Privacy policy

1. The controller

Metsäkädet /Hanne Nevalainen

Y-3419746-2

Contact details for matters concerning the register

info@metsakadet.fi

2. Data subjects

Those who have submitted their data via the form on this website or in the online shop.

3. Grounds for and purposes of the processing of personal data and the register

Basis: consent

Purpose of use: to maintain a customer relationship or to provide a service ordered

4. Maximum personal data to be recorded in the register

Company name and business ID

Full name of the customer

E-mail address

Telephone number

Billing address

Address

5. Rights of the data subject

The data subject has the following rights, the exercise of which should be requested at info@metsakadet.fi

Right of access

The data subject may check the personal data we have stored.

Right to rectification

The data subject may request the rectification of inaccurate or in complete data concerning him/her.

Right to object

The data subject may object to the processing of personal data if he or she considers that the personal data have been processed unlawfully.

Direct marketing ban

Data subjects have the right to object to the use of their data for direct marketing.

Right of withdrawal

The data subject has the right to request the erasure of data if the processing is no longer necessary. We will process the deletion request, after which we will delete the data or provide a reasoned justification why the data cannot be deleted.

Right of withdrawal

The data subject has the right to request the erasure of data if the processing is no longer necessary. We will process the deletion request, after which we will delete the data or provide a reasoned justification why the data cannot be deleted.

Please note that the controller may have a legal or other right not to delete the requested data. The data controller is obliged to keep the accounting records for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting records cannot be deleted before the expiry of this period.

Withdrawal of consent

If the processing of personal data concerning a data subject is based solely on consent and not, for example, on customer or membership, the data subject may withdraw consent.

The data subject may appeal the decision to the Data Protection Ombudsman.

The data subject has the right to request that we restrict the processing of the disputed data until the matter is resolved.

Right of appeal

The data subject has the right to lodge a complaint with the Data Protection Ombudsman if he or she considers that we are in breach of the applicable data protection legislation when we process personal data.

6. Regular data sources

Customer data is normally obtained from the customer himself/herself via an online form or an online shop.

7. Regular data disclosures

The information will never be disclosed to third parties for marketing purposes.

We have ensured that all our partners comply with data protection legislation.

We regularly use the following service providers: one.com

8.

Personal data is processed for 1 year or for the duration of the customer relationship.

9. Processors of personal data

The controller processes the personal data.

10. Transfer of data outside the EU

Personal data contained in the register will not be transferred outside the EU or EEA.

11. Automated decision-making and profiling

We do not use the data for automated decision-making or profiling.

12.

We use cookies on our website to improve the user experience and to analyse visitor traffic.

We will never use personal data for marketing purposes without your permission.