Privacy statement of Laatukaluste Oy's customer register

Privacy statement in accordance with personal data legislation (special personal data act, 523/1999, § 10 and 24).

(description updated on 22 May 2018)

1. Registrar

Nivalan Laatukaluste Oy
Kalliontie 16
85500 Nivala
Business ID: 0683100-8, VAT registered.

2. Person handling registry matters

CEO Hannu-Pekka Havisto

email: laatukaluste@laatukaluste.com

3. Registry name

-Nivalan Laatukaluste Oy's customer register.

-Nivalan Laatukaluste Oy's marketing register

4. Purpose of use of personal data

Personal data is processed to manage and analyze customer relationships and related interactions, provide services, develop and plan business strategies, and conduct marketing and customer communications, which may include targeted electronic methods.

General requirements for the processing of personal data: Section 8 subsection 1 Paragraphs 1, 2, 5, 6 and 7 of the Personal Data Act.

5. Data content of the register

The register can process the following information about all registrants:

• first and last name
• contact information (postal address, telephone number, email address)
• start and end dates and nature of the customer relationship and/or substantive relationship
• direct marketing permissions and restrictions
• information on the use of electronic services and content (e.g. subscription to newsletters), technical data sent to the server by the data controller of the registered browser (e.g. IP address, browser, browser version, page from which the data subject has moved to our pages) and cookies sent to the browser of the registered user and related information
• information related to marketing and sales promotion, such as marketing measures aimed at the data subject and participation in them (e.g. participation in marketing lotteries and contests and events)
• information related to customer interactions and relevant relationships (e.g. purchase and cancellation information for paid products and services, order information for free products and services, delivery information, feedback, complaints and recordings of customer service events, such as calls, emails, chat and text messages)
• information about online behavior on Laatukaluste's websites and services (e.g. clicks on links, browsed internet pages, entry and exit sites)

In addition, the register can process the following information about those who have purchased a product and/or service or created a customer account:

• customer number
• personal identification number
• billing and collection information
• username
• password
• pseudonym
• information related to the identified user's service usage, such as feature utilization

6. Regular sources of information

Personal data concerning the registrant is collected from the registrant themselves, from various services that the registrant uses (e.g. Laatukaluste's online and mobile services and Laatukaluste's social media channels) and in connection with various marketing measures such as marketing activities such as lotteries, competitions, and events.

7. Disclosure and transfer of information

At the discretion of the data controller, data may be disclosed within the limits permitted and mandated by current legislation, for example, to partners of Laatukaluste, unless the data subject has prohibited the disclosure of data. In principle, data may only be disclosed for purposes that support the operational concept of Laatukaluste's customer register and where the purpose of use of the data is not incompatible with Laatukaluste's purposes.

Information can also be disclosed in a manner required by the requirements of competent authorities or other parties, based on valid legislation, and for historical or scientific research, as long as the information is anonymized.

8. Registry protection

The information contained in the register processed electronically is protected by firewalls, passwords and other generally accepted technical means in the field of information security. Manually maintained materials are stored in secure areas, ensuring unauthorized persons cannot access them.

Only authorized employees of the registrar and representatives of companies acting on its behalf have access to the information contained in the register with the right of use granted by the registrar.

9. Right of inspection, prohibition and correction

According to the personal data act, the registered person has the right to check what information about them has been stored in the register. Upon the registered person's request, we will correct, supplement, or delete any personal data that is incorrect, unnecessary, incomplete, or outdated with respect to the processing purpose. Information can be checked and updated by contacting us laatukaluste@laatukaluste.com. The request must be submitted in writing and signed. You can make an information request free of charge once a year.

The registered person has the right to opt out of the processing and disclosure of their information for direct advertising purposes by contacting customer service.

10. Changing the privacy statement

Laatukaluste is constantly developing its business and therefore reserves the right to change this privacy statement by announcing it in services. Changes can also be based on changes in legislation. Laatukaluste recommends registrants to familiarize themselves with the content of the privacy statement regularly.

11. Cookies

Cookies are utilized on the website. A cookie is a small text file sent to the user's computer and stored there. Cookies do not damage users' computers or files.

The company collects information from people visiting the sites. The information is used to improve the website's functionality and content, develop business and target marketing.

If an individual does not consent to the collection of their information, they must disable the cookie function in their browser. If disabling cookies is not possible, the individual should cease using the site to prevent data collection.

Some services may require cookies to function properly.