defined in the privacy policy.<\/p>\n\n\n\n<p>Secure email is used when transferring data and\/or supporting documentation by email. Courier services are used when posting printed vendor register data and\/or audit documentation.<\/p>\n\n\n\n<p>At Medfiles the original wet-ink-signed documents are stored in locked fireproof cabinets with limited and controlled access.<\/p>\n\n\n\n<p>The security and privacy policies of Visma Severa can be found here:<\/p>\n\n\n\n<p><a href=\"https:\/\/www.visma.com\/trust-centre\/privacy\/\" rel=\"noopener\">https:\/\/www.visma.com\/trust-centre\/privacy\/<\/a><\/p>\n\n\n\n<p><strong>Data subject rights<\/strong><\/p>\n\n\n\n<p>Unless otherwise provided by law, the data subject has<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>the right to obtain information on the processing of personal data<\/li><li>the right to obtain access to personal data<\/li><li>the right to rectify data<\/li><li>the right to erase data<\/li><li>the right to restrict processing<\/li><li>the right to object to the processing of his or her personal data<\/li><li>the right not to be subject to a decision based solely on automated processing<\/li><li>the right to withdraw his or her consent and to object to the processing of personal data insofar as the processing has been based on the consent given<\/li><\/ul>\n\n\n\n<p>The data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this data protection regulation.<\/p>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Privacy policy Controller &#8230; <a title=\"Privacy policy\" class=\"read-more\" href=\"https:\/\/medfilesgroup.com\/ja\/privacy-policy-careers\/privacy-policy\/\" aria-label=\"More on Privacy policy\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":8357,"parent":8360,"menu_order":138,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-8356","page","type-page","status-publish","has-post-thumbnail"],"_links":{"self":[{"href":"https:\/\/medfilesgroup.com\/ja\/wp-json\/wp\/v2\/pages\/8356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/medfilesgroup.com\/ja\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/medfilesgroup.com\/ja\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/medfilesgroup.com\/ja\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/medfilesgroup.com\/ja\/wp-json\/wp\/v2\/comments?post=8356"}],"version-history":[{"count":0,"href":"https:\/\/medfilesgroup.com\/ja\/wp-json\/wp\/v2\/pages\/8356\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/medfilesgroup.com\/ja\/wp-json\/wp\/v2\/pages\/8360"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/medfilesgroup.com\/ja\/wp-json\/wp\/v2\/media\/8357"}],"wp:attachment":[{"href":"https:\/\/medfilesgroup.com\/ja\/wp-json\/wp\/v2\/media?parent=8356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}