The keeper of the personal data of the organisation/company customers is the employer of each employee. Safetypass.EU provides an empty platform service for the employer, where the employer enters his/her own data in response to the request, and the content of the data, its accuracy and the management of the content.
The person responsible for the register is the project manager assigned by Redicom Oy. The contact person for the register is CIO Juha Männistö, Viinikankatu 49, 33800 Tampere, tel. +358 40 844 2301 The information systems of the personal register are managed by Redicom Oy. The information system of the personal register is maintained by Redicom Oy.
The name of the personal register is "Safetypass.EU".
The purpose of Safetypass.EU is fourfold:
The legal basis for processing personal data under the EU General Data Protection Regulation is:
The purpose of processing personal data is to build a register of work and leisure skills for the individual to share, request completion or deletion of information they own. By accessing the Service, each user authorises Safetypass.EU and any employer company to process his/her data held on the Service for the purpose of providing the Service. Through the Service, the individual will be able to make data queries to third party registers in compliance with the European Community GDPR data protection article. The individual will be able to make a query to obtain his/her own data or to transfer his/her own data to another register. The service also includes initial European-wide training modules for qualification holders and their descriptions.
Personal data will be stored in the system to the extent that the individual decides to submit them to the service. At a minimum, the following information is required:
Company information is stored to the extent that the company decides to submit it to the service, or at least to the extent that the company decides to submit it:
The log contains different levels of information:
In data queries, the aim is always to confirm the source of the data. In the case of training data, this is done through a data query to the owner of the training programme or, in the case of a company linkage, through a list of training records validated by the company. In the case of personal data, the individual provides his/her own information about him/herself and his/her skills. The company will be able to complete the person's competences. The source of the course data is either the course module and thus the trainer and the training event, or the date of the course through the confirmation of the training programme.
No data will be passed on. Data resources are not transferred outside the EU or the European Economic Area.
The register is processed with due care and the data processed by the information systems and the environment in which the systems are used are adequately protected. The physical and digital security of the hardware is adequately ensured. The controller shall ensure that the data stored, as well as access rights to servers and other information critical to the security of personal data, are treated confidentially and only by employees whose job description includes this.
The personal data register operates on the internal and external network of Redicom Oy in such a way that the external