Privacy policy
Register and privacy policy
This is a register and privacy policy in accordance with the Company's Vanhan Aika Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Prepared on 25.05.2018.
1. Controller
Vanhan Aika, Suur-Savonkatu 11, 50100 MIKKELI
Business ID 2313088-7
2. Contact person responsible for the register
Henna Villanen
vanhanaika@gmail.com
+358 40 5329498
3. Name of the register
Company Vanhan Aika Customer Register
4. Legal basis and purpose of processing personal data
The legal basis for the processing of personal data in accordance with the EU's General Data Protection Regulation is the consent of the person.
The purpose of processing personal data is to enable customers to manage orders, communicate with customers and maintain customer relationships. The data can be used to develop and market Vanhan Aika operations without disclosing the data to third parties. The information is not used for marketing without customer approval.
5. Data content of the register
The information stored in the register is the information provided by the customer: the person's name, contact information (telephone number, email address, address), information on orders, changes thereto, and billing information.
6. Regular data sources
The regular source of information is the information provided by the customer when registering for the service, the information provided by the customer when using the website, or the information provided by the customer in writing or orally when the customer requests additional information or purchases the product. There are no other regular data sources.
7. Disclosures of data and transfer of data outside the EU or EEA in accordance with regulations
The data is processed only by the persons managing the register and, if necessary, by the administrators of the information system. Data will not be disclosed to other parties or outside the EU or EEA. Personal data will not be disclosed to third parties without the customer's consent.
When ordering products, the controller has the right to report the information needed to process the order to transport services such as Posti and Matkahuolto. The customer will receive the contact details and register description of the company to be used if they so wish.
8. Principles of registry protection
Care is taken in the processing of the register and the data processed through information systems is properly protected. When stored on Internet servers, the physical and digital security of their hardware is properly ensured. The controller ensures that stored data, server access rights and other data critical to the security of personal data are handled confidentially and only by the employees whose job description it belongs to.
9. Right of inspection and right to demand rectation of data
Each person in the register has the right to check their data stored in the register and to demand that any incorrect information be corrected or that incomplete information be completed. If a person wishes to check or request rectification of the data stored about him or her, the request must be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his or her identity. The controller will reply to the customer within the time limit set in the EU's General Data Protection Regulation (usually within one month).
10. Other rights related to the processing of personal data
A person in the register has the right to request the deletion of personal data concerning him or her from the register (the "right to be forgotten"). Data subjects also have other rights under the EU's General Data Protection Regulation, such as restricting the processing of personal data in certain situations. Requests must be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his or her identity. The controller will reply to the customer within the time limit set in the EU's General Data Protection Regulation (usually within one month).