1. Data Controller:
Oiku Timber Oy
Business ID: 3599478-9
Vanha-ahontie 47
92430 PAAVOLA, Finland
Contact person for register matters
Urpo Kinnunen
info@oiku.fi
+358 45 6744 103
2. Data Subjects:
Customers, potential customers, personnel, event participants.
3. Purpose of Processing Personal Data:
Legal basis for maintaining the register:
- Personal data is processed based on the data subject's customer relationship
- Personal data is processed based on consent (giveaways and event registrations where consent was requested)
Purpose of Processing Personal Data and Use of the Register
Personal data is processed only for predefined purposes, which are as follows:
- managing the customer relationship
- informing about our services
4. Personal Data Stored in the Register:
The customer register contains the following information:
Contact Information
- name
- address
- phone number
Customer Data:
- information about purchased products / services
5. Rights of the Data Subject:
The data subject has the following rights. Requests to exercise these rights should be made to info@oiku.fi.
Right of Access
The data subject can check the personal data we have stored.
Right to Rectification
The data subject can request to correct incorrect or incomplete information concerning them.
Right to Object
The data subject can object to the processing of personal data if they feel that the data has been processed unlawfully.
Prohibition of Direct Marketing
The data subject has the right to prohibit the use of their data for direct marketing.
Right to Erasure
The data subject has the right to request the erasure of data if processing is no longer necessary. We will process the request for erasure, after which we will either delete the data or provide a justified reason why the data cannot be deleted. It should be noted that the controller may have a statutory or other legal right not to delete the requested data. The controller is obliged to store accounting material in accordance with the period defined in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting-related material cannot be deleted before the deadline expires.
Withdrawal of Consent
If the processing of personal data concerning the data subject is based solely on consent, and not, for example, on a customer relationship or membership, the data subject can withdraw their consent.
The data subject can appeal against the decision to the Data Protection Ombudsman
The data subject has the right to demand that we restrict the processing of disputed data until the matter is resolved.
Right to Lodge a Complaint
The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they feel that we are violating valid data protection legislation when processing personal data. Contact details for the Data Protection Ombudsman: www.tietosuoja.fi/en/index/contact-information.html
6. Regular Sources of Information:
Customer data is regularly obtained:
- from the customer themselves when a customer relationship is established
- from the customer themselves via an online form
7. Regular Disclosures of Data:
Data will not be disclosed to third parties outside of Oiku for marketing purposes. We have ensured that all our service providers comply with data protection legislation.
8. Duration of Processing:
- Personal data is generally processed for as long as the customer relationship is valid
- The data subject can remove themselves from our marketing list via the link included in every marketing email we send.
9. Processors of Personal Data:
The controller and their employees process personal data. We may also partially outsource the processing of personal data to a third party, in which case we guarantee through contractual arrangements that personal data is processed in accordance with valid data protection legislation and otherwise appropriately.
10. Transfer of Data Outside the EU:
Data may be transferred by the controller outside the EU or EEA if the software used to maintain the customer relationship, where the data is stored, changes.
11. Automated Decision-Making and Profiling:
We do not use data for automated decision-making or profiling.