PRIVACY POLICY - VASTEAIKA FINLAND OY’S CUSTOMER REGISTER
Personal Data Act (523/99) Section 10
Published: 5/2/2020
Name: Vasteaika Finland Oy
1. Data controller
Contact details
Juhanilantie 4 B, 01740 Vantaa, Finland
Email: info@vasteaika.fi
2. Person and/or contact person responsible for register matters
Name: Ville Mäkinen
Contact details:
Juhanilantie 4 B, 01740 Vantaa, Finland
Email: info@vasteaika.fi
3. Register issues
The person responsible for issues related to the register shall respond to any questions and feedback concerning the register no later than within two business days.
4. Name of the register
Vasteaika Finland Oy's customer register
5. Purpose for processing personal data and the intended purpose of the register
The purpose of the register is to maintain the customer details of Vasteaika Finland Oy (hereinafter referred to as “Vasteaika”) as well as the archiving and processing of customers and the customer relationship management. Details can be used for the development of Vasteaika Oy’s operations, statistical purposes and for producing more personally targeted content in our online services. In terms of the general requirements of processing, the processing of personal data is based on Section 8 Subsection 1, clauses 1, 2, 5 and 7 of the Personal Data Act (523/1999).
The details of the register can be used in Vasteaika Oy’s own registers for targeting advertising without disclosing personal data to any third parties.
Vasteaika Oy has the right to use and, if necessary, disclose details of the customer register as an electronic or written list, for the purpose of implementing customer communications, unless the customer explicitly refuses has the right to refuse the publication of details by notifying Vasteaika Oy’s customer service, by email or to the data controller.
6. Information content of the register
The personal register contains the following information:
- The person's first and last name
- Email address
- Postal address
- Phone number
- Information about processed orders
7. Regular data sources of the register
Information is obtained for the register in the following ways:
- As a result of the data controller’s own activities
- Input personally by the customer in Vasteaika Oy’s online services
8. Transferring data outside the EU or the European Economic Area
The data controller can disclose data within the approved and obliged limits of existing legislation, for example, to the partners selected by the data controller for marketing purposes, unless the data subject has refused such disclosure of data. Data is also disclosed, if Finnish authorities require so.
Data can also be transferred outside the EU or the European Economic Area in accordance with the Personal Data Act.
9. Data removal
Data can be removed upon the customer’s request or due to the end of a customer relationship, unless legislation, unpaid invoices or debt recover operation prevent the removal of data.
10. Principles of the register's protection and stored data
Only employees, who have the right to process customer details on behalf of their work, have the right to use systems that contain customer details. Each user has a personal username and password for the system. The data is collected in databases, which are protected with firewalls, passwords and other technical methods. Databases and their backups are located in locked premises, and the data can only be accessed by certain, pre-determined persons.
Personal data is stored for as long as it is necessary for the intended purpose of the personal data, while considering any retention periods set out in legislation, such as the Consumer Protection Act, Accounting Act and Prepayment Act.
