Privacy statement
Customer and marketing register of Dot the i’s / Luomajärvi Ltd

Personal Data Act (523/99) 10 §
EU General Data Protection Regulation 2016/679

We reserve the right to change this privacy statement. We will announce the changes on this page, where you will always find the latest version of the description.

1.1 Introduction
This Privacy Statement comprises customer and marketing register of Dot the i’s / Luomajärvi Ltd . Dot the i’s / Luomajärvi Ltd is committed to protecting the rights of the individual and keeping personal information secure.

The treatment report describes, how Dot the i’s / Luomajärvi Ltd collect, use, store and protect personal information. The information in the register is not shared with third parties.

1.2 Register and contact details
Name and contact details of the controller:
Luomajärvi Ltd (ID 2176154-6)
Kirkkokatu 10, 33200 Tampere, Finland
susanne(at)dottheis.fi

1.3 Register and contact details
The personal data in the register will be used for the following purposes:
• management, maintenance, development, analysis and statistics of the contractual relationship between the Dot the i’s / Luomajärvi OLtd and the customer
• provision of services
• checking credit information
• invoicing and control and collection of payments
• customer communication
• direct marketing of Luomajärvi Ltd
• planning and developing the business and services of Dot the i’s / Luomajärvi Ltd

Existing personal data may be updated at the request of the data subject and on the basis of subcontractors or other registers. Personal data may be deleted at the request of the data subject or due to the termination of the partnership, provided that there is no legal or technical impediment to this.

1.4 Description of personal information collected from customers
We collect and process data only for specified uses.

As a general rule, we collect information from the person themselves. Information is obtained directly from the customer, for example, when the customer requests an offer, participates in competitions, contacts us by phone, e-mail, text message or in any other way.

The rigister contains the following personal information:
• name
• contact information (postal address, e-mail address and telephone number)
• company information such as name, business ID, domicile
• company contact information (name, address, telephone number, e-mail address, industry information and job title)
• order information
• contract and tender information
• customer relationship management information (e.g., ordering, purchasing, suspension, and cancellation information for products and services, shipping information, customer feedback, and complaints)
• billing, payment and collection information, and creditworthiness information

1.5 Transfer of personal data outside the EU or the EEA
The data is stored in Finland and will not be transferred outside the EU or the EEA. If the transfer of data outside the EU / EEA area becomes necessary due to the implementation of the service, the data controller shall ensure an adequate level of data protection by agreements as required by law and separate evaluations of the transfer of data shall be performed before the transfer.

1.6 A description of the retention and deletion periods for personal data
The personal data in the register will be kept confidential. Dot the i’s / Luomajärvi Ltd retains the data for as long as it is needed for the purpose for which it was collected and processed or for as long as required by law and regulatory data retention requirements.

1.7 Description of data protection
Dot the i’s / Luomajärvi Ltd ensures the security of the processing of customers' personal data and the confidentiality, integrity and usability of personal data through appropriate technical and administrative measures in accordance with Dot the i’s / Luomajärvi Ltd’s security principles. The databases in which the data are stored are technically and physically protected from outside access.

The electronic registers are password-protected and the user rights of the persons using the register are limited according to the person's tasks. The register is regularly backed up.

1.8 Processors of personal data
Dot the i’s / Luomajärvi Ltd uses reliable service providers to support the processing of personal data, for example in the maintenance and development tasks of IT systems and in the provision of services. These experts process personal data, if necessary, on behalf of Dot the i’s / Luomajärvi Ltd. The processing of data is in accordance with the legislation in force, which is guaranteed by agreements.

1.9 Audit reports
According to Luomajärvi Oy, the systems in which the register is processed have not been audited by the supervisory authority.

1.10 Rights of the data subject
• The right to check what information about him is stored
• The right to request the rectification or deletion of such data
• If the data is incorrect or incomplete, the data subject has the right to request the correction of the data, unless restricted by law. Rekisteröidyllä on oikeus pyytää tietojen poistamista, jos hän peruuttaa suostumuksen tietojen käsittelyyn eikä käsittelylle ole muuta perusteltua syytä.
• The data subject has the right to request the deletion of the data if he withdraws his consent to the processing of the data and there is no other justified reason for the processing. The right to object to the processing of the data The data subject always has the right to object to the processing of personal data for direct marketing purposes.
• Right to appeal to supervisory authorities. If the data subject is of the opinion that the controller has not processed personal data lawfully, the data subject may lodge a complaint with the supervisory authorities.

The above does not apply if and to the extent that the data subject has already received the information. If the data subject wishes to exercise the rights listed above, requests will always be assessed on a case-by-case and case-by-case basis and will be answered within one month of receipt of the request. Requests must be submitted in writing to the address or e-mail address provided in the contact information.