Oneforce information notice

The OneForce CRM platform (Edenred core model of the Salesforce CRM) aims at managing all of Edenred's interaction processes with the various corporate leads, merchants, corporate clients and users/beneficiaries, in order to increase operational efficiency for Edenred staff and to improve the customers’ and leads’ journey through a 100% digital experience. To answer all these needs, some of your personal data need to be processed when you interact with Edenred. Your personal data may also be processed for other purposes such as marketing or security, for which you can find the privacy notices at Privacy Notice (edenred.fi). 

Identity of the data controller

Edenred Finland Oy, whose head office is located at Elimäenkatu 15, 00510 Helsinki, Finland, is the data controller of your personal data processed in OneForce for the purpose(s) defined hereafter.

Purposes of the processing

Your personal data is processed by Edenred Finland Oy within the following framework:

Prospects’ management for the purposes of:

• Lead and Opportunity management notably with:
  • Negotiation, Quote, and Contract Management (pre-contractual negotiation phases)
  • Approval process follow-up (follow-up of the contractual validation process with the approving focal point)
  • Approval signature (capture of the signature of the validating focal point and registration of the contract)
• Manage the Lead preferences (opt-out) to be contacted for marketing and/or newsletter purposes

Customers’ management for the purpose of case management and follow-up (through notably Customer Care’s activity and Sales representative support)

Profiling (preferred language feature) for the purpose of managing Leads’, Merchants’, and Clients’ language settings (for interactions with Edenred teams)

Tool’s support and maintenance for the purpose of troubleshooting management within OneForce

Categories of personal data concerned

Edenred Finland Oy, as data controller, informs you that, through OneForce and for the purposes listed above, it collects and processes your personal data related to:

• Account data, e.g. account name, extranet username, etc.
• Activity data, e.g. extranet last connexion date, extranet registration date, MyOrder activation date, portal last connexion, etc.
• Civil status, e.g. contact name, first name, last name, etc.
• Contact information, e.g. email address, postal address, phone number, etc.
• Contract details, e.g. contract number, etc.
• Interaction with Edenred, e.g. status of the case, case, task, and event subject, etc.
• Organizational information, e.g. contact owner, etc.
• Personal life information, e.g. birthdate (optional category of personal data)
• Preferences information, e.g. preferred language, opt-out preferences, etc.
• Product information, e.g. type of solution
• Professional life information, e.g. customer name, department, etc.
• Technical ID, e.g. Account ID, record ID in Salesforce CRM tool, etc.    

Legal basis of the processing

The following personal data processing activities are legally grounded on the Edenred legitimate interest for the purposes listed below. It is indeed the Edenred’s legitimate interest to implement a CRM tool in order to rationalize an efficient interaction process with the various corporate leads, merchants, corporate clients and users/beneficiaries and increase operational efficiency for Edenred staff. This legal basis applies for the following purposes:

Prospects’ management for the purposes of:

• Lead and Opportunity management notably with:
  • Negotiation, Quote, and Contract Management (pre-contractual negotiation phases)
  • Approval process follow-up (follow-up of the contractual validation process with the approving focal point)
  • Approval signature (capture of the signature of the validating focal point and registration of the contract) 
• Manage the Lead preferences (opt-out) to be contacted for marketing and/or newsletter purposes
• Customers’ management for the purpose of case management and follow-up (through notably Customer Care’s activity and Sales representative support)
• Tool’s support and maintenance for the purpose of troubleshooting management within OneForce

Recipients of the personal data

Your personal data will be accessible to the authorized employees of Edenred Finland Oy including:

• Sales representatives: Edenred’s employee in relation with Lead’s focal point, Client’s focal point and Merchant’s focal point
• Customer service workers: employees and subcontractors providing customer service.
• Local admin: Edenred technical and business local administrators
• Business manager: Edenred Finland's legal representative

Each of them has dedicated access rights according to the scope of their need to know.

Your personal data will not be disclosed to third parties except, as necessary, to the following companies, expressly authorized by Edenred Finland Oy for the performance of the service provided:

• Edenred SE, which performs support, and maintenance on OneForce
• SalesForce, as the SaaS solution provider
• DocuSign France, as the SaaS solution provider for the contract management
• OwnBackup, as the SaaS solution provider for archiving and backup
• Microsoft, as the SaaS solution provider for Office 365 (notably for event/agenda and mailing management
• Medallia, as the SaaS solution provider for Customer Experience enhancement 

Transfer of the personal data

Edenred Finland Oy ensures that your personal data collected within the OneForce framework will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

Retention of the personal data

Your personal data is retained for a duration of:

• For corporate clients/merchants contact persons: 2 years maximum after the end of the service contract signed between you and Edenred Finland Oy
• For corporate leads: 2 years maximum after the loss of the lead by Edenred Finland Oy

Once this duration period is reached your personal data will be deleted.

Exercise of rights for the data subject

In accordance with the applicable regulation, you are entitled to access, rectify, and erase your data. Under certain circumstances and the conditions set forth in the applicable law, you also have a right to object to and obtain restriction of the data processing activity.

You can exercise your rights, by filling in the relevant form accessible here or by writing to Edenred Finland Oy – Elimäenkatu 15, 00510 Helsinki, Finland.

For any other type of requests or complaints, you can contact the Data Protection Correspondent by sending an email to dpo.finland@edenred.com. 

We also remind you that you can lodge a complaint about the processing of your personal data with your local personal data protection authority, such as Tietosuoja.