GDPR
GDPR
GDPR
Register name Privacy statement
According to the data protection regulation, the controller has an obligation to clearly inform the data subjects. This statement fulfills the obligation to inform.
1. Registrar
Joen Tikkituote Oy
Contact information:
Wahlforssinkatu 18
80100 Joensuu
Contact information in matters concerning the register
Joen Tikkituote Oy/Johannes Väänänen
Wahlforssinkatu 18
80100 Joensuu
Johannes.vaananen@joentikkituote.fi
Depending on the case, the contact information of the possible data protection officer:
Data Protection Officer
Joen Tikkituote Oy/Johannes Väänänen
Wahlforssinkatu 18
80100 Joensuu
Johannes.vaananen@joentikkituote.fi
2. Registered
Customers, partners and own personnel.
3. Basis for keeping the register and purpose of use
Basis for keeping the register:
- Personal data is processed based on the registered customer relationship
- Personal data is processed on the basis of consent (e.g. potential list collected at fairs, permission for marketing requested on a form, consent requested on a website) The register is maintained for invoicing and marketing purposes
- Purpose of personal data processing and register
Personal data is only processed for predefined purposes, which are as follows:
- Customer relationship management
- Telling about our services
- Marketing
4. Personal data to be stored in the register
The customer register contains the following information:
Contact information
- name
- address
- telephone number
Customer information
- information about purchased products / services
- Prices of purchased products and services
5. Rights of the data subject
The registrant has the following rights, requests for the use of which should be made to the address
Joen Tikkituote Oy/Johannes Väänänen
Wahlforssinkatu 18
80100 Joensuu
Johannes.vaananen@joentikkituote.fi
Right of inspection
The registered person can check the personal data we have stored.
Right to rectification of data
The registered person can ask to correct incorrect or incomplete information about him.
Right to object
The registered person can object to the processing of personal data if he feels that the personal data has been processed unlawfully.
Ban on direct marketing
The registrant has the right to prohibit the use of data for direct marketing.
Right of deletion
The registered person has the right to request the deletion of data if data processing is not necessary. We process the deletion request, after which we either delete the data or provide a justified reason why the data cannot be deleted.
It should be noted that the controller may have a statutory or other right not to delete the requested information. The registrar is obliged to keep the accounting material in accordance with the period (10 years) defined in the Accounting Act (Chapter 2, Section 10). For this reason, accounting-related material cannot be deleted before the deadline expires.
Withdrawal of consent
If the processing of the data subject's personal data is based only on consent, and not on e.g. customership or membership, the data subject can withdraw the consent.
The registered person can appeal the decision to the Data Protection Commissioner
The registered person has the right to demand that we limit the processing of disputed data until the matter is resolved.
Right of appeal
The registered person has the right to file a complaint with the data protection commissioner if he feels that we violate the current data protection legislation when processing personal data.
Contact information of the data protection officer: www.tietosuoja.fi/fi/index/yhttstietod.html
5. Regular sources of information
Customer information is obtained in accordance with the rules: By asking the customer when the customer relationship is established.
- From the customer himself when the customer relationship is created
- By asking the customer and when the customer sends them to us.
6. Regular disclosures of information
If you do not provide information:
As a general rule, information is not disclosed outside of Joen Tikkituote Oy for marketing purposes.
We have ensured that all our service providers comply with data protection legislation. We regularly use the following service providers: Brändiarvo Oy
7. Duration of processing
- As a general rule, personal data is processed as long as the customership is valid
- The customer can request to delete personal data if he wishes.
8. Personal data processors
The controller and its employees process personal data. We can also partially outsource the processing of personal data to a third party, in which case we guarantee through contractual arrangements that personal data will be processed in accordance with valid data protection legislation and otherwise appropriately.
Personal data is also processed by employees of the Accounting Office. (Kontiolahden tilitoimisto Ky)
9. Data transfer outside the EU
Personal data is not transferred outside the EU or the European Economic Area.
10. Automatic decision-making and profiling
We do not use the data for automatic decision-making or profiling.