Data Protection and Registry Statement
This is the data protection and registration statement in accordance with the Hidastaja Art web store's Personal Data Act (Sections 10 and 24) and the EU's General Data Protection Regulation (GDPR). Prepared on 20 July 2019. Latest update 30 December 2021.
Hidastaja Art (ID 2419981-9)
Arinatie 16 B 33
2 The contact person responsible for the register
Arinatie 16 B 33
3 Register name
Hidastaja Art web store's customer register
4 Purpose and legal basis of personal data processing
Personal data is processed within the limits allowed by legislation for the management and development of the customer base and in communication and marketing aimed at customers. The customer has the right to refuse direct marketing aimed at him. The processing of personal data is based on the controller's legitimate interest, contractual relationship and/or compliance with the controller's statutory obligation. The processing of personal data can also be based on the data subject's consent, which then forms the legal basis for the processing in the applicable parts. The controller has a legitimate interest in engaging in factual, justified and legal sales and marketing activities, including related customer profiling.
5 Data content of the register
The register basically contains the following personal information about all registered persons:
- The person's first and last name
- Email address
- Local/postal address
- Telephone number
- Order details
- Posti/Matkahuolto tracking information for orders
6 Regular sources of information
Personal data is collected from the registered person himself. Personal data is also collected and updated within the limits of the applicable legislation from generally available sources, which are related to the implementation of the customer relationship between the controller and the registered person and with which the controller fulfills its obligations related to maintaining customer relationships.
7 Personal data retention period
The information collected in the register is stored only for as long and to the extent necessary in relation to the original or compatible purposes for which the personal information was collected. Information about the registered person is deleted from the register two years after the customer relationship of the registered person with the controller has ended, and the obligations and measures related to the customer relationship have been completed. For example, accounting documents are kept for six years after the end of the accounting period.
8 Disclosure of personal data to others
Personal data can be disclosed within the limits permitted by law to the partners of the Hidastaja Art web store, to the extent that it is necessary for the order given by the customer. Third parties to whom it is necessary for us to disclose information in order to process orders:
- Payment service providers: Klarna Checkout and Paytrail
- Transport companies: Posti and Matkahuolto
This Privacy Statement covers the use of the customer's data only by the Hidastaja Art web store. Please also familiarize yourself with the privacy statements of our partners.
9 Hidastajaart.fi visitor tracking
10 Principles of registry protection
The register is stored electronically and properly protected from outsiders with firewalls, passwords and other generally accepted technical protection measures in the field of information security. Materials containing personal data are stored in locked rooms, to which only designated and authorized persons have access due to their duties. The database containing personal data is on a server, which is kept in a locked state, to which only designated and authorized persons have access due to their duties.Access to databases and systems is only possible with separately issued personal user IDs and passwords. The registrar has limited access rights and authorizations to information systems and other storage platforms in such a way that the data can be viewed and processed only by persons necessary for their legal processing. Potential employees and other persons of the controller are committed to observe the obligation of confidentiality and to keep secret the information they receive in connection with the processing of personal data.
11 Rights of the website user regarding personal data
The customer has the right to check what information about him is stored in the register. Requests regarding the exercise of the data subject's rights shall be addressed in writing to the controller's contact person mentioned in point 1. Data inspection requests are answered in writing. If there are errors in the customer's data, the customer can submit a request to the controller to correct the error. The customer has the right to prohibit the use of their data for direct marketing or market and opinion surveys by notifying the controller.
The customer has the right to delete personal data processed by the Hidastaja Art web store at any time, except in the following situations:
- The customer has an open matter in customer service
- The customer has an open order that has not yet been fully delivered
- The customer is suspected of misuse of our services or the customer has misused our services in the last four years
- The customer has an unpaid debt to the Hidastaja Art web store, regardless of the payment method
- If the customer has made purchases in our web store, we have to keep personal data related to the purchase based on accounting regulations.
12 Changes to data protection policies
We reserve the right to change this privacy statement. The latest version of the privacy statement can be found on this page. If the changes in the updated privacy statement are significant, we will announce them in a visible way at the beginning of the statement and on the homepage of the Hidastaja Art web store.