This is a description of the processing of personal data in accordance with the General Data Protection Regulation of the European Union (679/2016).
Business ID: 2543355-8
Address: Vuorentaustantie 4, 21270 NOUSIAINEN
Contact for Privacy Matters
In all matters related to the processing of personal data and situations involving the exercise of individual rights, the data subject is encouraged to contact the aforementioned contact person.
Legal Basis and Purpose of Personal Data Processing
The legal basis for processing personal data is:
– Consent given by the data subject for the processing of personal data
– Contractual relationship between the data subject and the data controller
– Fulfillment of legal obligations of the data controller
– Legitimate interests of the data controller
– Public interest or exercise of official authority vested in the data controller
– Protection of vital interests
Personal data processing includes only the following actions:
1. Contact Requests: We securely store messages received through the contact form as backups. This ensures that we can retrieve or review contact information as needed.
2. Anonymous Analytics: We use Google Analytics to collect anonymous user data. This analytics helps us understand website usage, such as page views, user actions, and interactions. Analytics data is used for website development and optimization.
Processed Personal Data
The following data about data subjects is processed:
– Email address
– Phone number
Data Retention Period
The data controller processes personal data for a period of 12 months. After this period, the data controller will delete or anonymize the data within 1 month according to its deletion processes.
The data controller may have an obligation to process certain personal data belonging to the register for a longer period as required by legislation or regulatory requirements.
Rights of the Data Subject
Right to Access Personal Data
The data subject has the right to obtain confirmation of whether personal data concerning them is being processed and, if so, to obtain a copy of the personal data.
Right to Rectification
The data subject has the right to request correction of inaccurate or incorrect personal data concerning them. The data subject also has the right to have incomplete personal data completed by providing the necessary additional information.
Right to Erasure
The data subject has the right to request the erasure of personal data concerning them if:
a. the personal data is no longer necessary for the purposes for which it was collected;
b. the data subject withdraws the consent on which the processing is based, and there is no other legal basis for the processing; or
c. the personal data has been processed unlawfully.
Right to Restriction of Processing
The data subject has the right to restrict the processing of their personal data if:
a. the data subject contests the accuracy of their personal data;
b. the processing is unlawful, and the data subject opposes the erasure of personal data and instead requests the restriction of its use; or
c. the data controller no longer needs the personal data for the original purposes of processing, but the data subject requires it for the establishment, exercise, or defense of legal claims.
Right to Object
The data subject has the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them.
The data controller shall no longer process the personal data unless they demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing, including profiling related to such direct marketing.
Right to Withdraw Consent
The data subject has the right to withdraw consent to processing that they have provided at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Data Portability
The data subject has the right to receive the personal data concerning them that they have provided to the data controller in a structured, commonly used, and machine-readable format, and the right to transmit those data to another data controller.
Right to Lodge a Complaint with a Supervisory Authority
The national supervisory authority for personal data matters is the Office of the Data Protection Ombudsman operating under the Ministry of Justice. You have the right to bring your matter before the supervisory authority if you believe that the processing of personal data concerning you violates applicable legislation.