Your data is safe with us

DNA Tower Finland's privacy notice

In this privacy notice, we describe how personal data is processed in connection with DNA Tower's business operations. Created on 1.3.2025.

This privacy notice applies to the processing of personal data of the customer, buyer, contact person or user of service, landlord, tenant, contractor, installer or other service provider of the services in connection with DNA Tower's business operations.

1. What personal data we process

We may process the following personal data:

Name and contact details: telephone number, email address, address, bank contact information;
Company contact information, the name and contact information of the responsible person and contact person, work information, authorization and power of attorney information;
Contact information of the housing company, name and contact information of the property manager and chairman of the board, authorization and power of attorney information
Date of birth or social security number, if necessary to identify you when entering a contract or invoicing or otherwise as permitted or required by law;
Information related to the lease agreement and leased space
Information on contracts, complaints, invoicing and payments, information related to the monitoring and possible collection of receivables, credit and payment default information, etc.;
User IDs, information related to the management of access rights to equipment facilities and access rights
Contacts and related recordings, such as call recording of a phone call or recordings of visits to our video-monitored facilities;
Information obtained from the real estate information register, such as encumbrances and information on legal owners, building and plot information;
Information on a possible sanctions review
Information related to cookies
Other data collected with your consent that is specified in connection with the consent request

2. For what purposes do we process your personal data

DNA Tower owns, leases, rents and manages spaces and structures needed for telecommunications networks. We offer antenna and equipment spaces from masts and estate premises all over Finland. Equipment space products include shelf, rack and cabinet spaces, as well as electrical energy and power supply backups. We collect and process personal data in connection with or in connection with the provision of the above-mentioned services. In all situations, we process personal data only for the purpose and to the extent required by the processing.

For the provision of contracts and for the provision and production of services. We process personal data for the purpose of providing the agreed service, managing customer or contractual relationships, such as managing lease agreements, paying rent, invoicing, credit control, customer service and correction of various defects. We also process personal data in situations where DNA Tower is offered services as a service provider or you rent premises or real estate properties to us. We also process personal data in customer communications, such as sending notifications related to services and contracts, as well as in communicating in matters related to our services.

DNA Tower may require an approved credit decision in connection with the performance of the agreement and/or the provision of services. In addition to customer data, company credit data, including the personal credit data of the company´s responsible persons may be processed in the assessment of the company's creditworthiness in situations permitted by law. Automated decision-making can be utilized in credit checks. You can request a manual decision-making procedure instead of an automated one, provide additional clarification or contest a decision based solely on automated processing.

We process personal data to detect technical faults and errors, to repair faults, to ensure the security of services and communications networks and to test their functionality, as well as to prevent, detect and investigate misuse, and to ensure data security.

Based on a legitimate interest. We use both group-level usage data and personal data for DNA Tower and companies belonging to the same group as DNA Tower for market and opinion polls, direct mail, distance selling, addressed mailings and targeting advertising in advertising networks. DNA Tower may send electronic direct marketing to companies' contact persons and decision-makers based on legitimate interest.

Camera surveillance can be used in DNA Tower's equipment facilities to ensure the safety of those staying in the premises, to protect property and to prevent or investigate situations endangering safety and property.

Personal data is also processed based on DNA Tower's legitimate interest to improve the functionality of services, develop business operations and create statistical analyses that enable us to improve our service offering.

Compliance with legal obligations. We process data to fulfil obligations based on law and official decisions, e.g. for accounting purposes or to carry out sanctions’ audits.

Based on consent. We process some personal data based on consent. Regarding companies' contact persons and decision-makers, DNA Tower may send electronic direct marketing not only on the basis of legitimate interest but also on the basis of the person's consent. You can manage the extent to which you give your consent to the use of cookies from the cookie banner on DNA Tower's website.

3. How long do we store your personal data

We store personal data only for the time necessary to fulfil the purposes defined in this privacy notice, unless otherwise required by law. The retention period of personal data varies from service to service and depends on the nature of the data. We strive to ensure that personal data is up to date and do not store outdated or unnecessary data. Once the data retention period has expired, we will destroy the personal data either by deleting or anonymizing the data in question.

Data processed based on a contractual relationship is stored duration of the contractual relationship or for as long as it is required for the delivery of the agreed service. After the end of the contractual relationship or the provision of services, personal data will be stored for as long as it is needed. Some of the data is also processed after the termination of the contractual relationship, for example to comply with legal obligations or for direct marketing purposes.

4. Information about recipients of personal data

DNA Tower is part of Telenor Group, and the data is processed only by those employees of the group who are required to do so for the performance of their duties. Personal data may be processed, disclosed and transferred between Telenor Group companies for the purposes described in this privacy notice and for example, for reporting purposes and to use centralised information systems.

DNA Tower processes personal data itself, but also uses various service providers to process the data, produce and provide services. Such DNA Tower subcontractors and partners may include IT service providers, developers, equipment maintenance partners and marketing agencies. Due to the technical or operational implementation of data processing, some of the data may be located with DNA Tower's subcontractors and partners, or the data may otherwise be processed through a technical interface.

As a rule, we process data within the European Union (EU) and the European Economic Area (EEA). When using subcontractors and partners, we ensure an adequate level of protection and careful and proper processing of the data as required by law through contractual arrangements and in an appropriate manner. Data may also be transferred outside the EU and EEA. In this case, we use data transfer mechanisms approved by the European Commission, such as standard contractual clauses approved by the European Commission.

DNA Tower may also disclose data to third parties in order to protect or defend legal claims, DNA Tower or its employees’ interests, or to investigate crimes, collect receivables and investigate any violations. We may also disclose information, if we are involved in a corporate or business transaction, to parties involved in the transaction and their advisors.

5. What rights do you have?

Right of access: You have the right to access and review what data DNA Tower processes about you.
Correction of data: If you notice incorrect or outdated information about the personal data we process, you have the right to have your data rectified.
Right to give and withdraw consent: If the processing of your personal data is based on your consent, you have the right to give or withdraw consent at any time.
Deletion of data: You have the right to request DNA Tower to erase your data. Personal data will be erased if there is no longer a legal basis for processing.
Right to data portability: You have the right to receive personal data about yourself that you have provided to us for processing based on consent or performance of a contract. You have the right to receive the data in a structured, commonly used and machine-readable format and the right to transmit the data to another controller.
Objection to processing: You have the right to object to DNA Tower's processing of your personal data based on legitimate interest. DNA Tower may reject the request if the processing is necessary to achieve a mandatory and legitime interest of DNA Tower. You always have the right to object to the processing of your personal data for direct marketing purposes.
Right to restriction of processing: Under certain circumstances, you have the right to request DNA Tower to restrict the processing of your personal data.

6. Changes to this privacy notice

We are constantly developing our services and updating this privacy policy without prior notice. Changes may also be based on changes in legislation. We recommend you to regularly review the latest version of our privacy notice on our website.

Contact

Controller: DNA Tower Finland Oy, Business ID 3209137–3, P.O. Box 10, FI-01044 DNA (visiting address Ilmalantori 4, 00240 Helsinki)

If you have any questions about the privacy notice, the processing of your personal data or wish to exercise your rights based on data protection legislation, you can contact us by letter to the above address or by e-mail towersopimukset@dna.fi.
If you consider that DNA Tower does not process personal data in accordance with the EU's General Data Protection Regulation, you can file a complaint with the local data protection authority who supervises the legality of personal data processing, such as the Data Protection Ombudsman.