GDPR

GDPR

GDPR

Register name Privacy statement

According to the data protection regulation, the controller has an obligation to clearly inform the data subjects. This statement fulfills the obligation to inform.

1. Registrar


Joen Tikkituote Oy

Contact information:
Wahlforssinkatu 18
80100 Joensuu

Contact information in matters concerning the register

Joen Tikkituote Oy/Johannes Väänänen
Wahlforssinkatu 18

80100 Joensuu

Johannes.vaananen@joentikkituote.fi

Depending on the case, the contact information of the possible data protection officer:

Data Protection Officer

Joen Tikkituote Oy/Johannes Väänänen
Wahlforssinkatu 18

80100 Joensuu

Johannes.vaananen@joentikkituote.fi

2. Registered


Customers, partners and own personnel.

3. Basis for keeping the register and purpose of use


Basis for keeping the register:

  • Personal data is processed based on the registered customer relationship
  • Personal data is processed on the basis of consent (e.g. potential list collected at fairs, permission for marketing requested on a form, consent requested on a website) The register is maintained for invoicing and marketing purposes
  • Purpose of personal data processing and register


Personal data is only processed for predefined purposes, which are as follows:

  • Customer relationship management
  • Telling about our services
  • Marketing



4. Personal data to be stored in the register

The customer register contains the following information:

Contact information

  • name
  • address
  • e-mail
  • telephone number


Customer information

  • information about purchased products / services
  • Prices of purchased products and services

5. Rights of the data subject


The registrant has the following rights, requests for the use of which should be made to the address

Joen Tikkituote Oy/Johannes Väänänen
Wahlforssinkatu 18

80100 Joensuu

Johannes.vaananen@joentikkituote.fi

Right of inspection

The registered person can check the personal data we have stored.

Right to rectification of data

The registered person can ask to correct incorrect or incomplete information about him.

Right to object

The registered person can object to the processing of personal data if he feels that the personal data has been processed unlawfully.

Ban on direct marketing

The registrant has the right to prohibit the use of data for direct marketing.

Right of deletion

The registered person has the right to request the deletion of data if data processing is not necessary. We process the deletion request, after which we either delete the data or provide a justified reason why the data cannot be deleted.

It should be noted that the controller may have a statutory or other right not to delete the requested information. The registrar is obliged to keep the accounting material in accordance with the period (10 years) defined in the Accounting Act (Chapter 2, Section 10). For this reason, accounting-related material cannot be deleted before the deadline expires.

Withdrawal of consent

If the processing of the data subject's personal data is based only on consent, and not on e.g. customership or membership, the data subject can withdraw the consent.

The registered person can appeal the decision to the Data Protection Commissioner

The registered person has the right to demand that we limit the processing of disputed data until the matter is resolved.

Right of appeal

The registered person has the right to file a complaint with the data protection commissioner if he feels that we violate the current data protection legislation when processing personal data.

Contact information of the data protection officer: www.tietosuoja.fi/fi/index/yhttstietod.html

5. Regular sources of information


Customer information is obtained in accordance with the rules: By asking the customer when the customer relationship is established.

  • From the customer himself when the customer relationship is created
  • By asking the customer and when the customer sends them to us.

6. Regular disclosures of information


If you do not provide information:

As a general rule, information is not disclosed outside of Joen Tikkituote Oy for marketing purposes.

We have ensured that all our service providers comply with data protection legislation. We regularly use the following service providers: Brändiarvo Oy

7. Duration of processing

  • As a general rule, personal data is processed as long as the customership is valid
  • The customer can request to delete personal data if he wishes.


8. Personal data processors


The controller and its employees process personal data. We can also partially outsource the processing of personal data to a third party, in which case we guarantee through contractual arrangements that personal data will be processed in accordance with valid data protection legislation and otherwise appropriately.

Personal data is also processed by employees of the Accounting Office. (Kontiolahden tilitoimisto Ky)

9. Data transfer outside the EU


Personal data is not transferred outside the EU or the European Economic Area.



10. Automatic decision-making and profiling


We do not use the data for automatic decision-making or profiling.