Name: Finn-Savotta Oy
Business ID: 2728312-7
Address: Onnelantie 2
Postal code: 43500
Telephone number: +358 40 685 1172
E-mail address: email@example.com
The primary purpose of the register is to serve as the customer and marketing register of Finn-Savotta Oy.
WHAT ARE THE PURPOSES FOR WHICH MY PERSONAL DATA IS COLLECTED AND PROCESSED?
We collect, store and process your personal data for predefined purposes only. The primary purposes of use are as follows:
• fulfilling the agreement involving order processing, delivery, archiving and bookkeeping
• fulfilling our contractual obligations
• fulfilling our legal obligations and requirements
• maintaining customer relationships and contact requests
• business development
• targeting services and marketing
WHICH OF MY PERSONAL DETAILS ARE COLLECTED AND STORED?
To put it simply, Finn-Savotta saves and stores three types of information: data on the use of online services, information provided by the users themselves and data derived from analytics.
1. Information provided by the user
o Identifying details, such as name
o Contact details, such as telephone number, e-mail address and postal address
o Payment details, such as invoicing and payment instrument information
o Location information for localisation purposes (currencies, delivery methods)
o Product reviews
o Marketing message permissions
2. Usage data on services
o Delivery details, such as delivery address and payment method
o Purchase history, such as ordered products, returns and payments
o Online shop’s browsing and usage data
o Terminal device’s identification data
o Online shop session events, such as additions to the shopping cart
3. Data derived from analytics
o Product recommendations concluded from browsing and purchasing data
o Customer groupings and interests derived from purchasing data
Generally speaking, the source of the information is the website user / customer. In addition to this, we may obtain additional information from our partners (from credit providers for invoicing services, for example). You can view your information through your customer account. If you wish, you can also have all of your identifying details erased by contacting our customer service.
WHAT IS THE BASIS FOR PROCESSING PERSONAL DATA?
We always ensure that we have a legal basis, or possibly several bases, for processing your personal data. We process your data to fulfil the agreement and our legal obligations. We also process your personal details based on our legitimate interest, which is to provide services and to engage in and develop our business activities. We may also process some personal details by virtue of your consent.
WHO PROCESSES MY DETAILS AND ARE THEY DISCLOSED TO THIRD PARTIES?
Primarily, your personal data is processed by our personnel in the performance of their duties. We may also outsource some processing activities, such as information the systems used for the storage and processing of personal data. In these cases, we establish agreements, among other measures, to ensure that your data remains confidential and is otherwise processed in a lawful manner. We may also disclose information in other contexts to fulfil contractual obligations or if required to do so by a competent authority. Furthermore, your information may be disclosed if we are involved in a corporate acquisition or asset deal.
Some necessary details are provided to third parties in order to enable the payment transaction, delivery or market messages. For example, in order to enable deliveries, your address and contact details are disclosed to the parties handling logistics and, in connection to the payment transaction, your payment details are relayed by a trusted payment service provider.
IS MY PERSONAL DATA DISCLOSED OUTSIDE THE EU?
Your personal data may be transferred outside the EU or EEC area in compliance with the protective measures laid down in the European Union’s General Data Protection Legislation (2016/679). The protective measures include agreements based on the European Commission’s standard contractual clauses, which can be found here.
FOR HOW LONG IS MY PERSONAL DATA RETAINED?
We do not retain your personal details for any longer than is necessary for their purpose of use or the fulfilment of contractual or legal requirements. However, the retaining periods of personal data may vary depending on purpose of use and situation. We also strive to update your data periodically.
HOW IS MY DATA STORED AND PROTECTED?
Your data is stored on our service provider’s servers which are protected in accordance with the general practices of the field. We keep the personal details we collect and process confidential and do not disclose them to anyone other than those who need them in their work. Personal details may also be disclosed to our customers confidentially and to a limited extent based on service agreements. Access to your personal data is restricted by means of personal identifiers, passwords and access rights.
AM I REQUIRED TO PROVIDE PERSONAL DATA AND WHAT HAPPENS IF I REFUSE?
WHAT ARE COOKIES AND DOES THE WEBSITE USE THEM?
WHAT OTHER TYPES OF MONITORING DO WE USE ON OUR WEBSITE?
WHAT ARE MY RIGHTS AND OPPORTUNITIES REGARDING THE PROCESSING OF MY DATA?
In the event that we process your data based on consent, you can withdraw your consent at any time by notifying us in any number of ways, such as sending e-mail to firstname.lastname@example.org.
Access to data
You have the right to receive confirmation from us as to whether or not we are processing your personal data and which of your details we are processing. Furthermore, you have the right to receive supplementary information on the bases of the processing of your data.
Right to rectification
You have the right to request us to rectify any erroneous, obsolete or otherwise lacking personal data we may have on you.
Right to prohibit direct marketing
You may prohibit the processing of your personal data for direct marketing purposes by sending e-mail to email@example.com.
Right to object to the processing
In the event that we are processing your personal data on the basis of public interest or legitimate interest, you have the right to object to this insofar as there is no substantial reason that would override your rights or the processing is not necessary for handling a legal claim. Please note that, in these cases, it is likely that we will no longer be able to serve you.
Right to limit the processing
In certain situations, you are entitled to demand that we limit the processing of your personal data.
Right to have your data transferred
If we have processed your data based on your consent or to fulfil an agreement, you have the right to receive the electronically disclosed data in a commonly used format for the purpose of transferring it to another service provider.
HOW DO I EXERCISE MY RIGHTS?
You can exercise the rights listed above by sending e-mail to firstname.lastname@example.org or contacting us by other means. In this context, we will ask you to provide your name, address and telephone number and attach a copy of your passport, driving licence or other personal identification to the message so that we can verify your identity. If you feel that your personal data has not been processed lawfully, you can also lodge a complaint with a competent supervisory authority.
WHO DO I CONTACT IN DATA PROTECTION MATTERS?
You can contact our customer service: email@example.com
Updated 25 August 2021