Register and data protection declaration in accordance with the Personal Data Act (10 and 24 §) and the EU General Data Protection Regulation (GDPR).
Business ID 2994749-2
P.O. BOX 83
CONTACT INFORMATION FOR REGISTRATION MATTERS
NAME OF THE REGISTER
Finlash Oy's customer register
THE REGISTER CONTAINS
- Customers registered on the Finlash.com online shop
- Finlash Oy newsletter subscribers
- Business customers of Finlash Ltd
- Personal data automatically collected from the use of the website
GROUNDS FOR KEEPING THE REGISTER
The basis for the processing of personal data is the customer relationship between Finlash Oy's customer and Finlash Oy, the customer's consent, an order from the customer or other material connection.
Purpose of processing personal data:
- Management of the customer relationship, performance of contracts and obligations.
- Delivery and processing of orders
- Paytrail payment mediation service
- Collection and processing of customer feedback and customer satisfaction data
- Conducting market research and opinion polls
- Marketing, service development, research and statistical purposes
- Newsletter distribution
- Feedback form
- Abandoned shopping baskets
THE REGISTER CONTAINS
- Name, customer number, user ID and/or other unique identifier
- Email, telephone number and address details
- Billing information
- Subscription details and history
- Electronic communication
- Information about the company and company contacts, such as company ID, delivery and billing information, and contact details of the contact person.
- Consent and opt-out information relating to direct marketing and the use of personal data
Some of this information is a prerequisite for the establishment of the customer relationship and the order. Without the necessary personal data, we will not be able to deliver the order.
WHERE THE DATA IS COLLECTED
We obtain information from the customer or service provider itself and about transactions related to the customer relationship, use of services, communications and transactions and from the party providing identification, verification, address, update, credit or other similar services.
We also collect visitor information from our website through Google Analytics to help us analyse and improve the site and to target marketing and content to visitors.
Even if you do not complete your purchase, your contact information and shopping cart will be stored in our online shopping system. By adding products to your shopping cart and filling in your contact details, you give us permission to store your information in our system. If you leave your shopping cart unfinished in our online shop, the system will automatically send you an "abandoned cart" message by email.
Access to Finlash Ltd's customer register is restricted to Finlash Ltd's staff, order suppliers and the payment service provider Paytrail Ltd for the purpose of making payments for orders. The register will not be disclosed to third parties.
Finlash Ltd will not disclose or sell the data other than for legal reasons. Access to personal data is protected by user-specific IDs, passwords and different levels of access rights, which are sufficient for the performance of the task but as limited as possible.
Finlash Oy carefully selects the subcontractors it uses and ensures through contractual and other arrangements that the data is also processed by them in accordance with the law and good data protection practice.
HOW LONG DATA IS STORED
Personal data is stored for the duration of the customer relationship. Where necessary, personal data may be kept longer if required by law or contractual obligations. In accordance with accounting legislation, invoice data are kept for six years from the date of the invoice.
Finlash Ltd will periodically assess the need for data retention in the light of applicable legislation. Finlash Ltd will correct inaccurate information.
WHAT RIGHTS AND INFLUENCE DO CUSTOMERS HAVE?
Withdrawal of consent:
Where we process your data on the basis of your consent, you may withdraw your consent at any time by notifying us, for example by sending an email to firstname.lastname@example.org.
If you wish to access your data, please contact us by sending an email to:
You have the right to obtain confirmation from us as to whether we are processing personal data about you and to know what personal data we are processing about you. You also have the right to receive additional information about the grounds for processing your personal data.
The right to have errors corrected:
You have the right to request that we correct any personal data we hold about you that is inaccurate, out of date or otherwise incomplete.
The right to object to direct marketing:
You may object to the processing of your personal data for direct marketing purposes by sending an email to email@example.com.
You have the right to object to processing:
Where we process your personal data on grounds of public interest or legitimate interest, you have the right to object to the processing of personal data concerning you, unless there is an overriding reason for the processing which overrides your rights or the processing is necessary for the exercise of a legal claim. Please note that in this situation, we will probably no longer be able to serve you.
How can I exercise my rights?
You can exercise your rights described above by contacting us, for example by sending an email to firstname.lastname@example.org.
Who can you contact?
All communications and requests regarding this Privacy Statement should be made in writing to our customer service team at email@example.com.
Registered customers have the right to object to the use of their data for direct marketing, e-mails and surveys. Please contact info@ finlash.com.
We will inform you immediately in the event of a security breach on our website.