Business ID: 2532512-7
Contact information for issues related to the register
Business Developer Director Petteri Närä
2. Name of register
Goodwiller Oy online store customer register
3. Intended use of personal information
The registered personal information will be used to process customer orders, to deliver products via mail, to enable communications required by the service and for the company’s direct marketing and campaigning purposes.
- Personal information stored in the register
The customer register contains the following information:
- e-mail address
- telephone number
- data on purchased products
- IP address of the customer/person placing the order
5. Data subject rights
The data subject has the following rights, and any requests concerning the exercise of said rights must be submitted to the address firstname.lastname@example.org
Right of review
The data subject may review their stored personal information.
Right of rectification
The data subject may request a rectification of incorrect or incomplete personal information.
Right of objection
The data subject may object to the processing of their personal information, if they feel that their data have been processed unlawfully.
Direct marketing ban
The data subject is entitled to ban the use of their personal information for direct marketing purposes. The ban can be issued during the placement of an order at the online store, or separately by contacting email@example.com
Right of removal
The data subject is entitled to request the removal or deletion of their data, if the processing of their data is no longer necessary. We will process the request, and either delete the data or notify the subject of any lawful reasons why the data cannot be deleted.
It must be noted that the controller may be legally or otherwise entitled to not remove the requested data. The controller is obliged to store any and all accounting materials according to the storage period (of 10 years) specified in the Accounting Act (section 2, § 10). Accounting materials may therefore not be deleted before the period ends.
If the processing of the personal information of the data subject is based exclusively on consent, instead of e.g. a customer relationship or membership, the data subject may withdraw their consent.
The data subject may appeal the decision to a data protection supervisor
The data subject is entitled to demand that we limit the processing of contested data while the issue is being solved.
Right of appeal
The data subject is entitled to file an appeal/complaint to a data protection supervisor, if they feel that we are violating existing data protection legislation by our processing of personal information.
Data protection supervisor contact information: www.tietosuoja.fi/fi/index/yhteystiedot.html
6. Standard data sources
The customer’s own notice made via the order system of the online store.
7. Standard data deliveries
No data will be regularly delivered outside of Goodwiller Oy for marketing purposes. When using third parties for marketing and communications, we will ensure that all of our service providers observe existing data protection legislation.
8. Duration of processing
The data will be stored for the duration of the customer relationship, according to the storage period (of 10 years) specified in the Accounting Act (section 2, § 10). After this the data will be deleted.
Provided information is protected while online:
- Electronic connections are SSL protected (Secure Sockets Layer)
- The register generated by the provided data is protected by the service provider
- The responsible party for the technical implementation is Seravo Oy/WP-palvelu, firstname.lastname@example.org
9. Processors of personal information
The personal information will be processed by the controller and their employees. We may also partly outsource the processing of personal information to a third party, in which case we will ensure by means of contractual arrangements that the data will be processed pursuant to existing data protection legislation and otherwise appropriately.
10. Transferring data to outside of the EU
No personal information will be transferred to outside of the EU or the European Economic Area.
11. Automatic decision-making and profiling
If necessary, we will use the data subject’s data for profiling for purposes of direct marketing and marketing surveys. We do not use automatic decision-making procedures. The data subject is entitled to ban the controller from using their information for the purposes of direct marketing and/or marketing surveys. Such a ban is made in writing to the controller at email@example.com