Privacy

CUSTOMER REGISTER - PRIVACY STATEMENT

Date of issue 05.07.2021

REGISTRAR

The

Oy Savon Mafia Ab
Business ID: 1104044-6
Puistokatu 4
57100 Savonlinnna
info@savonmafia.fi

The

CONTACT PERSON FOR REGISTER MATTERS

Janne Kupiainen
0443549621
janne@savonmafia.fi

The

NAME OF THE REGISTER CUSTOMER REGISTER

The

Purpose of processing personal data The purpose of the register is to maintain the company's customer register, manage, archive and process customer orders and manage the customer relationship. The information can be used to develop the company's operations, for statistical purposes and to produce more personalized targeted content in our online services. Personal data is processed within the limits permitted and required by the Personal Data Act. The information in the register can be used in the company's own registers, for example to target advertising without disclosing personal data to third parties. The company may use partners to maintain the customer and service relationship, in which case parts of the registry information may be transferred to the partner's servers due to technical requirements. The data is processed only for the maintenance of the company's customer relationship through technical interfaces. The company has the right to publish the information contained in the customer register in electronic or written form, unless the customer specifically prohibits it. In this case, the list means, for example, mailing labels for direct mail or the like. The customer has the right to refuse to publish the information by notifying the company's customer service, by e-mail (e-mail address) or to the contact person of the register.

The

INFORMATION CONTENT OF THE REGISTER THE PERSONAL REGISTER CONTAINS THE FOLLOWING INFORMATION:

The

- The person's first and last name
- The community they represent
- Email address
- Postal address
- Phone number
- Information on previous orders

The

REGULAR SOURCES OF INFORMATION

The

Information is obtained about the customer's purchases in the company's stores, online service or resellers, as well as notifications related to the customer system during the use of the service. Information is obtained from registrations made by the customer and from notifications made by the customer during the customer relationship. Updates to your name and contact information are also available from the authorities and companies that provide update services. Information may also be obtained from subcontractors involved in the use or provision of the service. Other activities of customers in the digital environment can be obtained from partner sites, information systems or other digital sources, which are logged in via an electronic invitation (link), cookies or by using the IDs provided to customers. The information in the customer register is only available to the company, except when using an external service provider either to provide a value-added service or to support a credit decision. The information will not be disclosed outside the company or for the use of its partners, except in matters related to credit application, collection or invoicing, and when required by law. Personal data will not be transferred outside the European Union unless it is necessary to ensure the technical implementation of the company or its partner. The personal data of the data subject will be destroyed at the request of the user, unless legislation, open invoices or collection measures prevent the deletion of the data.

The

REGULAR DATA RELEASES

The information in the customer register is only available to the company, except when using an external service provider either to provide a value-added service or to support a credit decision. The information will not be disclosed outside the company or for the use of its partners, except in matters related to credit application, collection or invoicing, and when required by law. The personal data of the data subject will be destroyed at the request of the user, unless legislation, open invoices or collection measures prevent the deletion of the data.

The

TRANSFER OF DATA OUTSIDE THE EU OR THE EEA

The

Personal data will not be transferred outside the European Union unless it is necessary to ensure the technical implementation of the company or its partner.

The

PRINCIPLES FOR THE PROTECTION OF THE REGISTER A: MANUAL MATERIAL

Contact information collected at customer transactions and other manually processed documents containing customer information are stored in locked and fireproof storage facilities after initial processing. Only designated employees who have signed a non-disclosure agreement have the right to process manually stored customer information.

The

PRINCIPLES FOR THE PROTECTION OF THE REGISTER B: COMPUTER PROCESSING FUNCTIONS

Only certain employees of the company and companies acting on its behalf have the right to access and maintain the customer owner and customer register. Each defined user has their own personal username and password. Each user has signed a non-disclosure agreement. The system is protected by a firewall that protects external connections to the system.

The

COOKIES

The

A cookie is a small text file that an Internet browser stores on a user's device. Cookies are set on the user's terminal only with the site the user invites. Only the server that sent the cookie can later read and use the cookie. Cookies or other technologies do not damage the user's terminal or files, and cookies cannot be used to access programs or spread malware. The user cannot be identified by cookies alone.

The uses of cookies are to enhance analytics, marketing and communication. Cookies are divided into subgroups: functional cookies, product development and business reporting, advertising reporting and advertising targeting.

There are some third-party tools or plug-ins that are required for the operation of the service. Such tools include, for example, social media or video embedding on sites or social media sharing and liking functionality. In addition, such third-party plug-ins may collect information about users of online services, for example, to recommend content or track the number of visitors.

If you wish, you can prevent your browser from using cookies, delete stored cookies or request notification from your browser about new cookies. You can find instructions on how to delete cookies at: https://www.aboutcookies.org/ Blocking or deleting cookies may interfere with some functions of our website.

You can read more about cookies and Finnish cookie requirements on FICORA's website https://www.kyberturvallisuuskeskus.fi/fi/toimintamme/saantely-ja-valvonta/luottamuksellinen-viestinta

We reserve the right to update cookie policies, for example due to service developments or mandatory legislation.

The

RIGHT OF INSPECTION

The data subject has the right to check what information about him is in the register. The inspection request must be made in writing by contacting the company's customer service or the register's contact person in Finnish or English. The request for verification must be signed. The data subject has the right to prohibit the processing and disclosure of his data for direct advertising, distance selling and direct marketing, as well as market and opinion research, by contacting the company's customer service point.

The

RIGHT TO REQUEST CORRECTION OF INFORMATION

Personal data contained in the register which are incorrect, unnecessary, incomplete or out of date for the purpose of processing shall be rectified, deleted or supplemented. The correction request must be made with a handwritten written request to the company's customer service or the administrator of the personal register. The request shall specify what information is required to be corrected and on what basis. Repairs will be carried out without delay. Correction of the error shall be notified to the person from whom the incorrect information was received or to whom the information was disclosed. The person responsible for the register shall issue a written certificate stating the reasons for the rejection of the request for rectification. The data subject may refer the refusal to the Data Protection Officer.

The

OTHER RIGHTS RELATING TO THE PROCESSING OF PERSONAL DATA

The data subject has the right to prohibit the disclosure and processing of his data for direct advertising and other marketing, to demand anonymisation of the data where applicable, and the right to be completely forgotten.