Controller of the register
Smaku Events Oy, Rintamamiehentie 14, 06100 Porvoo
Company ID 2946825-6
Name of the register
Smaku Events Oy’s website and online store customer and marketing register.
Purpose of the register
Maintaining Smaku Events Oy’s customer register, archiving and processing customer orders, managing and maintaining customer relations, informing about our services and developing and managing the online store. The information can be used for operational development and for statistical purposes. Personal data is processed within the limits permitted and required by the Personal Data Act. We do not use the data for automatic decision-making or profiling.
Basis for keeping the register
The person has registered in Smaku Events Oy’s online store (www.smakuporvoo.fi or www.smakufestivals.com), bought products there or joined the mailing list.
The register contains at most the following information:
-customer’s first and last name
– information about orders
-answers to questions asked of the data subject in various campaigns or polls
The register contains only the information that the person himself has given us.
The information in Smaku Events Oy’s customer register can only be accessed by the company’s own staff or other persons who have the right to do so due to their work. All users of the register are bound by a duty of confidentiality. The register is in electronic form, and the related databases are protected against external data breaches by firewalls, passwords and other technical means.
Right of inspection, prohibition and correction
Right of inspection
The registered person can check the personal data we have stored.
Right to rectification of data
The registered person can ask to correct incorrect or incomplete information about him.
Right to object
The registered person can object to the processing of personal data if he feels that the personal data has been processed unlawfully.
Ban on direct marketing
The registrant has the right to prohibit the use of data for direct marketing.
Right of deletion
The registered person has the right to request the deletion of data if data processing is not necessary. We process the deletion request, after which we either delete the data or provide a justified reason why the data cannot be deleted.
It should be noted that the controller may have a statutory or other right not to delete the requested information. The registrar is obliged to keep the accounting material in accordance with the period (10 years) defined in the Accounting Act (Chapter 2, Section 10). For this reason, accounting-related material cannot be deleted before the deadline expires.
Withdrawal of consent
If the processing of the data subject’s personal data is based only on consent, and not on e.g. customership or membership, the data subject can withdraw the consent.
The registered person can appeal the decision to the Data Protection Commissioner
The registered person has the right to demand that we limit the processing of disputed data until the matter is resolved.
Right of appeal
The registered person has the right to file a complaint with the data protection commissioner if he feels that we violate the current data protection legislation when processing personal data.
Contact information of the data protection officer: www.tietosuoja.fi/fi/index/yhtstietiet.html
Regular data transfers
As a general rule, information is not disclosed outside of Smaku Events Oy for marketing purposes.
We have ensured that all our service providers comply with data protection legislation. We regularly use the following service providers:
– accounting office
– payment service broker Bambora PayForm
-web design company Haven Porvoo
Data is not transferred outside the EU.
Duration of processing
As a general rule, personal data is processed as long as the customership is valid.